This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa File: 3132302e38392e38382e302f32342d3234203d3e203435323839.roa (raw, json) Hash identifier: zV6VOfyU7gHl6iq1/boiJwTObcVc0Um3Mv8W2+pcczY= Subject key identifier: 7E:28:87:C0:9E:45:39:EB:DB:5C:B5:CD:6C:C7:89:3E:53:4F:F3:E0 Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 6CD65646E468E59DA649E271B614BFCED0964EB4 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa Signing time: Sat 17 Jan 2026 08:01:08 +0000 ROA not before: Sat 17 Jan 2026 07:56:08 +0000 ROA not after: Sat 16 Jan 2027 08:01:08 +0000 asID: 45289 IP address blocks: 120.89.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d6:56:46:e4:68:e5:9d:a6:49:e2:71:b6:14:bf:ce:d0:96:4e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Jan 17 07:56:08 2026 GMT Not After : Jan 16 08:01:08 2027 GMT Subject: CN=7E2887C09E4539EBDB5CB5CD6CC7893E534FF3E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:99:d4:49:59:be:e4:e6:46:5d:cb:68:0e: 30:9a:88:43:11:33:29:ce:c5:3f:78:79:5e:92:a2: 23:3b:b1:66:73:f2:ee:89:69:29:33:fb:b7:34:e3: ad:23:c9:2a:91:f2:93:ef:a1:dd:f2:1e:f6:13:50: cd:37:e3:30:b1:c0:08:8a:f4:44:0d:d1:59:4f:6d: 9c:f2:72:e3:aa:87:2a:2d:61:9b:aa:a2:b0:7c:75: 79:d4:37:7c:b3:34:01:aa:0d:ae:9b:85:fe:3b:8c: 49:32:19:bb:c0:ce:4f:9e:06:5a:99:04:86:3d:46: 9d:2f:7f:cf:2b:7f:bd:0d:09:ba:84:94:04:01:dd: 08:92:bd:4e:49:e9:1c:05:10:97:ee:cb:53:fc:9b: 22:8b:57:e6:0d:69:b0:65:6d:5d:b0:be:bf:51:e2: 23:4a:99:c9:d1:de:5b:bf:3e:a3:df:a4:b7:3a:fd: 76:08:f5:19:88:32:20:3a:f7:a7:0a:b7:ba:89:67: a0:b5:6d:c3:d9:10:2a:71:63:16:f0:6f:73:b6:70: 18:68:b7:64:5c:b6:10:04:71:4f:8a:c2:77:52:18: 00:8f:ac:ac:09:f2:3a:b9:0b:b6:fc:61:32:83:71: 20:aa:30:a0:2a:dc:99:9b:32:78:59:7b:19:88:aa: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:28:87:C0:9E:45:39:EB:DB:5C:B5:CD:6C:C7:89:3E:53:4F:F3:E0 X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3132302e38392e38382e302f32342d3234203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.89.88.0/24 Signature Algorithm: sha256WithRSAEncryption a1:c8:b2:6c:d8:72:75:a1:35:9e:de:c2:04:77:b9:cf:5a:fb: f6:49:3f:23:00:58:dd:04:e1:1c:36:5a:e3:0f:f9:15:a3:66: 13:a7:83:48:42:b5:25:34:f1:b4:e2:de:81:8d:8c:6c:81:8f: 15:ae:34:ee:61:08:e7:47:d7:81:51:7e:00:94:e0:e1:2f:89: 51:9e:f0:b6:c5:00:72:f6:86:6f:01:0b:b7:3d:6c:6e:2c:ab: 5b:60:cb:55:24:29:74:27:7e:27:59:51:0c:67:a3:7b:22:55: a2:74:d7:e8:76:a7:42:46:2f:72:9e:fc:e8:70:d2:e2:f6:88: ac:6d:f2:8e:34:51:b5:90:6a:e3:39:74:e2:55:41:79:51:d7: 01:19:33:b6:54:4e:bd:ff:c5:82:da:01:50:45:93:ad:b7:89: fd:ce:7e:28:81:26:a6:29:62:61:b0:b9:ce:4e:42:e6:4a:fc: c5:0f:60:6d:7b:bb:5a:58:9e:98:e4:ac:81:f5:84:4b:14:2d: 8f:9d:4c:bc:5a:82:2d:7e:43:d9:a8:cd:52:b6:12:9f:dc:42: af:9f:94:3b:bd:fe:7a:38:6a:61:df:a9:38:36:f0:b5:4d:c7: a2:0c:48:36:a6:0a:2b:a5:a3:fc:e5:16:88:f0:a8:08:ee:31: b9:fa:33:c2 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbNZWRuRo5Z2mSeJxthS/ztCWTrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNjAxMTcwNzU2MDhaFw0yNzAxMTYwODAxMDhaMDMxMTAvBgNV BAMTKDdFMjg4N0MwOUU0NTM5RUJEQjVDQjVDRDZDQzc4OTNFNTM0RkYzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IZnUSVm+5OZGXctoDjCaiEMR MynOxT94eV6SoiM7sWZz8u6JaSkz+7c0460jySqR8pPvod3yHvYTUM034zCxwAiK 9EQN0VlPbZzycuOqhyotYZuqorB8dXnUN3yzNAGqDa6bhf47jEkyGbvAzk+eBlqZ BIY9Rp0vf88rf70NCbqElAQB3QiSvU5J6RwFEJfuy1P8myKLV+YNabBlbV2wvr9R 4iNKmcnR3lu/PqPfpLc6/XYI9RmIMiA696cKt7qJZ6C1bcPZECpxYxbwb3O2cBho t2RcthAEcU+KwndSGACPrKwJ8jq5C7b8YTKDcSCqMKAq3JmbMnhZexmIqoh7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUfiiHwJ5FOevbXLXNbMeJPlNP8+AwHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMxMzIzMDJlMzgzOTJlMzgzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM4Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB4WVgwDQYJKoZIhvcN AQELBQADggEBAKHIsmzYcnWhNZ7ewgR3uc9a+/ZJPyMAWN0E4Rw2WuMP+RWjZhOn g0hCtSU08bTi3oGNjGyBjxWuNO5hCOdH14FRfgCU4OEviVGe8LbFAHL2hm8BC7c9 bG4sq1tgy1UkKXQnfidZUQxno3siVaJ01+h2p0JGL3Ke/Ohw0uL2iKxt8o40UbWQ auM5dOJVQXlR1wEZM7ZUTr3/xYLaAVBFk623if3OfiiBJqYpYmGwuc5OQuZK/MUP YG17u1pYnpjkrIH1hEsULY+dTLxagi1+Q9mozVK2Ep/cQq+flDu9/no4amHfqTg2 8LVNx6IMSDamCiulo/zlFojwqAjuMbn6M8I= -----END CERTIFICATE-----Generated at Mon Jan 26 00:47:46 2026 by rpki-client