This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa File: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ= Subject key identifier: 30:FC:F2:93:D9:87:6F:47:44:45:2B:A1:E0:B9:D4:06:7E:D4:C0:84 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 14DA45BFAB6FDD0BDFB0F263A7EB78A52119E5EA Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa Signing time: Fri 07 Nov 2025 11:00:00 +0000 ROA not before: Fri 07 Nov 2025 10:55:00 +0000 ROA not after: Fri 06 Nov 2026 11:00:00 +0000 asID: 138886 IP address blocks: 210.87.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:da:45:bf:ab:6f:dd:0b:df:b0:f2:63:a7:eb:78:a5:21:19:e5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Nov 7 10:55:00 2025 GMT Not After : Nov 6 11:00:00 2026 GMT Subject: CN=30FCF293D9876F4744452BA1E0B9D4067ED4C084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:97:a9:9b:a8:99:c6:8d:23:35:f0:59:7a:5d: 11:f5:85:d4:46:a8:d5:74:fe:73:33:30:77:d0:08: 67:b8:ea:bf:9b:4e:0a:f0:6b:00:63:be:01:4a:fd: 8a:58:b1:3b:e5:2f:b2:17:40:23:93:3a:3f:17:98: ef:77:7e:b9:b9:75:d8:73:b1:c3:73:3b:52:01:8e: eb:53:7f:bf:01:6b:d2:1d:cc:b9:79:b4:4e:80:11: 71:51:65:4c:36:c2:08:2d:f3:a7:f6:e9:73:0b:73: 2e:82:cf:c6:85:e8:46:2d:0b:00:d5:78:bb:20:8a: a0:a3:21:37:48:2e:57:69:20:c0:46:71:42:81:c8: ea:a6:0c:0f:e4:3b:7f:e3:db:b7:5b:87:14:2e:3f: 7f:a3:a2:ef:43:9e:55:97:4c:ff:c9:b4:72:7a:05: 2a:dd:d2:d5:b4:01:27:83:cb:6c:6f:42:2f:34:dd: f2:ba:8b:5f:b8:18:22:7b:0c:7f:05:d3:ec:37:54: 1f:71:29:1e:39:30:7d:7d:dd:75:f3:bb:e9:d2:81: 16:b3:42:c4:52:f6:4b:7c:0b:fc:9d:4f:a8:fb:85: c7:70:f2:34:85:b4:1d:27:41:95:38:f7:55:7d:d4: 24:c0:86:63:1a:7e:52:df:08:37:35:9b:1e:02:60: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FC:F2:93:D9:87:6F:47:44:45:2B:A1:E0:B9:D4:06:7E:D4:C0:84 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.87.118.0/23 Signature Algorithm: sha256WithRSAEncryption b0:6a:aa:43:39:40:10:12:fb:35:5f:ac:0f:4c:6f:fc:dc:6e: 63:1d:26:d7:51:9a:19:d0:b4:44:5e:59:f9:37:53:47:99:1d: 45:f8:09:0b:ee:7b:39:f8:9c:fa:e2:e7:af:12:80:1e:86:a8: bc:c3:45:f6:c8:13:d4:4e:52:8c:46:9a:41:87:58:c3:d8:4d: 63:8e:0a:0d:af:b9:67:a0:d9:6a:09:c6:68:ea:f6:fb:97:c4: 5d:88:95:74:09:d2:e5:c4:41:51:4e:2e:97:7f:f6:b6:a8:ff: 9f:3d:bc:f3:aa:ed:3e:b3:51:2a:c2:df:70:98:b0:18:7e:76: 06:cf:67:0a:50:94:7b:ea:c3:f4:26:a9:e6:a0:a9:ea:31:63: a9:b1:b7:f2:84:79:93:8a:7d:cf:d7:02:7b:6c:47:38:36:ab: bc:d0:41:ea:6c:fb:b7:88:55:4f:a6:db:5d:80:92:00:27:bd: 09:aa:14:31:a1:63:0b:be:14:fb:7d:c6:90:a7:2e:d4:2c:2d: c5:e4:81:7b:bb:a7:56:db:3d:f7:a0:42:72:99:68:20:24:66: 87:a8:be:bb:a4:32:c5:bd:4a:fe:2c:35:87:31:96:36:17:34: 8e:91:35:1a:63:b0:7c:9d:87:0f:6f:ea:c7:30:08:a8:bb:5b: d4:a8:c9:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFNpFv6tv3QvfsPJjp+t4pSEZ5eowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTExMDcxMDU1MDBaFw0yNjExMDYxMTAwMDBaMDMxMTAvBgNV BAMTKDMwRkNGMjkzRDk4NzZGNDc0NDQ1MkJBMUUwQjlENDA2N0VENEMwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDel6mbqJnGjSM18Fl6XRH1hdRG qNV0/nMzMHfQCGe46r+bTgrwawBjvgFK/YpYsTvlL7IXQCOTOj8XmO93frm5ddhz scNzO1IBjutTf78Ba9IdzLl5tE6AEXFRZUw2wggt86f26XMLcy6Cz8aF6EYtCwDV eLsgiqCjITdILldpIMBGcUKByOqmDA/kO3/j27dbhxQuP3+jou9DnlWXTP/JtHJ6 BSrd0tW0ASeDy2xvQi803fK6i1+4GCJ7DH8F0+w3VB9xKR45MH193XXzu+nSgRaz QsRS9kt8C/ydT6j7hcdw8jSFtB0nQZU491V91CTAhmMaflLfCDc1mx4CYHLnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMPzyk9mHb0dERSuh4LnUBn7UwIQwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYWVjN2M2LTJiODMtNGNmMC04 Y2Q5LTUzNGNlNzdmZjRiMC8wLzMyMzEzMDJlMzgzNzJlMzEzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ld2MA0GCSqG SIb3DQEBCwUAA4IBAQCwaqpDOUAQEvs1X6wPTG/83G5jHSbXUZoZ0LREXln5N1NH mR1F+AkL7ns5+Jz64uevEoAehqi8w0X2yBPUTlKMRppBh1jD2E1jjgoNr7lnoNlq CcZo6vb7l8RdiJV0CdLlxEFRTi6Xf/a2qP+fPbzzqu0+s1Eqwt9wmLAYfnYGz2cK UJR76sP0JqnmoKnqMWOpsbfyhHmTin3P1wJ7bEc4Nqu80EHqbPu3iFVPpttdgJIA J70JqhQxoWMLvhT7fcaQpy7ULC3F5IF7u6dW2z33oEJymWggJGaHqL67pDLFvUr+ LDWHMZY2FzSOkTUaY7B8nYcPb+rHMAiou1vUqMnA -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:35 2025 by rpki-client