This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa File: 3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa (raw, json) Hash identifier: P7VK/XG2YeSWWLp5tmq01+SMbs4y3aOHcRg51geAg2k= Subject key identifier: 00:C8:18:04:2D:49:A6:4C:53:20:6F:41:89:CF:C6:D5:DF:11:4A:E7 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 53A366D507567819B47725D67F83FC6579C479E5 Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa Signing time: Thu 13 Nov 2025 10:00:00 +0000 ROA not before: Thu 13 Nov 2025 09:55:00 +0000 ROA not after: Thu 12 Nov 2026 10:00:00 +0000 asID: 9794 IP address blocks: 115.178.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a3:66:d5:07:56:78:19:b4:77:25:d6:7f:83:fc:65:79:c4:79:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Nov 13 09:55:00 2025 GMT Not After : Nov 12 10:00:00 2026 GMT Subject: CN=00C818042D49A64C53206F4189CFC6D5DF114AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:0b:7d:43:7f:b0:af:b6:61:55:3c:77:49: 44:92:67:c3:21:1a:43:ba:da:55:a1:8a:98:99:d5: 92:a8:75:dd:bb:50:90:ec:49:41:b0:75:d2:b2:5e: 30:9c:59:00:b4:52:c9:9f:c6:e1:a2:20:e2:b5:ee: 8c:85:9b:17:8a:08:98:32:40:1c:d7:e9:dc:05:b1: f8:ce:6a:3a:42:de:07:d4:2c:c8:78:a0:f0:19:2a: 0b:65:05:3b:d2:31:18:80:9f:68:8f:88:cc:54:00: ac:bf:da:c6:1b:43:e4:00:7b:96:23:f9:3b:51:5e: 37:0a:ff:87:ad:c1:34:d0:79:d1:d6:f7:f8:2f:13: e8:aa:09:25:b4:46:cb:bf:b4:62:1e:fd:c5:4e:b8: c9:2c:08:ec:69:89:c5:c3:a6:bb:e9:6b:14:c9:cd: ff:c3:47:ed:6d:2c:44:d1:e6:f3:4f:42:c6:ee:b6: e2:15:72:40:ca:f8:a0:ae:a8:bc:a8:6d:8d:7d:6e: c3:e3:27:8d:2f:04:43:e3:32:03:81:cd:99:5e:1f: d2:bf:84:ff:be:ec:7a:45:68:18:7c:3c:23:61:b6: be:b4:e7:65:9d:46:6d:55:33:04:a6:c1:73:dc:6d: 54:0b:e5:cd:04:9b:4e:eb:1f:46:13:bc:3f:1e:b4: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:18:04:2D:49:A6:4C:53:20:6F:41:89:CF:C6:D5:DF:11:4A:E7 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133362e302f32332d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.136.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:a0:95:31:92:06:c6:00:f1:79:6b:c0:20:e0:9f:07:e6:cb: 29:64:e6:04:2e:3d:af:6e:c2:30:14:be:91:8e:a1:c4:d1:cf: 40:be:4d:ef:87:57:2a:25:db:08:8e:b8:4d:22:86:1c:71:fc: 01:df:69:35:48:4b:c7:18:ff:5b:68:6e:5b:94:39:38:3a:a2: 62:ae:44:ef:cf:60:cb:ea:ec:3a:c4:d6:6f:7c:7a:d2:4b:df: 86:61:13:5c:d0:60:9a:ec:a8:83:1c:dd:af:7b:c0:ce:2b:d4: 01:af:d0:ff:b9:45:c9:04:51:f2:43:dc:b8:18:c7:5e:36:fc: b2:5b:fa:86:cc:aa:a8:e1:94:8e:1d:d3:73:5d:34:7b:dd:3c: 48:04:ae:e5:66:57:08:6e:9a:3e:bb:1c:1a:9d:33:7d:bd:e8: 02:60:1d:de:ad:21:eb:1b:b4:7c:2e:6e:c9:a0:3d:3e:34:d5: b8:b2:c7:4e:2e:39:bb:0d:b9:b0:ef:88:bc:30:43:bb:59:9a: d4:3f:98:eb:57:64:88:53:76:08:c3:c8:7d:cb:18:32:d1:bc: f1:e8:86:fa:83:c1:27:b1:53:14:9f:d1:d6:69:aa:83:79:61: a5:de:25:a4:c1:41:be:44:00:bd:e5:a7:a7:f2:19:24:1a:3a: 97:73:f5:d4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUU6Nm1QdWeBm0dyXWf4P8ZXnEeeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTExMTMwOTU1MDBaFw0yNjExMTIxMDAwMDBaMDMxMTAvBgNV BAMTKDAwQzgxODA0MkQ0OUE2NEM1MzIwNkY0MTg5Q0ZDNkQ1REYxMTRBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Uwt9Q3+wr7ZhVTx3SUSSZ8Mh GkO62lWhipiZ1ZKodd27UJDsSUGwddKyXjCcWQC0UsmfxuGiIOK17oyFmxeKCJgy QBzX6dwFsfjOajpC3gfULMh4oPAZKgtlBTvSMRiAn2iPiMxUAKy/2sYbQ+QAe5Yj +TtRXjcK/4etwTTQedHW9/gvE+iqCSW0Rsu/tGIe/cVOuMksCOxpicXDprvpaxTJ zf/DR+1tLETR5vNPQsbutuIVckDK+KCuqLyobY19bsPjJ40vBEPjMgOBzZleH9K/ hP++7HpFaBh8PCNhtr6052WdRm1VMwSmwXPcbVQL5c0Em07rH0YTvD8etHg1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAMgYBC1JpkxTIG9Bic/G1d8RSucwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXOyiDANBgkqhkiG 9w0BAQsFAAOCAQEASqCVMZIGxgDxeWvAIOCfB+bLKWTmBC49r27CMBS+kY6hxNHP QL5N74dXKiXbCI64TSKGHHH8Ad9pNUhLxxj/W2huW5Q5ODqiYq5E789gy+rsOsTW b3x60kvfhmETXNBgmuyogxzdr3vAzivUAa/Q/7lFyQRR8kPcuBjHXjb8slv6hsyq qOGUjh3Tc100e908SASu5WZXCG6aPrscGp0zfb3oAmAd3q0h6xu0fC5uyaA9PjTV uLLHTi45uw25sO+IvDBDu1ma1D+Y61dkiFN2CMPIfcsYMtG88eiG+oPBJ7FTFJ/R 1mmqg3lhpd4lpMFBvkQAveWnp/IZJBo6l3P11A== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:41 2025 by rpki-client