This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa File: 3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa (raw, json) Hash identifier: dAv8397KxH06NFrEpCMxpGCTJ8fWDjy1a13maKgnPwg= Subject key identifier: 95:3D:43:9F:04:12:EC:95:17:DB:7E:FA:DC:E5:F9:4D:FD:10:77:99 Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 045DD1073CBA6B5661901134F440FAEA8E7815C9 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa Signing time: Thu 27 Nov 2025 16:00:02 +0000 ROA not before: Thu 27 Nov 2025 15:55:02 +0000 ROA not after: Thu 26 Nov 2026 16:00:02 +0000 asID: 141122 IP address blocks: 103.157.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5d:d1:07:3c:ba:6b:56:61:90:11:34:f4:40:fa:ea:8e:78:15:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Nov 27 15:55:02 2025 GMT Not After : Nov 26 16:00:02 2026 GMT Subject: CN=953D439F0412EC9517DB7EFADCE5F94DFD107799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:d2:32:67:48:c3:22:a9:55:3e:de:14:a0: 7c:96:03:e0:e7:e6:ad:e2:d5:8b:d8:e6:d6:f1:6a: e1:5e:a5:68:9e:77:51:09:3d:09:89:48:33:fd:4a: 60:c8:da:d3:41:27:3c:18:9a:d1:90:0d:27:6c:54: a3:39:b5:19:f3:dc:44:30:80:1d:2d:74:8c:d5:a8: c1:39:df:93:35:31:e7:fd:19:d9:90:e5:dd:ad:bd: 05:3b:9f:fc:b1:17:9f:0c:26:e7:3d:87:b4:03:1a: 7f:34:56:1a:04:d4:aa:62:86:65:86:a9:d4:aa:d0: 76:1d:76:09:38:cc:df:ad:05:32:be:ac:38:1f:4d: 08:79:63:d0:31:4c:1c:94:68:5f:c3:b8:cd:8f:2c: 43:25:6e:e5:ba:c3:04:27:e6:47:2f:e6:5c:66:8a: 60:8a:22:26:91:f1:e3:3a:83:63:05:90:48:e8:b2: 3a:ca:54:f9:80:e3:94:34:20:08:81:55:58:88:12: 33:78:8f:e2:10:e0:f1:be:64:c4:32:52:74:db:c0: c0:a8:2d:6f:f4:be:4c:8b:d5:52:f2:b3:4f:6c:a0: 06:7b:98:bf:9b:82:6a:10:8c:e2:e5:09:e5:17:b4: 96:3a:cd:8e:53:a8:e2:62:7d:4a:e3:90:3d:58:00: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3D:43:9F:04:12:EC:95:17:DB:7E:FA:DC:E5:F9:4D:FD:10:77:99 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139322e302f32342d3234203d3e20313431313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.192.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:6c:37:ff:ec:d9:8e:47:96:33:62:c0:43:9c:6c:cb:82:c0: d4:60:a0:3c:ae:b3:18:d9:c1:d0:04:29:d5:74:ac:a8:46:40: 82:96:ea:98:e2:a7:3c:d1:28:10:9d:ce:65:b5:4c:50:1a:ab: e6:6d:41:9f:55:16:4d:7b:16:15:9a:a5:4f:c1:7d:e2:ce:63: 5c:73:e5:f3:a6:d8:4a:3c:71:eb:4c:ef:6b:d7:c1:98:09:b6: ef:01:3c:14:06:53:aa:14:17:a7:d2:16:6d:2a:d2:12:8f:96: 6a:4d:f0:4e:e7:fe:73:89:01:e9:b7:6a:03:5e:c6:6b:9d:74: 94:73:01:95:48:f9:84:13:d1:0d:96:82:42:f3:53:d5:69:f3: dd:7c:26:3e:70:7c:9f:80:d5:07:e5:0d:7b:b3:24:6f:e9:43: c3:6c:73:a7:3d:23:32:52:1b:c8:6f:72:7a:b7:90:79:57:44: 14:c6:26:83:c1:42:dc:ab:34:b2:d5:3a:bb:90:ab:08:cf:16: 8a:f7:5f:2d:1d:b6:98:ef:83:1c:0e:9b:5c:f0:56:20:71:90: 7f:c4:ae:d9:87:57:7f:6d:68:79:09:15:4f:c2:2f:7f:4c:97: be:96:bb:fe:3c:3d:24:30:fe:e1:1f:91:e9:9f:39:b0:b6:a7: ab:0d:7e:7d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBF3RBzy6a1ZhkBE09ED66o54FckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTExMjcxNTU1MDJaFw0yNjExMjYxNjAwMDJaMDMxMTAvBgNV BAMTKDk1M0Q0MzlGMDQxMkVDOTUxN0RCN0VGQURDRTVGOTRERkQxMDc3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fdIyZ0jDIqlVPt4UoHyWA+Dn 5q3i1YvY5tbxauFepWied1EJPQmJSDP9SmDI2tNBJzwYmtGQDSdsVKM5tRnz3EQw gB0tdIzVqME535M1Mef9GdmQ5d2tvQU7n/yxF58MJuc9h7QDGn80VhoE1KpihmWG qdSq0HYddgk4zN+tBTK+rDgfTQh5Y9AxTByUaF/DuM2PLEMlbuW6wwQn5kcv5lxm imCKIiaR8eM6g2MFkEjosjrKVPmA45Q0IAiBVViIEjN4j+IQ4PG+ZMQyUnTbwMCo LW/0vkyL1VLys09soAZ7mL+bgmoQjOLlCeUXtJY6zY5TqOJifUrjkD1YAPnJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlT1DnwQS7JUX23763OX5Tf0Qd5kwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmY1Y2U3LWIzNmItNDczZC1h NWJlLTljMDM1MGQxZjM4Mi8wLzMxMzAzMzJlMzEzNTM3MmUzMTM5MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnncAwDQYJ KoZIhvcNAQELBQADggEBABxsN//s2Y5HljNiwEOcbMuCwNRgoDyusxjZwdAEKdV0 rKhGQIKW6pjipzzRKBCdzmW1TFAaq+ZtQZ9VFk17FhWapU/BfeLOY1xz5fOm2Eo8 cetM72vXwZgJtu8BPBQGU6oUF6fSFm0q0hKPlmpN8E7n/nOJAem3agNexmuddJRz AZVI+YQT0Q2WgkLzU9Vp8918Jj5wfJ+A1QflDXuzJG/pQ8Nsc6c9IzJSG8hvcnq3 kHlXRBTGJoPBQtyrNLLVOruQqwjPFor3Xy0dtpjvgxwOm1zwViBxkH/ErtmHV39t aHkJFU/CL39Ml76Wu/48PSQw/uEfkemfObC2p6sNfn0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:50 2025 by rpki-client