This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa File: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (raw, json) Hash identifier: shSt6RZ1MwvIPYyETnN1BneHslb44OdrCSOCCLJ7w9E= Subject key identifier: 8D:96:86:A3:7A:96:05:CE:4E:92:A8:01:CC:99:F4:43:6D:A2:D1:36 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 4ECC9EB60A1DF314D88D56521FC4970E44C71CB6 Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa Signing time: Fri 02 Jan 2026 08:00:01 +0000 ROA not before: Fri 02 Jan 2026 07:55:01 +0000 ROA not after: Fri 01 Jan 2027 08:00:01 +0000 asID: 38154 IP address blocks: 116.58.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 17:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cc:9e:b6:0a:1d:f3:14:d8:8d:56:52:1f:c4:97:0e:44:c7:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Jan 2 07:55:01 2026 GMT Not After : Jan 1 08:00:01 2027 GMT Subject: CN=8D9686A37A9605CE4E92A801CC99F4436DA2D136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:71:70:d6:38:74:5d:7a:02:76:9c:6c:8a: 4a:e3:7e:49:70:36:30:92:8f:72:e7:bb:8b:34:04: 3f:b5:66:4e:93:82:a5:e9:58:c5:5b:e3:36:0c:f6: 0d:f9:74:8b:16:c5:10:96:55:aa:30:9e:0b:da:21: 35:09:64:2e:53:5e:80:f6:b2:75:5c:84:a5:a3:48: 63:70:ff:0d:ab:ce:31:a2:9d:42:db:43:3e:cf:22: e5:8b:13:da:b5:e3:69:93:17:e3:8b:cd:8b:ff:8c: 48:90:fa:13:f5:d8:12:ed:00:4c:9e:f7:d7:c8:a9: a8:ff:0f:e6:42:78:20:c3:9b:24:45:cb:d7:a8:91: cb:f0:9f:ca:73:f0:bf:15:d6:f7:6c:13:ae:8b:e4: 40:c2:ae:d4:93:91:d1:63:54:1a:e3:79:e6:49:cf: 06:fc:dc:58:ff:1e:fd:d7:8c:f5:61:f1:d4:fd:96: 7d:e7:31:02:56:ec:c6:2c:67:62:8c:cb:eb:53:6a: b5:98:5f:62:0a:a4:7c:b6:19:d3:af:48:47:ec:b0: 00:97:ee:8f:38:70:31:12:9b:ae:f4:20:d5:41:f0: b7:bd:64:de:fd:36:ac:96:8d:39:ce:a5:44:92:bc: 6d:e8:f0:18:73:3b:c4:0d:f7:27:7d:b9:21:bb:f1: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:86:A3:7A:96:05:CE:4E:92:A8:01:CC:99:F4:43:6D:A2:D1:36 X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.58.192.0/21 Signature Algorithm: sha256WithRSAEncryption b4:9e:1e:0d:16:63:22:67:29:57:3a:58:b5:cf:f2:f8:f9:0d: 1a:94:3d:cc:60:4f:80:8d:54:5b:7f:fc:49:59:c0:82:2d:c8: 7c:88:f3:f0:e4:f3:9b:6b:9a:a7:5b:d3:6e:7b:5a:1c:41:a7: bf:c4:e9:53:7a:69:81:69:0d:ef:a7:44:ee:f6:ef:09:c7:b1: 69:1f:32:45:3f:34:59:b3:dd:62:60:fe:42:d5:4f:27:2b:7d: e2:b5:52:4a:70:16:5f:3b:10:8c:45:66:ef:83:25:80:61:cc: a5:c1:2a:c7:dc:b4:c9:2c:fa:8b:18:50:b4:9e:ad:d7:1a:47: fb:15:f4:72:24:17:35:a6:bc:8f:cd:d6:43:18:55:35:0a:38: fa:c1:3d:2a:68:1d:6c:e3:ad:b0:ae:d5:1e:b3:56:f7:f6:5c: 69:60:a9:c8:b9:47:ba:ac:e5:91:26:d6:b7:c0:1c:7f:ac:6a: 70:05:bd:0c:c2:8d:6c:d1:8d:1e:12:e6:e3:c6:67:0f:b9:6c: 81:ec:33:ad:62:79:48:07:1b:90:0b:42:e4:7e:1e:ea:d0:ae: 58:1a:9c:f9:71:9d:21:9a:de:84:05:ff:dd:e1:e1:af:7c:6e: b8:03:7d:79:25:45:c8:92:86:bd:84:54:b2:fc:19:bc:bb:76: ce:d4:9d:60 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTsyetgod8xTYjVZSH8SXDkTHHLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNjAxMDIwNzU1MDFaFw0yNzAxMDEwODAwMDFaMDMxMTAvBgNV BAMTKDhEOTY4NkEzN0E5NjA1Q0U0RTkyQTgwMUNDOTlGNDQzNkRBMkQxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA43Fw1jh0XXoCdpxsikrjfklw NjCSj3Lnu4s0BD+1Zk6TgqXpWMVb4zYM9g35dIsWxRCWVaowngvaITUJZC5TXoD2 snVchKWjSGNw/w2rzjGinULbQz7PIuWLE9q142mTF+OLzYv/jEiQ+hP12BLtAEye 99fIqaj/D+ZCeCDDmyRFy9eokcvwn8pz8L8V1vdsE66L5EDCrtSTkdFjVBrjeeZJ zwb83Fj/Hv3XjPVh8dT9ln3nMQJW7MYsZ2KMy+tTarWYX2IKpHy2GdOvSEfssACX 7o84cDESm670INVB8Le9ZN79NqyWjTnOpUSSvG3o8BhzO8QN9yd9uSG78dqFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjZaGo3qWBc5OkqgBzJn0Q22i0TYwHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmZWJiNjhhLThhNWQtNDExYy04 YmIzLTgzMzQyMzEwMGI2ZS8wLzMxMzEzNjJlMzUzODJlMzEzOTMyMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzMzODMxMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3Q6wDANBgkqhkiG 9w0BAQsFAAOCAQEAtJ4eDRZjImcpVzpYtc/y+PkNGpQ9zGBPgI1UW3/8SVnAgi3I fIjz8OTzm2uap1vTbntaHEGnv8TpU3ppgWkN76dE7vbvCcexaR8yRT80WbPdYmD+ QtVPJyt94rVSSnAWXzsQjEVm74MlgGHMpcEqx9y0ySz6ixhQtJ6t1xpH+xX0ciQX Naa8j83WQxhVNQo4+sE9KmgdbOOtsK7VHrNW9/ZcaWCpyLlHuqzlkSbWt8Acf6xq cAW9DMKNbNGNHhLm48ZnD7lsgewzrWJ5SAcbkAtC5H4e6tCuWBqc+XGdIZrehAX/ 3eHhr3xuuAN9eSVFyJKGvYRUsvwZvLt2ztSdYA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:05:07 2026 by rpki-client