This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa File: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps= Subject key identifier: 31:F7:0F:16:38:1E:DC:3B:5A:12:5A:3A:82:FA:E2:15:09:3D:38:EB Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 7593909BD895FA36DEBB920FC0AD31B77F502D5B Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa Signing time: Wed 12 Nov 2025 19:00:00 +0000 ROA not before: Wed 12 Nov 2025 18:55:00 +0000 ROA not after: Wed 11 Nov 2026 19:00:00 +0000 asID: 9341 IP address blocks: 103.181.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:93:90:9b:d8:95:fa:36:de:bb:92:0f:c0:ad:31:b7:7f:50:2d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Nov 12 18:55:00 2025 GMT Not After : Nov 11 19:00:00 2026 GMT Subject: CN=31F70F16381EDC3B5A125A3A82FAE215093D38EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:33:59:d5:9b:5d:df:a4:41:0b:ae:94:04: 7f:e3:e8:28:71:95:db:19:1e:6e:ae:b1:30:59:7c: a9:88:d6:10:43:fa:52:4a:5a:4d:03:8f:98:2b:f1: 7b:b1:c2:1a:ef:0b:a0:ed:a0:e0:af:eb:48:df:50: ba:c2:61:39:23:2f:a1:a6:8c:17:c6:03:9d:cd:98: a2:08:aa:cc:de:19:c7:f6:39:a8:90:2f:5e:dd:42: 96:c6:df:ad:4b:17:bd:52:66:10:83:0b:17:89:20: 8c:05:86:cc:06:7f:0f:bd:02:a0:6a:23:22:09:1e: 9e:f2:34:ea:f9:da:a2:1a:d7:ed:a7:b0:3c:a5:0a: f7:38:d5:d9:4e:18:e8:5e:9e:a3:45:96:90:91:ef: 3c:3d:71:c8:60:82:08:c8:5c:59:2c:01:8c:2c:03: a7:6f:48:73:33:30:64:84:b3:28:f4:cf:e0:9b:a1: a0:92:72:ab:3b:94:46:77:12:d1:07:79:6c:96:a0: b6:78:d7:78:3b:91:13:e9:18:b6:f0:8a:2a:ac:a7: 13:fa:17:74:ae:f5:49:e1:39:15:47:bb:64:3d:e1: a3:5c:3f:ec:5a:83:7d:83:e8:dd:84:45:c5:97:bd: 02:89:6e:bd:28:18:79:88:fd:1d:f7:6f:07:a8:8b: dc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F7:0F:16:38:1E:DC:3B:5A:12:5A:3A:82:FA:E2:15:09:3D:38:EB X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.250.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:38:89:a1:a9:6b:ca:f9:00:ca:49:07:b8:3a:cc:e3:7e:d0: 09:b9:7b:4c:ea:be:01:d1:58:74:77:ba:06:85:27:23:3c:71: c0:e5:ee:28:b2:3e:8d:73:75:54:7f:5a:63:a0:4a:24:3e:a0: 38:ad:14:46:8a:6b:59:c3:d2:bf:7b:4b:4b:40:41:64:e9:1d: a9:74:56:ab:f5:1f:1b:cb:d7:2a:23:ef:70:30:bd:77:b8:a5: 39:ec:ed:ec:4a:7a:07:cd:3e:d4:66:e2:f8:25:84:20:0c:2b: ca:ef:68:5e:f3:b1:49:51:b3:15:08:c4:be:bb:09:91:27:67: 0b:65:f1:c7:ad:ba:f1:e5:c1:93:f1:09:db:62:6f:ce:d5:fd: 2a:bb:36:42:83:36:a1:0a:9c:34:72:94:65:62:00:3c:a7:6d: 9f:7c:9e:e5:7b:14:ff:48:91:05:5d:58:5b:6d:89:f2:c1:bb: 3e:e7:1d:6a:e2:b2:89:23:a5:0f:87:16:f1:9e:fe:66:bf:33: 59:b4:02:d6:0b:c9:3b:11:b6:3d:08:16:0c:f7:92:9e:25:7d: a6:f7:9b:27:33:6c:cb:00:e5:5a:b7:5f:88:6b:f2:ac:83:04: 49:ad:fa:b7:ce:e3:66:b6:ae:fb:8a:2b:66:35:b0:b8:88:ce: ef:4d:75:b8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdZOQm9iV+jbeu5IPwK0xt39QLVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTExMTIxODU1MDBaFw0yNjExMTExOTAwMDBaMDMxMTAvBgNV BAMTKDMxRjcwRjE2MzgxRURDM0I1QTEyNUEzQTgyRkFFMjE1MDkzRDM4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2TNZ1Ztd36RBC66UBH/j6Chx ldsZHm6usTBZfKmI1hBD+lJKWk0Dj5gr8XuxwhrvC6DtoOCv60jfULrCYTkjL6Gm jBfGA53NmKIIqszeGcf2OaiQL17dQpbG361LF71SZhCDCxeJIIwFhswGfw+9AqBq IyIJHp7yNOr52qIa1+2nsDylCvc41dlOGOhenqNFlpCR7zw9cchgggjIXFksAYws A6dvSHMzMGSEsyj0z+CboaCScqs7lEZ3EtEHeWyWoLZ413g7kRPpGLbwiiqspxP6 F3Su9UnhORVHu2Q94aNcP+xag32D6N2ERcWXvQKJbr0oGHmI/R33bweoi9y3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMfcPFjge3DtaElo6gvriFQk9OOswHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYTU4OWVmLTlmM2QtNDNiYy1i YTMwLWZhMzI2YjcxZjc4Ny8wLzMxMzAzMzJlMzEzODMxMmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe1+jANBgkqhkiG 9w0BAQsFAAOCAQEAOjiJoalryvkAykkHuDrM437QCbl7TOq+AdFYdHe6BoUnIzxx wOXuKLI+jXN1VH9aY6BKJD6gOK0URoprWcPSv3tLS0BBZOkdqXRWq/UfG8vXKiPv cDC9d7ilOezt7Ep6B80+1Gbi+CWEIAwryu9oXvOxSVGzFQjEvrsJkSdnC2Xxx626 8eXBk/EJ22JvztX9Krs2QoM2oQqcNHKUZWIAPKdtn3ye5XsU/0iRBV1YW22J8sG7 PucdauKyiSOlD4cW8Z7+Zr8zWbQC1gvJOxG2PQgWDPeSniV9pvebJzNsywDlWrdf iGvyrIMESa36t87jZrau+4orZjWwuIjO7011uA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:12 2025 by rpki-client