This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa File: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (raw, json) Hash identifier: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs= Subject key identifier: 18:D2:7B:3A:45:AC:24:46:52:9A:D3:CD:35:84:F5:10:AC:59:8B:E8 Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 0E2504238F00EF4B5F8453E7D6469BD15924ACFB Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa Signing time: Fri 07 Nov 2025 05:00:01 +0000 ROA not before: Fri 07 Nov 2025 04:55:01 +0000 ROA not after: Fri 06 Nov 2026 05:00:01 +0000 asID: 152403 IP address blocks: 157.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:25:04:23:8f:00:ef:4b:5f:84:53:e7:d6:46:9b:d1:59:24:ac:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Nov 7 04:55:01 2025 GMT Not After : Nov 6 05:00:01 2026 GMT Subject: CN=18D27B3A45AC2446529AD3CD3584F510AC598BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:d2:58:59:bc:d8:ca:af:93:e9:e2:75:ed: 28:a7:b2:7c:6b:d1:59:3f:58:43:40:35:31:b4:e9: 9b:83:38:f9:f7:a8:5c:48:19:75:50:e6:6a:f6:3f: da:f9:f3:9e:dd:63:50:f7:fc:13:d1:7f:88:a1:a0: 06:ca:06:d2:d4:1d:74:61:56:c6:d3:9c:fd:fb:fb: 74:7a:32:4d:ff:53:3f:2c:cc:7f:5c:68:98:b0:4a: 3b:1e:d5:96:90:7b:36:31:ea:d2:97:5e:4f:a1:ea: 22:ad:31:53:51:10:a8:58:88:31:c2:9c:7c:ab:0d: 9c:40:3e:30:b8:3c:d2:2b:c7:07:1e:b5:2e:22:64: b6:d7:51:46:69:f6:43:d2:a6:40:9a:92:59:f2:40: 24:0f:6b:97:b2:b2:f2:37:ba:66:18:85:7c:42:11: 41:67:cf:b9:ef:b8:7d:a2:b5:32:d6:ae:01:03:1c: 1a:96:dc:5b:92:0c:4b:f0:2e:d8:e1:72:cd:dd:f9: 70:06:b6:38:df:97:f9:bf:62:fb:1c:d4:ef:82:54: 66:91:15:45:8f:8a:29:14:7c:1d:f8:62:92:52:cb: 55:d1:c7:56:aa:0c:51:4e:ec:8b:91:92:ef:db:c1: 02:84:9e:0a:89:ad:d8:8b:b0:a5:3c:26:51:24:ac: 97:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D2:7B:3A:45:AC:24:46:52:9A:D3:CD:35:84:F5:10:AC:59:8B:E8 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.133.0/24 Signature Algorithm: sha256WithRSAEncryption 34:07:fd:8c:0b:70:04:8c:5d:d1:d1:02:93:cb:10:78:03:13: d6:26:a0:80:a0:5b:0f:f6:23:9b:cc:f0:53:6a:f0:c0:6d:5c: f4:fa:a3:7a:0f:b4:26:bf:a0:69:6a:86:12:37:4e:76:7e:b9: e5:f3:17:8f:e0:24:7e:cd:ca:dc:56:b5:67:be:54:eb:33:40: a0:bc:1a:16:f2:4b:39:19:68:10:29:21:3d:7c:03:b4:3a:30: 42:73:36:ff:cd:df:5a:38:3d:6d:bd:9a:97:98:d7:77:76:9b: 13:09:90:2f:ba:9c:6b:14:7b:23:72:70:35:9c:ba:1e:7c:b6: 91:e1:33:c2:37:80:59:4b:f5:7f:65:51:dc:0d:1c:94:ee:ff: 6a:5c:84:a9:98:c3:46:ce:87:e8:92:35:0f:ee:b7:77:b6:a6: 8c:8a:c4:3a:d3:51:89:7c:5a:97:60:57:64:c3:49:88:3b:fa: 4f:d0:4d:ef:c9:81:59:6a:ef:17:14:2d:98:e8:5f:f5:ab:5e: b0:40:4e:d0:e6:d7:4f:a9:5d:bb:ff:cf:a1:db:6a:b6:75:59: bf:7c:53:9e:02:ed:1f:27:b2:12:af:fb:c5:0f:a5:14:13:5f: d4:b0:c0:72:1a:c2:1f:f4:63:f1:99:53:63:b5:2e:e0:3b:15: 72:75:bd:ae -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDiUEI48A70tfhFPn1kab0VkkrPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTExMDcwNDU1MDFaFw0yNjExMDYwNTAwMDFaMDMxMTAvBgNV BAMTKDE4RDI3QjNBNDVBQzI0NDY1MjlBRDNDRDM1ODRGNTEwQUM1OThCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sNJYWbzYyq+T6eJ17Sinsnxr 0Vk/WENANTG06ZuDOPn3qFxIGXVQ5mr2P9r5857dY1D3/BPRf4ihoAbKBtLUHXRh VsbTnP37+3R6Mk3/Uz8szH9caJiwSjse1ZaQezYx6tKXXk+h6iKtMVNREKhYiDHC nHyrDZxAPjC4PNIrxwcetS4iZLbXUUZp9kPSpkCaklnyQCQPa5eysvI3umYYhXxC EUFnz7nvuH2itTLWrgEDHBqW3FuSDEvwLtjhcs3d+XAGtjjfl/m/Yvsc1O+CVGaR FUWPiikUfB34YpJSy1XRx1aqDFFO7IuRku/bwQKEngqJrdiLsKU8JlEkrJctAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGNJ7OkWsJEZSmtPNNYT1EKxZi+gwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5YzE1Yjc4LTIwNzEtNDRkMS05 YTFkLWFkNmViMDlmYWUwOC8wLzMxMzUzNzJlMzIzMDJlMzEzMzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSFMA0GCSqG SIb3DQEBCwUAA4IBAQA0B/2MC3AEjF3R0QKTyxB4AxPWJqCAoFsP9iObzPBTavDA bVz0+qN6D7Qmv6BpaoYSN052frnl8xeP4CR+zcrcVrVnvlTrM0CgvBoW8ks5GWgQ KSE9fAO0OjBCczb/zd9aOD1tvZqXmNd3dpsTCZAvupxrFHsjcnA1nLoefLaR4TPC N4BZS/V/ZVHcDRyU7v9qXISpmMNGzofokjUP7rd3tqaMisQ601GJfFqXYFdkw0mI O/pP0E3vyYFZau8XFC2Y6F/1q16wQE7Q5tdPqV27/8+h22q2dVm/fFOeAu0fJ7IS r/vFD6UUE1/UsMByGsIf9GPxmVNjtS7gOxVydb2u -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:58 2025 by rpki-client