This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa File: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (raw, json) Hash identifier: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ= Subject key identifier: FD:2D:CA:6B:02:57:C3:32:99:56:9F:DB:C3:16:61:6B:90:0C:ED:3C Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 2BEE14AC5908721B826572A10D1F2FC188593F75 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa Signing time: Sat 22 Nov 2025 07:00:01 +0000 ROA not before: Sat 22 Nov 2025 06:55:01 +0000 ROA not after: Sat 21 Nov 2026 07:00:01 +0000 asID: 58821 IP address blocks: 103.155.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ee:14:ac:59:08:72:1b:82:65:72:a1:0d:1f:2f:c1:88:59:3f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Nov 22 06:55:01 2025 GMT Not After : Nov 21 07:00:01 2026 GMT Subject: CN=FD2DCA6B0257C33299569FDBC316616B900CED3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:7a:96:18:2b:10:81:83:f8:09:b3:df:81: 8d:3b:34:24:bf:7f:79:38:8e:08:95:28:81:83:f5: 9a:1c:66:3f:be:e1:68:ee:70:76:d7:63:e5:9c:9b: c6:18:a8:2d:cd:5d:bb:02:69:40:9a:43:c4:42:25: 1a:b9:1d:82:7c:5d:bf:1d:3c:0a:3f:82:c8:92:60: 04:aa:33:ab:49:31:ee:98:03:c8:31:e9:c0:f4:e5: 45:54:6a:bf:38:04:d2:c0:03:ad:16:eb:bf:b0:81: 1b:6c:57:37:68:5e:81:fe:63:58:39:bf:01:06:44: 32:40:b7:af:f6:f7:f8:79:48:d4:7e:50:8c:1a:63: e5:87:aa:b5:89:02:a1:a6:d4:94:90:28:3b:53:86: a3:65:56:9a:e1:2e:b2:88:4f:51:d5:0f:06:00:86: c8:29:40:88:48:8c:71:2e:dd:ef:57:90:56:31:ec: 0a:80:1b:51:35:9d:a1:d6:cf:5b:76:a5:21:1a:96: 7a:a2:b5:d2:29:ae:b9:52:43:9c:e2:93:72:a0:d6: 54:44:6d:9c:9d:da:05:3a:bc:c2:a9:94:ba:0a:e5: 46:64:64:1f:ca:0b:78:0a:30:4f:72:e2:76:d1:5f: 92:83:33:bd:e8:54:dd:a6:71:d0:61:c4:27:fc:ce: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2D:CA:6B:02:57:C3:32:99:56:9F:DB:C3:16:61:6B:90:0C:ED:3C X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.198.0/23 Signature Algorithm: sha256WithRSAEncryption 43:cb:bf:86:5b:43:ee:db:70:d8:51:5b:89:ac:40:e7:a0:c2: 2e:0e:62:ee:65:85:52:e2:bd:dc:b4:a5:69:7f:56:b0:c1:d8: 4f:d5:15:50:d9:a1:85:70:db:5c:27:68:a1:8b:2d:45:b0:1c: ad:2c:1e:13:7b:73:0f:d6:4f:de:f2:b4:b8:1b:4b:45:52:fe: 27:4a:b8:8c:ce:86:60:0e:48:9d:46:9a:59:0d:e6:5f:c0:c8: 16:21:1d:b1:3e:37:9e:a8:89:f0:0e:a4:22:7c:28:df:95:61: 09:dc:cb:25:ad:ed:52:50:4d:8a:0f:85:bf:b0:41:18:3c:c0: d9:fd:18:11:4b:c1:ca:5a:bc:7d:61:f6:30:2a:ba:15:17:46: cf:8d:47:df:6c:00:70:67:cb:7f:59:2c:e8:c7:ea:26:2c:d5: 44:f0:9c:88:63:50:79:33:92:c2:4d:31:bf:35:d8:c0:9f:35: f6:8f:76:b6:40:0e:42:69:3d:64:04:3f:4f:51:35:f1:88:2b: 37:ae:57:5d:9e:b7:92:57:43:91:48:3d:45:6e:a8:39:9c:b3: b8:31:af:ec:0a:69:ca:eb:d6:5e:b0:be:ae:f8:aa:40:b7:c6: e5:d5:6a:6b:e6:ff:15:9e:43:6d:57:23:40:b4:59:d7:78:15: 81:c2:58:e9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK+4UrFkIchuCZXKhDR8vwYhZP3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNTExMjIwNjU1MDFaFw0yNjExMjEwNzAwMDFaMDMxMTAvBgNV BAMTKEZEMkRDQTZCMDI1N0MzMzI5OTU2OUZEQkMzMTY2MTZCOTAwQ0VEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnm3qWGCsQgYP4CbPfgY07NCS/ f3k4jgiVKIGD9ZocZj++4WjucHbXY+Wcm8YYqC3NXbsCaUCaQ8RCJRq5HYJ8Xb8d PAo/gsiSYASqM6tJMe6YA8gx6cD05UVUar84BNLAA60W67+wgRtsVzdoXoH+Y1g5 vwEGRDJAt6/29/h5SNR+UIwaY+WHqrWJAqGm1JSQKDtThqNlVprhLrKIT1HVDwYA hsgpQIhIjHEu3e9XkFYx7AqAG1E1naHWz1t2pSEalnqitdIprrlSQ5zik3Kg1lRE bZyd2gU6vMKplLoK5UZkZB/KC3gKME9y4nbRX5KDM73oVN2mcdBhxCf8znO5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/S3KawJXwzKZVp/bwxZha5AM7TwwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmMjUwNmIxLTM5NmQtNDk5ZS1i N2Y1LTVkOWY4ZTdlMGJlZS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNTM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5vGMA0GCSqG SIb3DQEBCwUAA4IBAQBDy7+GW0Pu23DYUVuJrEDnoMIuDmLuZYVS4r3ctKVpf1aw wdhP1RVQ2aGFcNtcJ2ihiy1FsBytLB4Te3MP1k/e8rS4G0tFUv4nSriMzoZgDkid RppZDeZfwMgWIR2xPjeeqInwDqQifCjflWEJ3Mslre1SUE2KD4W/sEEYPMDZ/RgR S8HKWrx9YfYwKroVF0bPjUffbABwZ8t/WSzox+omLNVE8JyIY1B5M5LCTTG/NdjA nzX2j3a2QA5CaT1kBD9PUTXxiCs3rlddnreSV0ORSD1Fbqg5nLO4Ma/sCmnK69Ze sL6u+KpAt8bl1Wpr5v8VnkNtVyNAtFnXeBWBwljp -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:21 2025 by rpki-client