This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa File: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (raw, json) Hash identifier: XtqlnNzbkZSmq/aHGl1uqDBc5YB4rnEqd6nCa3Q5338= Subject key identifier: 37:C4:C7:8E:7A:22:73:28:90:5F:34:AF:7B:C6:23:50:00:5B:40:81 Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Certificate serial: 7D9546B83C4B403863E6CFA897C6C9129609A39A Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa Signing time: Fri 14 Nov 2025 04:10:19 +0000 ROA not before: Fri 14 Nov 2025 04:05:19 +0000 ROA not after: Fri 13 Nov 2026 04:10:19 +0000 asID: 133823 IP address blocks: 45.116.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:46:b8:3c:4b:40:38:63:e6:cf:a8:97:c6:c9:12:96:09:a3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Validity Not Before: Nov 14 04:05:19 2025 GMT Not After : Nov 13 04:10:19 2026 GMT Subject: CN=37C4C78E7A227328905F34AF7BC62350005B4081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:75:c1:92:f2:a5:f5:38:ab:4f:4d:49:c2: 17:ea:9c:79:7a:1e:47:bd:41:c4:8d:02:a5:e2:7c: ef:e3:d1:45:32:c3:4c:e3:fc:0c:a9:7b:96:be:1c: 19:50:fc:e3:9c:38:b8:a6:18:3c:88:f0:f2:b5:96: 8e:b3:1f:97:20:16:03:52:67:09:4c:87:a7:de:c9: 27:f5:0b:85:71:6a:d6:8a:43:92:45:be:b9:1e:10: a2:84:ff:34:be:0d:a2:b2:f4:1b:04:1e:03:5b:90: 93:31:96:33:cc:35:b9:32:26:85:cc:08:40:06:da: 78:0c:12:64:e2:e4:df:c5:16:d3:a6:03:1c:88:19: 88:e6:f0:c9:b2:82:2c:fb:70:16:4e:c6:a7:e6:04: e6:5e:bf:44:fc:18:df:fe:59:1d:f2:3d:77:6d:5f: 32:a0:0b:81:1c:6e:b1:b3:1c:60:2d:12:e1:52:0c: 6b:f5:3d:4c:10:ec:26:05:67:0f:60:4b:15:76:2f: e0:95:94:44:fb:31:c7:4f:1a:c6:c1:96:0e:38:d9: 33:f4:d8:66:7d:57:72:66:2b:e4:1a:9d:9d:98:2c: 2e:76:aa:7f:7d:86:9f:9c:61:9b:51:f0:62:b5:84: 58:b5:f4:f4:e0:45:c7:30:d0:e6:e9:f9:fd:34:53: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:C7:8E:7A:22:73:28:90:5F:34:AF:7B:C6:23:50:00:5B:40:81 X509v3 Authority Key Identifier: keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/23 Signature Algorithm: sha256WithRSAEncryption 83:76:ba:2e:0c:4c:ab:cd:54:b8:58:05:02:1b:a1:13:8d:42: b1:6e:e3:ae:c7:fa:9c:83:78:69:af:76:44:90:0c:5e:53:77: 1b:8f:b2:c0:37:25:36:8f:0a:68:35:ce:f9:73:46:73:6c:50: 77:d0:1f:b1:94:93:df:8b:4e:fb:ab:b2:b4:75:0f:17:f7:8f: 93:00:e7:f6:c8:84:66:2e:80:a6:81:f3:8a:4e:50:3a:01:b5: 40:93:d6:2e:9c:3c:cc:70:ad:e9:e7:02:df:c1:b1:8c:8a:9b: 20:63:66:f7:c8:5e:98:9d:11:e3:3a:e2:22:99:10:21:c0:97: c5:66:9d:29:1e:5d:32:cc:53:e3:d1:43:b8:e4:11:30:7a:d8: 00:33:1a:37:21:a7:1b:05:17:bb:b2:d8:f0:55:3a:6e:5a:31: 77:51:1e:08:ea:e1:f6:02:8c:c7:5c:32:e8:d5:a8:89:5e:41: 81:13:0f:a8:d9:a3:7c:2b:68:bb:c6:91:4b:1e:99:77:40:0f: 1a:70:78:a7:ed:87:84:6d:fc:32:c6:13:97:d8:0c:22:9c:c8: 77:2a:83:5c:4a:6f:03:d3:e5:6d:92:43:81:56:7f:fa:7d:28: e6:51:99:b5:65:cf:50:2e:81:db:ec:f8:d8:5a:bb:0c:86:b2: 87:15:30:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfZVGuDxLQDhj5s+ol8bJEpYJo5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3 NEM4MUFCNzAeFw0yNTExMTQwNDA1MTlaFw0yNjExMTMwNDEwMTlaMDMxMTAvBgNV BAMTKDM3QzRDNzhFN0EyMjczMjg5MDVGMzRBRjdCQzYyMzUwMDA1QjQwODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4nXBkvKl9TirT01JwhfqnHl6 Hke9QcSNAqXifO/j0UUyw0zj/Aype5a+HBlQ/OOcOLimGDyI8PK1lo6zH5cgFgNS ZwlMh6feySf1C4VxataKQ5JFvrkeEKKE/zS+DaKy9BsEHgNbkJMxljPMNbkyJoXM CEAG2ngMEmTi5N/FFtOmAxyIGYjm8Mmygiz7cBZOxqfmBOZev0T8GN/+WR3yPXdt XzKgC4EcbrGzHGAtEuFSDGv1PUwQ7CYFZw9gSxV2L+CVlET7McdPGsbBlg442TP0 2GZ9V3JmK+QanZ2YLC52qn99hp+cYZtR8GK1hFi19PTgRccw0Obp+f00U8FxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUN8THjnoicyiQXzSve8YjUABbQIEwHwYDVR0j BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4 MUFCNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFmLTZkYTktNDAwZC04 YjE0LTk5MmFhZTYzNzQ2Yy8wLzM0MzUyZTMxMzEzNjJlMzEzNTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLXScMA0GCSqG SIb3DQEBCwUAA4IBAQCDdrouDEyrzVS4WAUCG6ETjUKxbuOux/qcg3hpr3ZEkAxe U3cbj7LANyU2jwpoNc75c0ZzbFB30B+xlJPfi077q7K0dQ8X94+TAOf2yIRmLoCm gfOKTlA6AbVAk9YunDzMcK3p5wLfwbGMipsgY2b3yF6YnRHjOuIimRAhwJfFZp0p Hl0yzFPj0UO45BEwetgAMxo3IacbBRe7stjwVTpuWjF3UR4I6uH2AozHXDLo1aiJ XkGBEw+o2aN8K2i7xpFLHpl3QA8acHin7YeEbfwyxhOX2AwinMh3KoNcSm8D0+Vt kkOBVn/6fSjmUZm1Zc9QLoHb7PjYWrsMhrKHFTAH -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:22 2025 by rpki-client