This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa File: 3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (raw, json) Hash identifier: wgtqwaW/q6/6iiFZEkr1mrOJmIiiA3/QZmD2Fiv1Qhg= Subject key identifier: CF:F0:20:11:76:0D:8B:10:76:AB:6B:EA:DC:52:9F:C7:88:06:20:EB Certificate issuer: /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Certificate serial: 6884B1EA752CE2A4BC6CEEC62968EEF913F65116 Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa Signing time: Mon 12 Jan 2026 10:34:00 +0000 ROA not before: Mon 12 Jan 2026 10:29:00 +0000 ROA not after: Mon 11 Jan 2027 10:34:00 +0000 asID: 396982 IP address blocks: 115.166.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:84:b1:ea:75:2c:e2:a4:bc:6c:ee:c6:29:68:ee:f9:13:f6:51:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Validity Not Before: Jan 12 10:29:00 2026 GMT Not After : Jan 11 10:34:00 2027 GMT Subject: CN=CFF02011760D8B1076AB6BEADC529FC7880620EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a1:76:fe:e1:ed:06:16:7a:c0:de:b7:64:01: db:6b:b6:09:0f:52:21:5d:25:79:1c:49:ad:da:55: 8a:96:1f:0f:69:2d:60:6e:10:82:b1:20:25:cd:7a: 1c:84:61:ab:c3:0e:3f:c3:d2:0b:7c:df:7c:76:25: 33:88:50:80:97:e1:98:ca:e6:4d:a0:dd:2a:60:ab: e7:7d:b5:1b:ee:ca:7e:de:03:1c:40:51:96:54:a9: d0:73:6d:67:49:4d:b0:45:6a:49:06:a8:0e:5e:f8: 14:2a:60:85:ff:bc:4f:e5:c5:ac:fc:44:6c:57:86: e2:5f:ac:19:92:be:29:4c:56:f3:5b:45:de:ca:72: f6:9d:18:ae:ef:d1:a7:0b:8e:0a:6f:75:1e:37:1f: ff:33:7d:d0:f8:06:bd:21:00:61:87:e6:01:a3:8e: 5e:5d:b5:31:2b:1b:7f:f2:43:63:44:af:7a:5a:5e: da:78:ce:df:98:e8:9d:c8:f9:5b:b3:d4:7c:71:12: 91:63:7a:51:12:b3:ea:9e:fe:7d:a4:c8:9c:b1:5f: fe:90:5d:ca:f5:5b:d4:19:a0:e3:66:cb:9f:59:03: 73:13:83:06:cf:9f:02:48:3c:44:dc:df:f3:7f:6e: a3:58:bc:45:8f:bd:db:2d:2f:53:84:4a:93:c0:06: f7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F0:20:11:76:0D:8B:10:76:AB:6B:EA:DC:52:9F:C7:88:06:20:EB X509v3 Authority Key Identifier: keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.166.111.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:88:ce:66:76:0f:ae:6e:98:62:a0:4f:4f:3a:b2:3c:cd:ab: 7d:11:4f:a9:e9:4b:08:0c:f8:43:62:8e:f4:5a:7d:8d:94:96: e4:7c:77:91:fc:ff:42:ca:a9:d7:94:2a:69:14:56:35:2a:92: a7:2f:29:04:e4:61:8f:57:5b:98:c4:5d:b7:da:61:eb:1d:c6: 8c:86:bf:78:3f:c8:7c:b0:24:4b:34:58:0e:b2:69:78:dd:80: 3f:1a:30:87:53:c5:2f:29:e0:5c:3f:45:23:82:83:41:1a:fa: f9:3c:c2:29:d5:42:53:94:0d:91:c1:e7:c2:d2:10:ed:86:d4: e2:93:dd:b4:1e:f7:29:4e:f8:02:09:55:11:1a:10:e1:20:89: 38:d2:ed:b1:9e:af:69:b6:63:db:67:21:b0:ac:b3:b4:3e:01: 34:6b:86:24:cd:57:5c:56:ec:eb:b1:fd:20:e7:91:2b:b4:fa: e7:0e:cc:57:ef:e3:ff:59:d7:e7:fd:c4:3b:8c:ae:d9:93:22: b4:08:e0:8e:b4:20:a9:ff:69:9d:98:ff:28:af:81:13:17:13: 63:d7:69:08:85:81:c4:66:c5:0c:f3:3f:13:46:4b:a9:80:1c: ad:ab:71:f9:dd:a4:f0:81:d3:18:51:86:ea:8a:b3:83:8e:bf: a5:f2:3a:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaISx6nUs4qS8bO7GKWju+RP2URYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1 MjYxOTA5NzAeFw0yNjAxMTIxMDI5MDBaFw0yNzAxMTExMDM0MDBaMDMxMTAvBgNV BAMTKENGRjAyMDExNzYwRDhCMTA3NkFCNkJFQURDNTI5RkM3ODgwNjIwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIoXb+4e0GFnrA3rdkAdtrtgkP UiFdJXkcSa3aVYqWHw9pLWBuEIKxICXNehyEYavDDj/D0gt833x2JTOIUICX4ZjK 5k2g3Spgq+d9tRvuyn7eAxxAUZZUqdBzbWdJTbBFakkGqA5e+BQqYIX/vE/lxaz8 RGxXhuJfrBmSvilMVvNbRd7KcvadGK7v0acLjgpvdR43H/8zfdD4Br0hAGGH5gGj jl5dtTErG3/yQ2NEr3paXtp4zt+Y6J3I+Vuz1HxxEpFjelESs+qe/n2kyJyxX/6Q Xcr1W9QZoONmy59ZA3MTgwbPnwJIPETc3/N/bqNYvEWPvdstL1OESpPABvfjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUz/AgEXYNixB2q2vq3FKfx4gGIOswHwYDVR0j BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx OTA5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2LWVjNTMtNDJlYi05 YjhiLWZhMDhmODc0ZDMxOS8wLzMxMzEzNTJlMzEzNjM2MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABzpm8wDQYJ KoZIhvcNAQELBQADggEBAJ6IzmZ2D65umGKgT086sjzNq30RT6npSwgM+ENijvRa fY2UluR8d5H8/0LKqdeUKmkUVjUqkqcvKQTkYY9XW5jEXbfaYesdxoyGv3g/yHyw JEs0WA6yaXjdgD8aMIdTxS8p4Fw/RSOCg0Ea+vk8winVQlOUDZHB58LSEO2G1OKT 3bQe9ylO+AIJVREaEOEgiTjS7bGer2m2Y9tnIbCss7Q+ATRrhiTNV1xW7Oux/SDn kSu0+ucOzFfv4/9Z1+f9xDuMrtmTIrQI4I60IKn/aZ2Y/yivgRMXE2PXaQiFgcRm xQzzPxNGS6mAHK2rcfndpPCB0xhRhuqKs4OOv6XyOsI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:02 2026 by rpki-client