This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa
File: 3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier: 4JEio1LI/47oTTwab+bEwsY8BELisLkLzwHeiFuF2LY=
Subject key identifier: 96:B0:ED:A1:92:E1:18:27:86:C7:F0:47:04:8D:F6:16:82:D0:E6:AF
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 123A27EBBC76B3A81398E4FB1858957A26BFD219
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa
Signing time: Thu 13 Nov 2025 09:00:00 +0000
ROA not before: Thu 13 Nov 2025 08:55:00 +0000
ROA not after: Thu 12 Nov 2026 09:00:00 +0000
asID: 9794
IP address blocks: 115.178.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3a:27:eb:bc:76:b3:a8:13:98:e4:fb:18:58:95:7a:26:bf:d2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Nov 13 08:55:00 2025 GMT
Not After : Nov 12 09:00:00 2026 GMT
Subject: CN=96B0EDA192E1182786C7F047048DF61682D0E6AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:6f:18:a0:96:d9:50:72:4a:cb:fb:fc:94:
02:9a:45:74:e8:57:4a:0c:15:f3:01:7e:dd:37:bf:
75:21:44:7d:44:a6:34:73:e8:8e:ad:5f:77:8f:86:
f8:37:4d:94:2a:df:8b:3e:1b:e3:b3:21:12:8a:97:
74:61:0e:98:06:24:66:28:4e:47:48:6b:03:9d:88:
00:06:c2:79:54:0e:f9:f4:4d:1c:7e:85:c5:46:d6:
9e:9c:88:16:6a:7f:b0:73:9a:79:15:0b:55:79:33:
2c:7e:87:a5:60:b7:a2:9f:96:a6:dd:5f:1b:2b:26:
e2:eb:4b:c9:29:b7:56:14:71:9f:50:2b:98:81:f5:
23:e3:1a:1e:43:0d:83:24:bd:47:5e:9d:42:bd:90:
e9:5c:c6:28:e7:10:64:8b:6b:3d:ce:ec:49:7f:e7:
18:3d:26:48:f4:57:f2:78:cc:e6:d6:ff:df:a3:c7:
f8:fc:07:b1:ac:b6:42:a1:45:a4:bb:a7:05:da:49:
e7:40:93:d6:cd:af:0c:41:b2:a7:c6:e7:1f:a4:9d:
6c:92:c5:76:b5:ce:02:3f:51:61:46:b8:bd:13:b2:
a9:62:3f:9f:b6:25:5b:64:12:c3:01:57:73:0e:76:
30:e1:7c:41:97:56:16:24:3c:32:07:ca:78:4e:ca:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:ED:A1:92:E1:18:27:86:C7:F0:47:04:8D:F6:16:82:D0:E6:AF
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133342e302f32342d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.134.0/24
Signature Algorithm: sha256WithRSAEncryption
44:1a:70:c1:da:6d:64:0a:73:ad:2f:da:7c:a5:45:8e:79:67:
32:cc:57:f7:f5:0e:2b:c1:af:03:ba:97:dc:5d:87:a0:ac:0f:
73:26:0b:5b:9b:47:a7:e1:24:cd:a7:be:2e:eb:92:c4:d4:4c:
8b:38:0e:8d:d1:08:8e:d7:7a:cf:e7:e3:ea:50:2e:3c:12:30:
82:13:b6:30:c4:fd:39:d1:27:e1:1a:d5:6e:0d:af:61:5b:f0:
b0:0f:54:36:ba:85:a5:41:c9:9a:8f:97:75:eb:44:ab:77:7f:
2b:b6:ed:fc:4d:a6:e6:17:fc:cd:49:d8:d8:b8:3d:e7:08:6d:
a8:ad:d3:2b:4b:8a:6b:07:01:ec:df:18:06:a0:4a:28:9e:0d:
10:b8:71:49:d7:27:8c:8b:46:82:61:63:7f:42:8b:7b:0f:d7:
f6:15:df:f4:de:79:f8:44:71:98:21:fa:1a:1a:97:88:74:f5:
dc:2a:db:b7:94:fe:6c:c4:94:e4:3c:57:53:0f:06:f2:32:7c:
c3:a0:2f:4c:13:f7:ac:fc:3c:9b:2d:b5:aa:96:d8:36:12:bd:
24:06:f0:42:16:6a:01:05:de:a2:8d:0e:70:ec:13:57:14:8c:
36:ff:a6:12:70:32:80:65:d0:6b:13:fa:a8:27:44:11:1a:ad:
e8:07:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:42 2025 by rpki-client