This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
File: 3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: oZVzlSUj6QR7EmNdGk/WoXFjE/7mU+sYp1a2+E8DfnY=
Subject key identifier: 87:82:71:78:50:01:BE:31:62:2C:58:3F:9F:9E:0C:8A:08:CE:A1:81
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 1AE42B03B82019843318A6A375EF748D4BBF2B25
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
Signing time: Thu 13 Nov 2025 08:00:00 +0000
ROA not before: Thu 13 Nov 2025 07:55:00 +0000
ROA not after: Thu 12 Nov 2026 08:00:00 +0000
asID: 9794
IP address blocks: 115.178.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e4:2b:03:b8:20:19:84:33:18:a6:a3:75:ef:74:8d:4b:bf:2b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Nov 13 07:55:00 2025 GMT
Not After : Nov 12 08:00:00 2026 GMT
Subject: CN=878271785001BE31622C583F9F9E0C8A08CEA181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:88:27:87:39:32:43:87:55:7b:2c:86:54:
0f:95:79:3b:76:d4:2b:fd:e4:72:ea:7f:39:4e:20:
de:89:ee:bb:65:cc:70:a1:f3:49:24:74:13:97:c4:
39:4a:6e:44:2c:f0:2c:96:5e:53:d1:70:0b:0c:f6:
5d:5b:4e:c7:89:da:75:3b:0f:6a:be:15:ef:a0:f6:
23:c7:7a:67:de:8d:b2:d8:ab:0d:07:df:9c:25:59:
7f:a3:14:a3:6f:5b:d7:b2:d2:7b:69:b8:8c:dc:f5:
9f:4e:5f:d1:6f:82:17:8a:21:7c:f5:1d:75:f3:b4:
e8:2f:4d:17:10:8a:f4:75:ea:92:c1:45:c2:5a:e1:
2f:86:14:60:49:45:73:06:29:3a:ea:28:ca:8f:d0:
91:f6:25:90:7e:33:bf:90:f0:32:79:42:ac:68:87:
bb:80:b9:e5:5e:83:76:17:08:fc:68:12:cf:ff:cb:
a0:56:a9:b3:52:b9:c6:60:17:9a:6d:3f:5c:3d:35:
ba:69:a4:37:cd:9b:d3:8c:41:85:70:9f:8a:28:a0:
61:a1:64:6d:b5:13:07:8d:50:93:0b:81:1b:aa:a3:
a7:ea:3e:d6:1e:50:a3:1f:57:15:40:7d:ba:a0:3b:
4c:e2:0b:dc:7b:ad:02:d2:2c:bb:3d:58:a4:88:13:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:82:71:78:50:01:BE:31:62:2C:58:3F:9F:9E:0C:8A:08:CE:A1:81
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.133.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5f:23:d4:33:84:dd:78:f7:f0:a7:55:8b:99:68:ff:7b:9c:
cd:26:04:b4:43:cb:99:b3:19:13:6b:12:2e:4d:af:0e:61:e5:
2c:04:92:73:d1:92:66:6f:f0:4b:76:41:55:7f:24:68:57:29:
d7:ed:9c:5b:84:89:bf:50:60:5a:da:19:cb:4c:c0:bd:7e:e1:
fa:95:8e:d2:53:3b:fb:45:14:e8:b0:eb:74:49:b6:83:2d:6b:
05:32:dc:4d:b1:c4:d4:e8:71:c3:06:1c:1e:4f:20:2d:df:c0:
84:64:bb:40:fd:e8:89:30:22:ba:58:74:f1:99:3a:19:75:7a:
f3:51:16:8b:ff:c9:d7:4a:f3:f6:0b:74:5b:b2:e6:e9:9a:7e:
2b:4d:50:87:18:4c:c2:6f:34:02:61:d2:d1:e7:a1:97:ed:98:
83:2f:27:0d:99:95:7b:01:8a:e2:09:3a:cd:0c:80:04:94:e4:
de:27:96:45:a2:bf:16:dc:6d:c3:ba:be:b4:73:27:bd:27:cc:
28:5c:bf:ba:c0:2d:41:6b:29:a0:c8:76:80:49:85:a3:fb:be:
0b:a9:e7:0d:65:fe:4a:e9:95:b8:31:f1:78:6d:8d:22:b8:1c:
0b:1b:84:09:36:d8:c0:f6:2a:20:4b:c1:bf:17:a2:7e:7a:ed:
0b:ae:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:38 2025 by rpki-client