This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa File: 3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa (raw, json) Hash identifier: aO6ag29zhhjNXBpY8yr771GUZ2dWF2vzBvbIftVbJOY= Subject key identifier: DB:D3:1A:95:31:2B:BF:05:A5:F8:3E:01:6C:02:EA:28:A8:FD:65:B0 Certificate issuer: /CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Certificate serial: 398ED4E2FDEC3970E079AD5BAD3CF62709544674 Authority key identifier: FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa Signing time: Thu 27 Nov 2025 11:00:01 +0000 ROA not before: Thu 27 Nov 2025 10:55:01 +0000 ROA not after: Thu 26 Nov 2026 11:00:01 +0000 asID: 141083 IP address blocks: 103.162.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 14:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8e:d4:e2:fd:ec:39:70:e0:79:ad:5b:ad:3c:f6:27:09:54:46:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF947BE188D359EA7EDF887D86DA2C7CC7460B70 Validity Not Before: Nov 27 10:55:01 2025 GMT Not After : Nov 26 11:00:01 2026 GMT Subject: CN=DBD31A95312BBF05A5F83E016C02EA28A8FD65B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:dd:be:39:e7:25:6e:4a:b4:74:5f:d1:fc:f0: 7c:d7:34:d5:fd:23:06:8e:da:3d:1d:e5:fe:07:4f: 32:8f:9e:14:80:18:7d:21:8e:4a:b4:c5:02:fb:ee: 24:14:c5:0b:3a:a1:b0:bc:d8:db:a7:14:56:c5:79: c3:70:bc:7d:b5:90:1b:1f:95:90:85:9b:2d:fd:1e: e2:f7:af:6c:4f:b2:6a:4e:e1:88:16:ae:9a:06:90: 13:9a:d5:fc:97:81:43:90:b6:8c:b8:53:5b:75:07: 07:01:29:15:56:f2:b2:9d:f6:b6:91:46:fb:dd:54: 84:10:db:16:03:c4:57:a1:ef:5b:34:5e:2c:e2:a0: 88:60:9b:f2:7f:4a:02:b3:45:1d:32:89:9d:e8:2c: 06:b4:25:68:cf:0d:2e:5c:58:34:f7:9a:1f:f5:93: f3:7e:cd:ce:47:0e:3c:9e:db:b4:b0:57:41:d9:aa: 76:5b:1e:b1:70:d3:f8:32:d9:a1:18:46:d3:7e:dd: 90:b0:12:7f:3e:f6:5a:58:d7:fd:0d:84:e6:03:23: 12:f8:3e:b9:f4:c5:22:d4:27:03:b8:8b:c8:de:1d: d4:b9:69:53:df:7a:a8:03:c9:29:46:d4:c8:c8:10: 8a:0c:fa:4d:a4:42:5d:aa:9e:74:df:16:ce:e3:8e: 59:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D3:1A:95:31:2B:BF:05:A5:F8:3E:01:6C:02:EA:28:A8:FD:65:B0 X509v3 Authority Key Identifier: keyid:FF:94:7B:E1:88:D3:59:EA:7E:DF:88:7D:86:DA:2C:7C:C7:46:0B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF947BE188D359EA7EDF887D86DA2C7CC7460B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8a9237a-726c-4c19-9b4e-7b94b1424c4b/0/3130332e3136322e3134312e302f32342d3234203d3e20313431303833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.141.0/24 Signature Algorithm: sha256WithRSAEncryption a7:88:96:43:c9:b0:4f:c5:08:23:0c:7f:71:40:63:06:d7:70: 95:ef:ff:9b:ef:c6:00:1e:72:b3:1e:2b:a0:c0:7a:43:9b:54: 16:92:e8:11:a4:76:c5:3b:fd:81:4f:07:90:00:61:41:8b:47: a1:0c:2f:d6:3d:8c:38:f0:7e:f4:76:54:b2:c0:50:d6:8f:20: b9:86:f5:10:83:9b:b9:33:ed:fd:2b:7e:ba:2a:03:cc:aa:43: 0d:6b:c5:a3:e8:f5:c2:3e:9b:7a:54:18:09:c2:a3:e2:56:7a: 7f:80:fe:86:49:f8:5a:0b:b6:73:a6:7f:c5:56:22:68:0a:0f: f0:09:0b:65:be:37:fe:96:33:95:49:43:c3:11:76:25:12:a2: e1:fb:d1:cb:53:0b:d4:a9:81:72:c9:07:fc:cf:aa:3b:00:e2: f8:67:e5:ab:b0:36:d5:6e:13:e7:54:be:02:12:19:8d:d0:1f: bf:34:d9:f3:87:30:4d:40:0d:53:73:79:b3:74:c2:ec:1f:fe: 2b:ae:08:c9:ae:3a:7b:1e:8c:45:1c:d2:d5:65:88:0d:5f:c9: c7:82:88:43:8a:01:d4:40:19:d9:a4:26:12:d3:e1:1b:34:0a: 3e:eb:89:48:62:f5:85:de:af:0d:73:fe:46:dd:24:ad:06:61: b0:70:5e:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOY7U4v3sOXDgea1brTz2JwlURnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0ND NzQ2MEI3MDAeFw0yNTExMjcxMDU1MDFaFw0yNjExMjYxMTAwMDFaMDMxMTAvBgNV BAMTKERCRDMxQTk1MzEyQkJGMDVBNUY4M0UwMTZDMDJFQTI4QThGRDY1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj3b455yVuSrR0X9H88HzXNNX9 IwaO2j0d5f4HTzKPnhSAGH0hjkq0xQL77iQUxQs6obC82NunFFbFecNwvH21kBsf lZCFmy39HuL3r2xPsmpO4YgWrpoGkBOa1fyXgUOQtoy4U1t1BwcBKRVW8rKd9raR RvvdVIQQ2xYDxFeh71s0XizioIhgm/J/SgKzRR0yiZ3oLAa0JWjPDS5cWDT3mh/1 k/N+zc5HDjye27SwV0HZqnZbHrFw0/gy2aEYRtN+3ZCwEn8+9lpY1/0NhOYDIxL4 Prn0xSLUJwO4i8jeHdS5aVPfeqgDySlG1MjIEIoM+k2kQl2qnnTfFs7jjllVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU29MalTErvwWl+D4BbALqKKj9ZbAwHwYDVR0j BBgwFoAU/5R74YjTWep+34h9htosfMdGC3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGE5MjM3YS03MjZjLTRjMTktOWI0ZS03Yjk0YjE0MjRjNGIvMC9GRjk0N0JFMTg4 RDM1OUVBN0VERjg4N0Q4NkRBMkM3Q0M3NDYwQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NDdCRTE4OEQzNTlFQTdFREY4ODdEODZEQTJDN0NDNzQ2 MEI3MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YTkyMzdhLTcyNmMtNGMxOS05 YjRlLTdiOTRiMTQyNGM0Yi8wLzMxMzAzMzJlMzEzNjMyMmUzMTM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoo0wDQYJ KoZIhvcNAQELBQADggEBAKeIlkPJsE/FCCMMf3FAYwbXcJXv/5vvxgAecrMeK6DA ekObVBaS6BGkdsU7/YFPB5AAYUGLR6EML9Y9jDjwfvR2VLLAUNaPILmG9RCDm7kz 7f0rfroqA8yqQw1rxaPo9cI+m3pUGAnCo+JWen+A/oZJ+FoLtnOmf8VWImgKD/AJ C2W+N/6WM5VJQ8MRdiUSouH70ctTC9SpgXLJB/zPqjsA4vhn5auwNtVuE+dUvgIS GY3QH7802fOHME1ADVNzebN0wuwf/iuuCMmuOnsejEUc0tVliA1fyceCiEOKAdRA GdmkJhLT4Rs0Cj7riUhi9YXerw1z/kbdJK0GYbBwXkA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:04:12 2025 by rpki-client