This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa File: 3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa (raw, json) Hash identifier: fSTjDiCkhPJTilhENB30IOj5dwzmYI75peRH7bkO+gw= Subject key identifier: C2:B2:0F:C6:F7:3C:88:C1:43:02:7D:10:A6:94:06:76:16:43:EE:D2 Certificate issuer: /CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Certificate serial: 5D29CC754023C09181FEC2EFAA8591A4DB03F8C1 Authority key identifier: 03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa Signing time: Thu 27 Nov 2025 17:00:02 +0000 ROA not before: Thu 27 Nov 2025 16:55:02 +0000 ROA not after: Thu 26 Nov 2026 17:00:02 +0000 asID: 141122 IP address blocks: 103.157.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:29:cc:75:40:23:c0:91:81:fe:c2:ef:aa:85:91:a4:db:03:f8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=035AD6A9B712C4FA76B7E823A79F6410B449136D Validity Not Before: Nov 27 16:55:02 2025 GMT Not After : Nov 26 17:00:02 2026 GMT Subject: CN=C2B20FC6F73C88C143027D10A69406761643EED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:03:76:55:04:6d:53:c2:1e:30:ae:d4:7e: 92:ab:f7:41:80:03:33:ae:07:4a:ec:0a:b7:8d:97: e9:dd:76:a1:ca:ae:8a:f0:c3:db:c0:b7:f6:85:19: c8:32:a6:64:d4:59:75:02:db:59:44:6f:3e:94:43: 82:61:cd:6d:50:d1:e6:e3:19:58:de:cc:bb:82:c1: f5:84:cd:5a:1c:b3:e2:f1:99:ff:d6:bf:9e:ad:3f: c1:b4:32:99:69:d2:3d:d2:41:5e:db:a6:27:46:f8: eb:3e:20:1a:44:30:cf:d9:18:4d:8b:4f:df:ec:b3: 4d:d4:f9:7d:f1:f2:34:f8:02:d6:ad:a0:c9:69:60: fd:13:c8:f7:2a:a6:3f:88:ac:58:a5:24:cf:1e:ff: 9b:a4:1a:57:19:9a:ef:0f:84:f5:29:c8:8e:bf:2e: 99:a9:66:7b:49:d8:a6:84:57:21:f4:6b:4e:36:e0: fb:91:f6:47:2e:c2:fa:4a:5d:2d:92:75:01:1b:72: c6:63:c6:8b:dd:b4:55:88:53:5d:a7:ea:ad:c6:27: ca:d3:42:1f:38:ad:28:41:a8:8d:35:0e:64:f6:f3: 00:a7:11:58:58:24:08:df:d6:fb:32:7b:29:fd:b5: 44:ab:b9:a9:a0:32:99:21:79:39:88:59:6b:87:0d: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:0F:C6:F7:3C:88:C1:43:02:7D:10:A6:94:06:76:16:43:EE:D2 X509v3 Authority Key Identifier: keyid:03:5A:D6:A9:B7:12:C4:FA:76:B7:E8:23:A7:9F:64:10:B4:49:13:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/035AD6A9B712C4FA76B7E823A79F6410B449136D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/035AD6A9B712C4FA76B7E823A79F6410B449136D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6f5ce7-b36b-473d-a5be-9c0350d1f382/0/3130332e3135372e3139332e302f32342d3234203d3e20313431313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.193.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:20:b8:ee:8c:f8:66:cf:81:eb:3d:e9:a6:48:f8:8d:f3:c8: d8:99:11:31:15:86:9a:ce:b0:c3:08:d4:69:5c:95:4e:15:9e: 78:ab:f0:19:fc:c6:13:f3:b8:f4:fc:b3:f9:9d:88:33:77:6c: 89:da:c2:23:8a:82:78:02:c4:d2:c1:a5:df:9b:d3:79:66:ef: b5:98:8b:4e:52:51:44:e5:53:13:83:3d:fb:64:cb:69:d7:c3: ea:b0:48:8c:1e:e6:8c:e3:d2:87:24:7c:56:aa:f3:94:66:13: 21:11:87:33:e1:d9:30:57:d8:34:04:5d:e7:03:0a:43:29:21: ef:16:56:eb:9c:a0:94:f5:b3:d0:2f:48:ea:83:0b:c5:a7:29: ed:cc:03:36:dd:ee:58:7a:05:d6:56:57:dc:df:53:dc:e5:ef: 2f:91:4b:df:a6:fe:04:83:e5:5c:74:1c:1b:5c:fc:c3:a4:47: bf:68:c6:61:a1:12:19:20:8f:02:f7:03:f3:50:a7:32:8d:90: 6c:1c:31:ec:9c:6b:23:44:ba:3c:86:51:91:73:b1:ce:0a:a1: 78:44:38:d3:cc:77:49:b6:c7:9c:89:38:30:8d:80:16:39:27: 01:31:f6:74:0d:53:70:fe:ed:5c:a4:99:5f:15:34:7c:b4:a9: f5:38:3c:84 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXSnMdUAjwJGB/sLvqoWRpNsD+MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBC NDQ5MTM2RDAeFw0yNTExMjcxNjU1MDJaFw0yNjExMjYxNzAwMDJaMDMxMTAvBgNV BAMTKEMyQjIwRkM2RjczQzg4QzE0MzAyN0QxMEE2OTQwNjc2MTY0M0VFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqQN2VQRtU8IeMK7UfpKr90GA AzOuB0rsCreNl+nddqHKrorww9vAt/aFGcgypmTUWXUC21lEbz6UQ4JhzW1Q0ebj GVjezLuCwfWEzVocs+Lxmf/Wv56tP8G0Mplp0j3SQV7bpidG+Os+IBpEMM/ZGE2L T9/ss03U+X3x8jT4AtatoMlpYP0TyPcqpj+IrFilJM8e/5ukGlcZmu8PhPUpyI6/ LpmpZntJ2KaEVyH0a0424PuR9kcuwvpKXS2SdQEbcsZjxovdtFWIU12n6q3GJ8rT Qh84rShBqI01DmT28wCnEVhYJAjf1vsyeyn9tUSruamgMpkheTmIWWuHDUgjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwrIPxvc8iMFDAn0QppQGdhZD7tIwHwYDVR0j BBgwFoAUA1rWqbcSxPp2t+gjp59kELRJE20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZmNWNlNy1iMzZiLTQ3M2QtYTViZS05YzAzNTBkMWYzODIvMC8wMzVBRDZBOUI3 MTJDNEZBNzZCN0U4MjNBNzlGNjQxMEI0NDkxMzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM1QUQ2QTlCNzEyQzRGQTc2QjdFODIzQTc5RjY0MTBCNDQ5 MTM2RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmY1Y2U3LWIzNmItNDczZC1h NWJlLTljMDM1MGQxZjM4Mi8wLzMxMzAzMzJlMzEzNTM3MmUzMTM5MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnncEwDQYJ KoZIhvcNAQELBQADggEBADsguO6M+GbPges96aZI+I3zyNiZETEVhprOsMMI1Glc lU4Vnnir8Bn8xhPzuPT8s/mdiDN3bInawiOKgngCxNLBpd+b03lm77WYi05SUUTl UxODPftky2nXw+qwSIwe5ozj0ockfFaq85RmEyERhzPh2TBX2DQEXecDCkMpIe8W VuucoJT1s9AvSOqDC8WnKe3MAzbd7lh6BdZWV9zfU9zl7y+RS9+m/gSD5Vx0HBtc /MOkR79oxmGhEhkgjwL3A/NQpzKNkGwcMeycayNEujyGUZFzsc4KoXhEONPMd0m2 x5yJODCNgBY5JwEx9nQNU3D+7VykmV8VNHy0qfU4PIQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:35 2025 by rpki-client