This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: BEXTqeRuOYeCds/GtbXckcTCx17EaQiOC1/BtPp70DI= Subject key identifier: E9:32:A6:39:F0:E1:D6:E4:CE:48:C6:3D:2A:BA:C5:E9:B1:61:1E:98 Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 4FC4FD0CAF7970DD54F3AEC5794EB21637BC5431 Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa Signing time: Thu 11 Dec 2025 03:02:06 +0000 ROA not before: Thu 11 Dec 2025 02:57:06 +0000 ROA not after: Thu 10 Dec 2026 03:02:06 +0000 asID: 141142 IP address blocks: 122.248.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c4:fd:0c:af:79:70:dd:54:f3:ae:c5:79:4e:b2:16:37:bc:54:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Dec 11 02:57:06 2025 GMT Not After : Dec 10 03:02:06 2026 GMT Subject: CN=E932A639F0E1D6E4CE48C63D2ABAC5E9B1611E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:6b:42:fa:26:b5:53:ee:99:13:57:5a:9e: d5:a1:8c:fb:60:b0:af:c0:e6:46:e4:4e:9a:ec:55: be:57:a9:e4:02:eb:59:78:74:39:14:66:ee:ff:c2: 0d:6a:08:83:98:ed:85:bf:7c:51:87:66:84:95:3c: 53:59:80:b7:5d:7a:67:3a:1c:ae:21:13:47:9c:fc: f7:8b:3a:4f:a4:e9:eb:9b:cd:51:ef:0b:ca:b3:5b: 38:46:03:a3:60:76:4e:ef:a4:38:12:28:b3:5e:fb: ef:bd:e6:84:b2:a1:b3:34:09:4e:fb:a3:0a:ec:89: 94:46:eb:c9:2b:70:9b:fd:db:f4:b7:a1:a7:8a:87: 45:38:0b:97:19:0a:cf:54:e0:19:b2:75:e6:05:e5: e3:c6:46:4a:6d:15:18:7d:0c:46:99:71:7e:dd:d9: 5b:40:08:a9:0b:2e:5a:17:ae:0d:26:76:96:ba:c6: dd:79:d3:e2:ba:bc:cd:2c:d2:01:81:39:9b:ba:b3: c2:de:16:00:59:1c:2b:68:22:53:ae:ca:d4:4d:30: c5:f9:d8:1c:9c:07:56:2f:8c:a3:e7:28:36:f5:e4: f3:e1:ad:ac:78:47:aa:67:6a:f2:26:cd:16:be:be: 96:00:81:52:0a:f8:02:3e:9a:95:b3:dc:7e:d1:85: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:A6:39:F0:E1:D6:E4:CE:48:C6:3D:2A:BA:C5:E9:B1:61:1E:98 X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34322e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.42.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:41:1e:d5:02:fb:24:0c:90:67:ec:4f:ff:ee:b5:f5:73:60: 9e:34:0e:3c:dd:06:43:ac:9f:a8:2c:c1:87:0e:4b:20:dc:c6: 3e:e9:1b:6f:04:c1:e0:d4:07:a8:cf:36:c9:6b:3f:da:fa:ef: df:a5:75:92:27:81:af:db:4f:05:7f:40:20:c1:b1:3c:88:3f: 35:a0:4f:e0:cd:b7:c3:d1:eb:56:1d:d4:88:9e:10:56:1b:ea: 82:95:a7:ba:89:b3:83:57:49:39:ea:43:bc:d5:db:12:0d:e3: 97:a4:8c:f3:a0:c0:6f:8f:5f:e1:c6:c2:58:5e:cf:45:a6:bc: 2d:f3:51:c5:f8:a4:14:8e:a9:5b:32:6e:59:01:b8:b4:ee:16: ef:4d:47:4e:53:52:ef:56:05:95:f8:d8:3c:9c:f4:5b:9d:69: 3e:44:72:2c:db:1b:b1:2a:79:8c:65:de:07:1a:d5:b0:bc:48: 3b:c2:7f:59:1a:d7:27:1e:dc:20:9d:98:ae:b6:11:2a:d0:a0: 06:a4:a0:95:7d:f5:d6:31:49:20:65:bc:a4:2f:72:30:2b:04: b5:01:e4:d2:c5:aa:2c:17:10:4e:21:e7:80:ed:31:44:6d:c3: a5:d0:eb:eb:9a:75:8e:65:7c:fd:87:9d:ba:d2:5e:57:9f:c8: ef:5e:64:6f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT8T9DK95cN1U867FeU6yFje8VDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTEyMTEwMjU3MDZaFw0yNjEyMTAwMzAyMDZaMDMxMTAvBgNV BAMTKEU5MzJBNjM5RjBFMUQ2RTRDRTQ4QzYzRDJBQkFDNUU5QjE2MTFFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHWtC+ia1U+6ZE1dantWhjPtg sK/A5kbkTprsVb5XqeQC61l4dDkUZu7/wg1qCIOY7YW/fFGHZoSVPFNZgLddemc6 HK4hE0ec/PeLOk+k6eubzVHvC8qzWzhGA6Ngdk7vpDgSKLNe+++95oSyobM0CU77 owrsiZRG68krcJv92/S3oaeKh0U4C5cZCs9U4BmydeYF5ePGRkptFRh9DEaZcX7d 2VtACKkLLloXrg0mdpa6xt150+K6vM0s0gGBOZu6s8LeFgBZHCtoIlOuytRNMMX5 2BycB1YvjKPnKDb15PPhrax4R6pnavImzRa+vpYAgVIK+AI+mpWz3H7Rhbz5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6TKmOfDh1uTOSMY9KrrF6bFhHpgwHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevgqMA0GCSqG SIb3DQEBCwUAA4IBAQCOQR7VAvskDJBn7E//7rX1c2CeNA483QZDrJ+oLMGHDksg 3MY+6RtvBMHg1AeozzbJaz/a+u/fpXWSJ4Gv208Ff0AgwbE8iD81oE/gzbfD0etW HdSInhBWG+qClae6ibODV0k56kO81dsSDeOXpIzzoMBvj1/hxsJYXs9Fprwt81HF +KQUjqlbMm5ZAbi07hbvTUdOU1LvVgWV+Ng8nPRbnWk+RHIs2xuxKnmMZd4HGtWw vEg7wn9ZGtcnHtwgnZiuthEq0KAGpKCVffXWMUkgZbykL3IwKwS1AeTSxaosFxBO IeeA7TFEbcOl0OvrmnWOZXz9h5260l5Xn8jvXmRv -----END CERTIFICATE-----Generated at Fri Dec 19 01:21:34 2025 by rpki-client