This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa File: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: ioskptQxOnwUzRvlUOwTLhn2ti6yWbMMGvP/wH2z3Mo= Subject key identifier: A5:B9:A6:22:69:E1:E3:36:AD:0B:C3:13:01:E9:23:3D:3C:BE:B2:4B Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 1C8B76C77B95A52BC74434ED611AE5AC619FC8FC Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa Signing time: Mon 29 Dec 2025 07:00:00 +0000 ROA not before: Mon 29 Dec 2025 06:55:00 +0000 ROA not after: Mon 28 Dec 2026 07:00:00 +0000 asID: 38320 IP address blocks: 119.110.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8b:76:c7:7b:95:a5:2b:c7:44:34:ed:61:1a:e5:ac:61:9f:c8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 29 06:55:00 2025 GMT Not After : Dec 28 07:00:00 2026 GMT Subject: CN=A5B9A62269E1E336AD0BC31301E9233D3CBEB24B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:25:cb:b1:db:aa:65:7f:0b:02:95:9a:44: f8:1f:d8:80:f5:a8:80:4f:60:fa:72:22:bb:5c:bb: 16:0a:28:0f:e9:35:d0:bb:f3:c1:33:d8:ca:06:ce: 03:16:bc:f6:b7:65:c8:9b:c0:0d:d3:f9:69:0a:9c: c7:59:db:44:cb:b0:84:85:6a:44:f8:63:74:1d:11: 8a:e9:bf:6c:ae:8d:55:34:93:19:66:45:d5:a4:c6: ea:cd:2c:56:62:09:87:32:21:10:f4:f6:5c:c2:a7: 8a:e5:61:b2:e2:79:ba:43:8e:3d:b8:45:44:9a:1a: 86:e2:70:0c:ae:d9:9e:db:a9:f3:54:5b:63:66:bc: a3:c4:a2:75:a7:77:bd:ea:c8:9f:8a:59:be:68:c7: 91:9b:2b:a9:b9:39:e2:05:af:a1:ef:0e:84:f8:8d: db:07:69:76:ec:82:99:b7:cc:6e:5e:9f:54:8a:bb: 75:9b:ca:9b:fa:8e:84:d7:9f:12:e8:5b:2f:f4:fc: 1c:5b:72:a7:44:55:1f:a2:0b:03:cc:42:f0:1e:76: d2:ab:01:50:25:db:9d:4a:28:e1:f4:c3:34:45:f8: 8a:77:b1:6e:ec:7b:04:63:9f:99:60:f6:cf:ac:4b: c3:02:51:9f:80:02:56:a3:3b:87:93:a1:26:b2:5a: 88:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:A6:22:69:E1:E3:36:AD:0B:C3:13:01:E9:23:3D:3C:BE:B2:4B X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3131392e3131302e37322e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.110.72.0/22 Signature Algorithm: sha256WithRSAEncryption cd:3d:e1:5c:ca:b4:e5:83:16:47:bf:f9:2c:3e:d0:01:3f:38: c8:2e:46:c9:2c:7f:9d:f6:5b:b8:26:b2:d6:8a:bf:bd:27:f3: f3:c7:4c:5f:90:05:99:cb:1f:b3:30:89:26:3b:ec:5b:d4:88: 9b:af:f9:b3:78:26:cf:a0:3b:40:76:e2:5e:c9:9e:e2:52:3f: bd:91:3a:ed:70:70:22:e1:6e:41:48:ec:ca:87:23:7b:c5:38: f3:06:28:87:1c:81:2e:d8:23:a8:f6:5a:3b:12:8f:b3:2a:98: 98:d7:0f:70:8b:4d:40:e3:50:72:77:18:ba:c2:6d:d6:eb:67: ad:8b:e9:42:28:c4:ae:22:cc:0a:32:ea:8a:bb:b3:fa:f9:17: 0c:ba:78:f6:fb:2e:37:a4:f7:c0:83:88:c3:0d:a4:22:2b:19: 72:8e:22:c7:d0:16:a4:c8:a8:32:2e:93:29:60:9a:b1:e0:6e: 0b:54:4c:4b:bd:98:49:c2:f7:d8:84:5d:c2:83:ff:ae:6d:83: 68:0c:ba:20:0b:82:63:33:d8:52:ef:a1:39:75:64:2f:9c:c2: c4:05:93:12:d3:24:56:fc:b0:13:98:1f:ca:48:cc:63:64:e3: 0d:25:9f:9e:22:07:e8:55:8c:ba:88:a9:5e:64:fa:58:e5:bc: 3b:21:7c:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHIt2x3uVpSvHRDTtYRrlrGGfyPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjkwNjU1MDBaFw0yNjEyMjgwNzAwMDBaMDMxMTAvBgNV BAMTKEE1QjlBNjIyNjlFMUUzMzZBRDBCQzMxMzAxRTkyMzNEM0NCRUIyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/SXLsduqZX8LApWaRPgf2ID1 qIBPYPpyIrtcuxYKKA/pNdC788Ez2MoGzgMWvPa3ZcibwA3T+WkKnMdZ20TLsISF akT4Y3QdEYrpv2yujVU0kxlmRdWkxurNLFZiCYcyIRD09lzCp4rlYbLiebpDjj24 RUSaGobicAyu2Z7bqfNUW2NmvKPEonWnd73qyJ+KWb5ox5GbK6m5OeIFr6HvDoT4 jdsHaXbsgpm3zG5en1SKu3Wbypv6joTXnxLoWy/0/BxbcqdEVR+iCwPMQvAedtKr AVAl251KKOH0wzRF+Ip3sW7sewRjn5lg9s+sS8MCUZ+AAlajO4eToSayWog1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpbmmImnh4zatC8MTAekjPTy+skswHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzEzOTJlMzEzMTMwMmUzNzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnduSDANBgkqhkiG 9w0BAQsFAAOCAQEAzT3hXMq05YMWR7/5LD7QAT84yC5GySx/nfZbuCay1oq/vSfz 88dMX5AFmcsfszCJJjvsW9SIm6/5s3gmz6A7QHbiXsme4lI/vZE67XBwIuFuQUjs yocje8U48wYohxyBLtgjqPZaOxKPsyqYmNcPcItNQONQcncYusJt1utnrYvpQijE riLMCjLqiruz+vkXDLp49vsuN6T3wIOIww2kIisZco4ix9AWpMioMi6TKWCaseBu C1RMS72YScL32IRdwoP/rm2DaAy6IAuCYzPYUu+hOXVkL5zCxAWTEtMkVvywE5gf ykjMY2TjDSWfniIH6FWMuoipXmT6WOW8OyF8qg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:22:02 2026 by rpki-client