This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa File: 3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa (raw, json) Hash identifier: zf1MaGLqV/tw8WvNNhputR/GL/ayDucvUD33jfoZSO8= Subject key identifier: AA:D8:49:A5:EC:DD:3B:7E:7A:00:7D:F1:B0:B3:48:53:1F:36:74:79 Certificate issuer: /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Certificate serial: 1435315B2906BED7419539994FA022F7D59AE911 Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa Signing time: Tue 11 Nov 2025 03:02:02 +0000 ROA not before: Tue 11 Nov 2025 02:57:02 +0000 ROA not after: Tue 10 Nov 2026 03:02:02 +0000 asID: 153082 IP address blocks: 160.22.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:35:31:5b:29:06:be:d7:41:95:39:99:4f:a0:22:f7:d5:9a:e9:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441 Validity Not Before: Nov 11 02:57:02 2025 GMT Not After : Nov 10 03:02:02 2026 GMT Subject: CN=AAD849A5ECDD3B7E7A007DF1B0B348531F367479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:59:68:1c:d9:58:7d:a0:6c:21:b4:c7:89: 9b:63:48:ab:ff:0e:e2:f3:2e:b6:5e:7e:ff:f0:78: 99:bb:62:2d:dd:7c:c3:b8:1c:4a:8d:84:e2:f3:cc: db:2f:09:44:56:06:f5:de:e1:64:80:30:71:b4:cc: ac:6e:5f:67:b9:c6:db:74:da:2b:39:93:c7:dd:44: 48:a9:d5:0d:83:48:a3:31:79:93:fd:27:65:48:0a: b6:59:b4:e6:9d:03:7d:81:99:69:34:14:b1:df:12: 43:19:68:dd:6e:38:c6:94:d0:9b:38:30:22:67:f9: 82:f6:73:1b:e7:03:eb:0e:00:c2:41:91:37:6b:f0: 0a:21:9d:00:06:ea:f7:dd:1e:5c:27:db:d0:86:d0: 43:61:a3:41:8b:4c:5d:49:61:48:c4:56:c8:5f:80: 34:d1:89:ae:54:76:38:b9:bc:a2:2a:16:00:aa:fd: dd:36:40:d5:12:a5:3d:84:1b:47:46:58:ce:8b:f4: 60:55:1c:0a:de:b1:e2:16:76:05:f8:42:81:4f:c7: 91:f7:97:14:3b:84:e9:a7:80:ea:24:58:05:48:12: 0a:e7:f1:68:e9:f1:ab:6f:18:85:7c:15:92:b0:7a: 1d:3f:4f:61:17:be:ca:85:99:47:ce:29:d0:48:5a: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D8:49:A5:EC:DD:3B:7E:7A:00:7D:F1:B0:B3:48:53:1F:36:74:79 X509v3 Authority Key Identifier: keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231382e302f32332d3233203d3e20313533303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.218.0/23 Signature Algorithm: sha256WithRSAEncryption 60:08:8f:43:c6:70:20:92:d9:9b:df:e5:19:9f:4b:9a:25:1a: 4b:2e:4a:a0:3e:9f:ab:1c:e2:6a:af:1b:a0:d5:f3:2d:1f:c3: d2:2f:fa:06:cc:54:d6:84:52:8f:10:22:f1:38:38:71:01:52: 8b:54:f6:04:6f:9d:fb:bf:fc:50:8e:57:c9:1d:9f:e1:f7:80: 60:8e:a5:ef:9a:b3:81:df:e8:c2:88:46:cf:71:08:7d:f5:98: 70:fd:f9:34:47:31:d9:bf:eb:28:0c:ae:9b:55:d3:84:83:57: 80:f5:d3:75:40:18:da:19:a4:fc:c8:f8:c2:6b:62:08:6c:97: 5e:9f:6e:80:69:3f:65:35:ed:c4:12:4a:13:99:6e:10:0d:b1: 10:88:3a:e7:3c:89:e4:d1:ee:84:2c:16:32:5e:52:ea:f8:36: 2e:86:2f:9b:50:4b:c1:ea:56:cc:58:c0:b9:7b:a2:f7:5b:54: a7:80:ca:df:1e:d7:03:9b:4b:04:c6:03:19:e3:f3:07:9f:5f: c1:a1:35:f1:97:87:03:70:b1:fe:81:8a:03:e7:33:4f:9d:83: ae:95:ca:ab:ea:97:17:29:50:ba:a0:05:82:0c:d0:c2:8b:32: a7:34:9b:06:bb:6b:cd:1f:ac:94:33:08:55:20:9e:5b:a8:68: e9:44:06:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFDUxWykGvtdBlTmZT6Ai99Wa6REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3 Q0NCRTQ0MTAeFw0yNTExMTEwMjU3MDJaFw0yNjExMTAwMzAyMDJaMDMxMTAvBgNV BAMTKEFBRDg0OUE1RUNERDNCN0U3QTAwN0RGMUIwQjM0ODUzMUYzNjc0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBXFloHNlYfaBsIbTHiZtjSKv/ DuLzLrZefv/weJm7Yi3dfMO4HEqNhOLzzNsvCURWBvXe4WSAMHG0zKxuX2e5xtt0 2is5k8fdREip1Q2DSKMxeZP9J2VICrZZtOadA32BmWk0FLHfEkMZaN1uOMaU0Js4 MCJn+YL2cxvnA+sOAMJBkTdr8AohnQAG6vfdHlwn29CG0ENho0GLTF1JYUjEVshf gDTRia5Udji5vKIqFgCq/d02QNUSpT2EG0dGWM6L9GBVHAreseIWdgX4QoFPx5H3 lxQ7hOmngOokWAVIEgrn8Wjp8atvGIV8FZKweh0/T2EXvsqFmUfOKdBIWvQXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqthJpezdO356AH3xsLNIUx82dHkwHwYDVR0j BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2 OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC RTQ0MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjZGIyYmY4LWJlYjMtNGNjOS04 M2FkLTJjOWQ1NzVmOTRhZi8wLzMxMzYzMDJlMzIzMjJlMzIzMTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMzMzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBbaMA0GCSqG SIb3DQEBCwUAA4IBAQBgCI9DxnAgktmb3+UZn0uaJRpLLkqgPp+rHOJqrxug1fMt H8PSL/oGzFTWhFKPECLxODhxAVKLVPYEb537v/xQjlfJHZ/h94BgjqXvmrOB3+jC iEbPcQh99Zhw/fk0RzHZv+soDK6bVdOEg1eA9dN1QBjaGaT8yPjCa2IIbJden26A aT9lNe3EEkoTmW4QDbEQiDrnPInk0e6ELBYyXlLq+DYuhi+bUEvB6lbMWMC5e6L3 W1SngMrfHtcDm0sExgMZ4/MHn1/BoTXxl4cDcLH+gYoD5zNPnYOulcqr6pcXKVC6 oAWCDNDCizKnNJsGu2vNH6yUMwhVIJ5bqGjpRAae -----END CERTIFICATE-----Generated at Sun Dec 7 06:01:02 2025 by rpki-client