This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/3135372e32302e32342e302f32342d3234203d3e203633353036.roa File: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (raw, json) Hash identifier: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs= Subject key identifier: DA:6A:70:E4:71:35:08:0A:B6:F6:32:BE:23:26:78:FD:29:EF:D4:52 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 65E76F882A24BEE5317FCB7CA48CE105E3113196 Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/3135372e32302e32342e302f32342d3234203d3e203633353036.roa Signing time: Thu 18 Dec 2025 17:02:14 +0000 ROA not before: Thu 18 Dec 2025 16:57:14 +0000 ROA not after: Thu 17 Dec 2026 17:02:14 +0000 asID: 63506 IP address blocks: 157.20.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e7:6f:88:2a:24:be:e5:31:7f:cb:7c:a4:8c:e1:05:e3:11:31:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Dec 18 16:57:14 2025 GMT Not After : Dec 17 17:02:14 2026 GMT Subject: CN=DA6A70E47135080AB6F632BE232678FD29EFD452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:17:3f:f3:25:21:0a:c9:f2:4c:78:dc:d2: e8:a5:d6:10:52:ca:ce:60:f7:65:07:44:40:9c:03: 7d:45:d4:08:7c:6f:ea:fb:f0:3d:71:9b:ec:c8:77: f3:05:6d:ca:f1:5e:c6:65:24:b4:12:1d:e3:ba:d1: ef:00:e7:c3:54:f2:16:23:5b:ed:5a:90:39:99:7c: 3b:34:06:06:f6:1b:e4:f6:5f:20:67:4f:b8:bb:20: 15:90:2b:ea:32:f5:e3:ab:da:93:bf:4d:9d:74:25: 64:c6:35:6c:7b:62:8b:ed:7a:b7:bf:b4:92:cd:13: 62:d9:34:7d:c3:e5:73:a2:a2:b0:a0:e4:ce:9d:5e: a0:f0:9b:7a:6d:9e:51:c3:7e:88:be:3d:85:94:34: a5:b8:26:0b:f7:f9:80:a3:c7:ac:d8:51:75:89:98: 7c:35:f9:31:46:f9:58:2e:6c:e8:d0:3f:82:24:d6: a4:82:45:c5:a8:f1:1d:c3:79:13:a3:af:f0:fa:87: ae:6e:08:96:cd:3a:04:d8:03:3b:d7:3b:3c:d1:a8: 83:29:f2:a4:63:e4:74:bf:0f:22:bb:cd:be:0d:a4: de:15:f5:ec:8f:a8:70:54:c9:82:a9:b5:12:db:73: 68:3b:fb:97:ce:75:c6:8d:56:f3:b4:b4:bc:15:42: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:70:E4:71:35:08:0A:B6:F6:32:BE:23:26:78:FD:29:EF:D4:52 X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/3135372e32302e32342e302f32342d3234203d3e203633353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.24.0/24 Signature Algorithm: sha256WithRSAEncryption b5:71:29:65:96:ca:75:06:3a:fb:70:de:d5:f1:3d:be:7c:c2: f5:78:34:9e:55:5b:de:b2:59:16:33:06:75:03:47:13:25:07: 85:0f:18:23:be:06:73:41:9e:73:29:ea:f4:f2:80:29:63:37: b6:3f:4a:cf:3c:d7:a1:12:41:4d:46:f0:bd:66:dc:f6:ad:0b: 97:77:44:b4:da:51:da:bc:26:aa:22:ca:a2:3b:fe:3e:4d:8a: 93:e4:f1:9e:30:d7:76:31:27:73:54:81:e7:30:91:3f:28:f7: 7f:cb:49:f3:3f:9e:5d:82:26:72:20:58:32:49:ba:19:10:6a: 0e:9e:0e:fd:f9:58:49:81:fc:8e:95:d6:83:c5:e4:ad:19:c1: 28:0d:a0:30:a1:2a:c5:ae:a6:65:6b:33:1e:94:80:a7:06:ab: 50:b5:9e:84:9c:80:7c:f1:43:b8:61:93:ec:c6:a2:dc:65:ac: 54:a4:ba:5b:d7:51:a8:d1:39:86:41:f7:08:c4:0a:09:30:24: 57:5c:b8:08:b5:71:a2:c9:9c:1a:e6:ac:14:b4:6c:00:e0:ab: cd:25:a8:fa:65:0d:1d:a8:7a:42:e1:fa:bb:d6:a2:0b:d5:44: 15:85:ed:99:cc:9b:70:3c:8c:8d:d4:51:b6:52:19:ad:64:02: f4:27:5f:1e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZedviCokvuUxf8t8pIzhBeMRMZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNTEyMTgxNjU3MTRaFw0yNjEyMTcxNzAyMTRaMDMxMTAvBgNV BAMTKERBNkE3MEU0NzEzNTA4MEFCNkY2MzJCRTIzMjY3OEZEMjlFRkQ0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvRc/8yUhCsnyTHjc0uil1hBS ys5g92UHRECcA31F1Ah8b+r78D1xm+zId/MFbcrxXsZlJLQSHeO60e8A58NU8hYj W+1akDmZfDs0Bgb2G+T2XyBnT7i7IBWQK+oy9eOr2pO/TZ10JWTGNWx7Yovtere/ tJLNE2LZNH3D5XOiorCg5M6dXqDwm3ptnlHDfoi+PYWUNKW4Jgv3+YCjx6zYUXWJ mHw1+TFG+VgubOjQP4Ik1qSCRcWo8R3DeROjr/D6h65uCJbNOgTYAzvXOzzRqIMp 8qRj5HS/DyK7zb4NpN4V9eyPqHBUyYKptRLbc2g7+5fOdcaNVvO0tLwVQsBbAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU2mpw5HE1CAq29jK+IyZ4/Snv1FIwHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1YmFlMzBjLWIzNjMtNDA3Yi1h MGFiLTMxNTRlYjMwOWFlOS8wLzMxMzUzNzJlMzIzMDJlMzIzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM2MzMzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdFBgwDQYJKoZIhvcN AQELBQADggEBALVxKWWWynUGOvtw3tXxPb58wvV4NJ5VW96yWRYzBnUDRxMlB4UP GCO+BnNBnnMp6vTygCljN7Y/Ss8816ESQU1G8L1m3PatC5d3RLTaUdq8JqoiyqI7 /j5NipPk8Z4w13YxJ3NUgecwkT8o93/LSfM/nl2CJnIgWDJJuhkQag6eDv35WEmB /I6V1oPF5K0ZwSgNoDChKsWupmVrMx6UgKcGq1C1noScgHzxQ7hhk+zGotxlrFSk ulvXUajROYZB9wjECgkwJFdcuAi1caLJnBrmrBS0bADgq80lqPplDR2oekLh+rvW ogvVRBWF7ZnMm3A8jI3UUbZSGa1kAvQnXx4= -----END CERTIFICATE-----Generated at Thu Dec 18 21:44:52 2025 by rpki-client