This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa File: 3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa (raw, json) Hash identifier: bD13kXG4SSQD1ohaDhF2V/NIrGIQqIbrlSORFS7maaQ= Subject key identifier: F3:58:43:D0:55:54:93:D4:1E:44:54:94:AE:A2:D6:F3:19:AF:34:07 Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Certificate serial: 1EF8ADF7097184C25411009D5E51652EAB45724C Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa Signing time: Wed 24 Dec 2025 06:00:00 +0000 ROA not before: Wed 24 Dec 2025 05:55:00 +0000 ROA not after: Wed 23 Dec 2026 06:00:00 +0000 asID: 45147 IP address blocks: 119.110.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f8:ad:f7:09:71:84:c2:54:11:00:9d:5e:51:65:2e:ab:45:72:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511 Validity Not Before: Dec 24 05:55:00 2025 GMT Not After : Dec 23 06:00:00 2026 GMT Subject: CN=F35843D0555493D41E445494AEA2D6F319AF3407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:45:64:70:28:6a:9a:b3:33:61:4d:a9:00: a9:dc:0a:20:9c:ff:99:33:5d:f5:a6:72:63:aa:42: e5:5e:a5:37:95:92:da:d4:eb:93:e3:84:26:8a:73: c2:ac:4c:df:58:b6:22:b5:77:cb:f8:2a:43:20:fd: 68:e8:cc:6a:02:66:1e:a7:3b:b5:d6:e4:a8:4d:4f: 1a:50:a8:cd:5d:75:f6:b0:2e:7e:d1:10:01:9f:65: 3a:cc:62:24:da:42:37:26:99:f4:d3:45:c5:9f:81: 51:22:16:44:61:11:e5:7d:80:eb:10:32:32:fb:dd: d5:69:99:82:81:93:1f:a4:65:93:15:82:ac:d0:41: 07:df:32:9e:f5:9a:86:b0:26:51:4e:63:f1:d5:28: b3:d9:58:c2:d9:65:90:0f:bb:fb:68:33:b5:54:5c: 67:1c:fb:4a:28:5f:ad:eb:58:7b:90:b8:79:1c:fd: 82:56:44:61:1c:94:68:55:16:dd:4f:54:99:52:64: 5c:15:22:ce:3e:c9:12:e6:ad:05:00:8f:38:71:27: f6:ce:c7:46:bb:0a:a7:c3:de:8a:35:98:fa:31:bb: ea:2e:7f:45:93:d5:20:d9:3c:f6:4c:a6:48:9f:ad: 72:cf:c2:13:32:7d:a6:c7:26:28:cf:27:33:55:a5: b4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:58:43:D0:55:54:93:D4:1E:44:54:94:AE:A2:D6:F3:19:AF:34:07 X509v3 Authority Key Identifier: keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.112.0/20 Signature Algorithm: sha256WithRSAEncryption 02:0c:c8:15:63:ce:b8:a3:de:e2:3c:5a:12:80:83:f5:50:56: e5:30:c8:d9:56:7e:90:e0:1f:fc:95:b3:27:b4:6d:5c:61:0d: f2:c6:e2:98:bf:24:d4:4e:16:be:76:dd:30:c6:12:c2:f5:ac: 6f:17:e6:81:38:0e:8c:3b:71:61:73:ac:45:9b:3e:d5:31:9b: 7c:0e:cf:cd:4c:8d:c6:f3:e2:bd:2b:32:04:79:23:10:37:4c: 99:b4:59:8d:87:2b:48:95:85:0a:18:d6:d1:f5:35:f5:2c:17: 1c:d7:1f:58:b1:da:e4:e0:0e:6f:aa:c8:85:44:68:aa:99:7d: 1f:d0:14:22:67:08:ed:bf:0f:26:91:ea:ab:0f:0e:58:9a:3a: 95:71:38:b8:9b:87:5e:ed:19:c7:37:1c:f5:2b:4c:18:d4:c1: 52:6f:19:db:89:07:2d:fc:7b:ea:7b:5e:bf:93:8b:dd:cc:22: 31:b8:f4:24:cf:bd:eb:da:ba:03:98:1d:93:a4:bf:fc:d4:a6: 24:b0:25:65:5a:1d:ce:30:af:6d:f2:fe:f4:ca:75:75:a6:8a: 1a:c2:42:e3:04:a0:92:4e:60:df:33:77:71:52:40:b6:7e:11: 9e:72:fb:00:9a:53:ad:b0:a6:73:02:bd:ba:a2:26:63:4b:da: 2e:8d:52:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHvit9wlxhMJUEQCdXlFlLqtFckwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNE NjdENjUxMTAeFw0yNTEyMjQwNTU1MDBaFw0yNjEyMjMwNjAwMDBaMDMxMTAvBgNV BAMTKEYzNTg0M0QwNTU1NDkzRDQxRTQ0NTQ5NEFFQTJENkYzMTlBRjM0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpUVkcChqmrMzYU2pAKncCiCc /5kzXfWmcmOqQuVepTeVktrU65PjhCaKc8KsTN9YtiK1d8v4KkMg/WjozGoCZh6n O7XW5KhNTxpQqM1ddfawLn7REAGfZTrMYiTaQjcmmfTTRcWfgVEiFkRhEeV9gOsQ MjL73dVpmYKBkx+kZZMVgqzQQQffMp71moawJlFOY/HVKLPZWMLZZZAPu/toM7VU XGcc+0ooX63rWHuQuHkc/YJWRGEclGhVFt1PVJlSZFwVIs4+yRLmrQUAjzhxJ/bO x0a7CqfD3oo1mPoxu+ouf0WT1SDZPPZMpkifrXLPwhMyfabHJijPJzNVpbQ/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU81hD0FVUk9QeRFSUrqLW8xmvNAcwHwYDVR0j BBgwFoAU85mhoMGP6NvaI84hdeDLI9Z9ZREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzVmN2EyZi03MjVlLTQzOTktODY5YS00YjFmY2YyYzZhMGMvMC9GMzk5QTFBMEMx OEZFOERCREEyM0NFMjE3NUUwQ0IyM0Q2N0Q2NTExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM5OUExQTBDMThGRThEQkRBMjNDRTIxNzVFMENCMjNENjdE NjUxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04 NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMxMzIyZTMwMmYz MjMwMmQzMjMwMjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEd25wMA0GCSqG SIb3DQEBCwUAA4IBAQACDMgVY864o97iPFoSgIP1UFblMMjZVn6Q4B/8lbMntG1c YQ3yxuKYvyTUTha+dt0wxhLC9axvF+aBOA6MO3Fhc6xFmz7VMZt8Ds/NTI3G8+K9 KzIEeSMQN0yZtFmNhytIlYUKGNbR9TX1LBcc1x9Ysdrk4A5vqsiFRGiqmX0f0BQi Zwjtvw8mkeqrDw5YmjqVcTi4m4de7RnHNxz1K0wY1MFSbxnbiQct/Hvqe16/k4vd zCIxuPQkz73r2roDmB2TpL/81KYksCVlWh3OMK9t8v70ynV1pooawkLjBKCSTmDf M3dxUkC2fhGecvsAmlOtsKZzAr26oiZjS9oujVJW -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:08 2026 by rpki-client