This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39302e302f32342d3234203d3e203338373733.roa File: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (raw, json) Hash identifier: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54= Subject key identifier: ED:34:38:4A:70:9D:C2:15:98:8E:44:D9:19:37:40:5B:BA:3B:2B:2A Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 6AD28C72AAB0ABB5A3E89B29DF008E08F212A22F Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39302e302f32342d3234203d3e203338373733.roa Signing time: Tue 23 Dec 2025 03:03:06 +0000 ROA not before: Tue 23 Dec 2025 02:58:06 +0000 ROA not after: Tue 22 Dec 2026 03:03:06 +0000 asID: 38773 IP address blocks: 114.141.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d2:8c:72:aa:b0:ab:b5:a3:e8:9b:29:df:00:8e:08:f2:12:a2:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Dec 23 02:58:06 2025 GMT Not After : Dec 22 03:03:06 2026 GMT Subject: CN=ED34384A709DC215988E44D91937405BBA3B2B2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:0b:02:df:38:2d:7b:60:08:44:06:d5:62: e7:96:93:d5:12:cb:33:3d:c0:e6:53:34:94:72:4d: 18:2b:2b:65:ec:6f:1a:e4:4d:2a:6a:05:38:65:46: 95:64:41:6e:5a:be:80:08:f2:cb:73:00:f6:3b:e1: cf:d7:ae:c1:eb:93:11:a9:0e:54:c0:4c:6a:5a:f7: 62:12:14:e4:3b:e1:9c:17:94:02:b3:47:8a:14:ed: 29:2c:f6:92:f4:fb:97:48:06:62:20:b3:8a:b7:b4: ba:df:b5:d1:05:c0:a0:d9:6e:f3:5a:57:10:74:f6: d8:83:2d:9e:ea:14:1f:30:a2:75:bc:b3:21:b0:e0: 20:30:ff:e5:fa:4b:26:3b:fe:45:f5:70:33:b0:7c: db:15:d2:43:ef:01:ff:24:92:e0:ea:87:19:84:47: b3:00:74:8e:58:ce:09:ac:ff:60:e6:38:5f:a8:3c: 74:6c:f2:f8:31:73:bd:e7:b7:3c:20:92:88:82:29: e6:30:5c:55:e8:74:93:77:b5:d8:c0:4d:59:95:e9: d5:f9:77:62:eb:63:e0:64:e6:c9:a5:a9:72:63:63: 57:22:33:c3:67:cd:0d:ca:0b:6a:68:71:9f:79:1e: 10:19:0b:73:e1:75:f0:fb:c0:75:24:e8:1b:1f:0a: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:34:38:4A:70:9D:C2:15:98:8E:44:D9:19:37:40:5B:BA:3B:2B:2A X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39302e302f32342d3234203d3e203338373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.141.90.0/24 Signature Algorithm: sha256WithRSAEncryption 16:c2:98:59:ac:77:9f:df:12:dc:94:84:ff:bb:56:d2:40:10: e5:c0:d1:b0:ff:51:4b:8b:d3:11:0b:a0:3c:d2:1b:21:dc:af: 7a:23:19:0a:ff:c9:d4:97:72:22:e1:24:30:08:cb:66:6b:15: b2:e9:92:a5:64:a1:54:ff:d5:c2:14:62:a4:ba:d0:a1:39:4c: e5:fe:3d:68:24:85:6e:e3:2c:f9:a5:69:84:39:26:4c:25:1e: 28:34:35:2c:c6:4e:cc:cb:85:94:12:65:a3:d0:da:a3:03:fb: ad:3f:b3:cd:d0:30:18:62:96:63:6e:a2:95:0d:62:3a:12:4b: ee:af:db:5b:bc:f6:2f:3f:30:0d:3d:f0:4c:b6:f3:4d:4b:12: d4:59:ec:37:d3:bb:9b:26:53:ad:f7:d8:4c:0f:fe:2e:67:51: db:af:0f:e3:2c:78:74:45:44:1c:56:6b:15:a0:2c:b2:f3:2f: 59:e6:cc:16:f2:b7:04:8b:da:2e:a3:01:d6:73:9e:5e:fe:f1: 55:1f:12:d5:be:a9:1e:c7:9b:a7:db:ac:0d:53:66:55:dc:8f: b1:90:ce:c6:ac:9d:4a:c5:ff:b8:ea:6e:96:81:46:a8:2f:90: 87:eb:0b:4c:21:2a:33:e8:d5:6c:42:3b:e0:a7:44:a3:03:77: 17:17:7f:93 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUatKMcqqwq7Wj6Jsp3wCOCPISoi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTEyMjMwMjU4MDZaFw0yNjEyMjIwMzAzMDZaMDMxMTAvBgNV BAMTKEVEMzQzODRBNzA5REMyMTU5ODhFNDREOTE5Mzc0MDVCQkEzQjJCMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaDQsC3zgte2AIRAbVYueWk9US yzM9wOZTNJRyTRgrK2XsbxrkTSpqBThlRpVkQW5avoAI8stzAPY74c/XrsHrkxGp DlTATGpa92ISFOQ74ZwXlAKzR4oU7Sks9pL0+5dIBmIgs4q3tLrftdEFwKDZbvNa VxB09tiDLZ7qFB8wonW8syGw4CAw/+X6SyY7/kX1cDOwfNsV0kPvAf8kkuDqhxmE R7MAdI5Yzgms/2DmOF+oPHRs8vgxc73ntzwgkoiCKeYwXFXodJN3tdjATVmV6dX5 d2LrY+Bk5smlqXJjY1ciM8NnzQ3KC2pocZ95HhAZC3PhdfD7wHUk6BsfCsaTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7TQ4SnCdwhWYjkTZGTdAW7o7KyowHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHKNWjANBgkqhkiG 9w0BAQsFAAOCAQEAFsKYWax3n98S3JSE/7tW0kAQ5cDRsP9RS4vTEQugPNIbIdyv eiMZCv/J1JdyIuEkMAjLZmsVsumSpWShVP/VwhRipLrQoTlM5f49aCSFbuMs+aVp hDkmTCUeKDQ1LMZOzMuFlBJlo9DaowP7rT+zzdAwGGKWY26ilQ1iOhJL7q/bW7z2 Lz8wDT3wTLbzTUsS1FnsN9O7myZTrffYTA/+LmdR268P4yx4dEVEHFZrFaAssvMv WebMFvK3BIvaLqMB1nOeXv7xVR8S1b6pHsebp9usDVNmVdyPsZDOxqydSsX/uOpu loFGqC+Qh+sLTCEqM+jVbEI74KdEowN3Fxd/kw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:20 2026 by rpki-client