This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: Vj2lcWZTEwWf2AmX1t9dPjT0UD/5pkYVDIvaHli/TFM= Subject key identifier: 39:CA:F4:87:4E:59:F9:86:BE:07:69:1A:23:8A:A6:19:F0:57:EE:03 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1BDA75D41D4399DBE2178FCFB391EADDE63D6D4D Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa Signing time: Mon 29 Dec 2025 07:00:00 +0000 ROA not before: Mon 29 Dec 2025 06:55:00 +0000 ROA not after: Mon 28 Dec 2026 07:00:00 +0000 asID: 38320 IP address blocks: 119.110.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:da:75:d4:1d:43:99:db:e2:17:8f:cf:b3:91:ea:dd:e6:3d:6d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 06:55:00 2025 GMT Not After : Dec 28 07:00:00 2026 GMT Subject: CN=39CAF4874E59F986BE07691A238AA619F057EE03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:8d:80:42:96:ba:9a:11:70:e9:09:bc:e3: dc:d9:9c:41:1d:ed:b3:36:e1:9c:63:e7:ca:60:37: 31:61:32:ce:0f:c5:f6:7d:31:d2:9b:61:5a:ef:92: 1d:e6:5f:72:72:cb:f2:1a:2c:3b:b5:91:ba:8f:78: 3c:7b:9a:d3:a4:ab:73:f3:6b:7d:13:e1:8e:38:8b: 6a:7a:d4:2d:9e:c3:9e:31:c0:0a:b3:a9:71:ba:af: bd:6f:64:e8:21:a3:df:23:c7:11:dd:49:a6:b3:61: 7b:d3:28:2c:4c:17:17:0d:05:fe:a1:83:03:9b:ba: 18:29:c5:fe:63:61:af:af:c2:42:1c:97:05:e7:25: d4:19:fc:99:1f:5e:49:ce:d4:6b:ae:e1:30:fa:73: fd:bc:e6:b2:fb:85:d1:50:c9:77:27:7e:fa:50:6d: 61:9c:c9:9b:d2:19:a6:13:be:c1:2d:35:2a:7f:16: e2:bb:75:77:ea:61:20:bc:04:6d:38:e2:ab:bd:c1: 36:bf:46:44:7a:8a:2a:bc:0d:b2:79:fd:0c:e2:a4: fc:21:46:39:2b:b3:80:a1:56:28:e6:3b:8d:f3:17: ee:3d:7b:10:88:11:1a:2a:55:ae:63:53:06:0b:89: d4:2e:99:eb:a9:c8:cc:a4:6c:6b:ad:14:e1:ff:be: c9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CA:F4:87:4E:59:F9:86:BE:07:69:1A:23:8A:A6:19:F0:57:EE:03 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e36342e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.64.0/22 Signature Algorithm: sha256WithRSAEncryption cd:10:73:68:96:11:9a:63:23:5c:1b:64:10:ac:16:6a:47:48: 3a:55:4e:c2:f2:f2:b5:35:5c:e1:59:8f:b5:bb:2b:b2:44:13: 56:1c:13:4c:66:fc:65:fe:8f:91:21:ed:2c:87:46:c3:70:7e: bb:7b:e2:9a:46:3d:3c:f9:b1:c7:74:3e:02:81:1e:26:e8:5c: ca:02:47:e0:98:de:dc:59:72:6d:52:e6:4e:00:4f:96:90:32: 68:26:2f:81:f1:5c:e7:87:31:e1:94:14:75:1e:8e:45:09:b7: 5c:2c:59:73:89:f7:2c:0c:5a:ac:4b:a4:16:45:c4:3f:04:ec: d1:3c:06:fa:cb:6f:d0:d0:1f:87:8c:d9:86:e3:48:54:e2:7c: 36:47:16:2c:aa:60:66:d1:a8:9a:99:ca:97:a5:ed:d8:c2:12: 62:c2:00:4f:93:9d:83:98:7d:fb:d4:f9:63:6e:57:8f:35:9b: 10:db:89:f9:be:91:b8:7b:21:1a:b8:02:47:20:3a:c3:90:4f: de:dc:56:23:65:34:b2:9b:57:76:97:e2:bd:e6:86:ee:f4:2c: 6a:b0:de:77:cc:27:bb:7e:01:18:f5:c3:5e:2b:36:b6:99:c7: fa:2f:8d:94:f8:b6:61:5f:89:cf:cd:c1:72:2f:bb:b4:94:97: 39:7d:53:ba -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUG9p11B1DmdviF4/Ps5Hq3eY9bU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNjU1MDBaFw0yNjEyMjgwNzAwMDBaMDMxMTAvBgNV BAMTKDM5Q0FGNDg3NEU1OUY5ODZCRTA3NjkxQTIzOEFBNjE5RjA1N0VFMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySo2AQpa6mhFw6Qm849zZnEEd 7bM24Zxj58pgNzFhMs4PxfZ9MdKbYVrvkh3mX3Jyy/IaLDu1kbqPeDx7mtOkq3Pz a30T4Y44i2p61C2ew54xwAqzqXG6r71vZOgho98jxxHdSaazYXvTKCxMFxcNBf6h gwObuhgpxf5jYa+vwkIclwXnJdQZ/JkfXknO1Guu4TD6c/285rL7hdFQyXcnfvpQ bWGcyZvSGaYTvsEtNSp/FuK7dXfqYSC8BG044qu9wTa/RkR6iiq8DbJ5/QzipPwh Rjkrs4ChVijmO43zF+49exCIERoqVa5jUwYLidQumeupyMykbGutFOH/vsltAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOcr0h05Z+Ya+B2kaI4qmGfBX7gMwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNjM0MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduQDANBgkqhkiG 9w0BAQsFAAOCAQEAzRBzaJYRmmMjXBtkEKwWakdIOlVOwvLytTVc4VmPtbsrskQT VhwTTGb8Zf6PkSHtLIdGw3B+u3vimkY9PPmxx3Q+AoEeJuhcygJH4Jje3FlybVLm TgBPlpAyaCYvgfFc54cx4ZQUdR6ORQm3XCxZc4n3LAxarEukFkXEPwTs0TwG+stv 0NAfh4zZhuNIVOJ8NkcWLKpgZtGompnKl6Xt2MISYsIAT5Odg5h9+9T5Y25XjzWb ENuJ+b6RuHshGrgCRyA6w5BP3txWI2U0sptXdpfiveaG7vQsarDed8wnu34BGPXD Xis2tpnH+i+NlPi2YV+Jz83Bci+7tJSXOX1Tug== -----END CERTIFICATE-----Generated at Mon Jan 26 00:21:20 2026 by rpki-client