This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa File: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (raw, json) Hash identifier: zkfW7G82q4G/1aqENxbcKsFNsfS8k4+ZqlphVmUFO1g= Subject key identifier: 3C:F4:EC:F9:6A:55:57:AD:2F:33:83:E8:E9:EA:D2:49:D5:D7:3B:47 Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 191F214AAA28915384C2DAB1A7CDC6D95A596691 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa Signing time: Wed 19 Nov 2025 20:00:03 +0000 ROA not before: Wed 19 Nov 2025 19:55:03 +0000 ROA not after: Wed 18 Nov 2026 20:00:03 +0000 asID: 149409 IP address blocks: 103.183.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1f:21:4a:aa:28:91:53:84:c2:da:b1:a7:cd:c6:d9:5a:59:66:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Nov 19 19:55:03 2025 GMT Not After : Nov 18 20:00:03 2026 GMT Subject: CN=3CF4ECF96A5557AD2F3383E8E9EAD249D5D73B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:eb:9e:17:bb:20:b0:fb:d3:b7:ad:ed:56: cb:e8:ce:91:ba:83:11:0b:49:08:4c:63:67:f0:9d: 87:d7:7a:62:fa:7f:69:73:44:3e:83:5b:c9:77:64: 0d:c6:a6:05:a3:4a:dd:50:b9:d7:e4:8f:f3:f3:69: e3:7f:60:41:2b:d9:c8:3e:19:65:9d:4c:81:13:65: 3e:92:40:78:b4:ce:04:6c:39:0b:e4:62:20:9e:8d: 82:37:ca:30:1a:e4:b4:7d:db:60:bc:7c:fa:a7:58: c4:eb:34:a0:b6:ad:83:83:50:a0:2f:79:7a:e5:fb: a4:55:45:32:f6:9b:d4:9e:42:3b:8a:6f:ad:6d:2c: 72:28:db:e4:6c:d8:aa:fa:9d:55:90:e6:36:4f:86: 4f:1c:45:5e:36:be:5a:99:37:c1:3a:9f:44:38:3e: 16:a7:60:1d:5b:75:40:aa:b1:ae:37:b1:7f:94:1f: 28:06:6b:20:c4:54:f1:9b:43:a1:45:20:ba:f6:f9: 02:94:f9:c0:f9:d6:ff:7d:c3:2a:1c:07:dd:44:ea: 7a:cc:94:1d:11:6b:fa:f3:3c:9e:08:37:88:55:e9: 82:13:0b:69:91:8d:d5:eb:35:44:97:95:fd:9a:5d: 3a:66:a1:d8:17:db:5e:e3:c2:c3:56:db:84:af:85: de:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:EC:F9:6A:55:57:AD:2F:33:83:E8:E9:EA:D2:49:D5:D7:3B:47 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.58.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:04:d0:17:56:c4:a6:f9:e0:02:d1:64:01:c0:5d:fe:4f:90: 93:c2:24:1c:c0:4d:8c:37:a2:46:0f:af:9d:e6:a9:d7:f6:3d: 6a:35:e8:d9:89:09:62:b5:54:8c:d8:63:68:7a:89:19:0c:c6: c5:18:71:ec:02:6d:29:69:f5:88:d7:77:c4:bb:12:64:65:be: ee:de:8b:61:b2:73:bb:aa:a2:32:2a:11:b4:b5:b6:ca:b8:6f: c5:28:df:a0:2e:ce:86:e5:8f:57:62:87:0f:15:91:d5:ff:ea: b7:f2:7d:36:1f:e4:f9:6c:b9:a0:95:57:9d:aa:dd:c7:b2:6c: 0d:88:fc:0d:9f:83:0c:f9:7f:b3:38:58:de:42:01:36:23:9d: b6:49:2a:38:24:aa:f5:bb:ac:ca:d3:36:ba:16:e8:27:2d:e5: 20:42:96:79:7a:2e:cc:08:33:48:b9:1f:0a:52:25:c8:56:5e: f7:ab:62:83:12:c6:e4:9b:e8:2d:40:50:55:ba:af:47:78:33: fb:dc:ee:b3:34:36:9a:03:3b:fd:55:59:5a:06:b4:81:58:96: 74:71:c0:75:99:14:c6:28:fc:bf:6b:7d:7f:29:bc:b5:36:94: 4f:9b:34:d9:d4:cf:a3:3e:16:7d:d5:f1:41:c0:3e:a5:4e:92: 9f:5a:88:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGR8hSqookVOEwtqxp83G2VpZZpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTExMTkxOTU1MDNaFw0yNjExMTgyMDAwMDNaMDMxMTAvBgNV BAMTKDNDRjRFQ0Y5NkE1NTU3QUQyRjMzODNFOEU5RUFEMjQ5RDVENzNCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzS+ueF7sgsPvTt63tVsvozpG6 gxELSQhMY2fwnYfXemL6f2lzRD6DW8l3ZA3GpgWjSt1Qudfkj/PzaeN/YEEr2cg+ GWWdTIETZT6SQHi0zgRsOQvkYiCejYI3yjAa5LR922C8fPqnWMTrNKC2rYODUKAv eXrl+6RVRTL2m9SeQjuKb61tLHIo2+Rs2Kr6nVWQ5jZPhk8cRV42vlqZN8E6n0Q4 PhanYB1bdUCqsa43sX+UHygGayDEVPGbQ6FFILr2+QKU+cD51v99wyocB91E6nrM lB0Ra/rzPJ4IN4hV6YITC2mRjdXrNUSXlf2aXTpmodgX217jwsNW24Svhd7JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPPTs+WpVV60vM4Po6erSSdXXO0cwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5OWI2MDRmLTE1NzgtNGEwYi04 ZjdhLTU4ZDlmMTNjOTc2OS8wLzMxMzAzMzJlMzEzODMzMmUzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7c6MA0GCSqG SIb3DQEBCwUAA4IBAQCPBNAXVsSm+eAC0WQBwF3+T5CTwiQcwE2MN6JGD6+d5qnX 9j1qNejZiQlitVSM2GNoeokZDMbFGHHsAm0pafWI13fEuxJkZb7u3othsnO7qqIy KhG0tbbKuG/FKN+gLs6G5Y9XYocPFZHV/+q38n02H+T5bLmglVedqt3HsmwNiPwN n4MM+X+zOFjeQgE2I522SSo4JKr1u6zK0za6FugnLeUgQpZ5ei7MCDNIuR8KUiXI Vl73q2KDEsbkm+gtQFBVuq9HeDP73O6zNDaaAzv9VVlaBrSBWJZ0ccB1mRTGKPy/ a31/Kby1NpRPmzTZ1M+jPhZ91fFBwD6lTpKfWoga -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:53 2025 by rpki-client