This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa File: 3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa (raw, json) Hash identifier: Md3MnVji4tT5tIyMXUQ4S/yLFrbjyJi/lAav1bU5pig= Subject key identifier: 49:5E:0F:25:4C:70:42:71:D2:0F:A5:23:36:B9:D9:F7:1E:85:FC:D8 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 1744D4C8CE961466315955DBD117EB21C829A1DD Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa Signing time: Thu 04 Dec 2025 09:03:05 +0000 ROA not before: Thu 04 Dec 2025 08:58:05 +0000 ROA not after: Thu 03 Dec 2026 09:03:05 +0000 asID: 9794 IP address blocks: 115.178.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:44:d4:c8:ce:96:14:66:31:59:55:db:d1:17:eb:21:c8:29:a1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Dec 4 08:58:05 2025 GMT Not After : Dec 3 09:03:05 2026 GMT Subject: CN=495E0F254C704271D20FA52336B9D9F71E85FCD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:5d:04:e8:5b:5e:09:5e:0b:8a:6e:d5:8b: e1:0f:a7:97:a0:41:8d:11:ea:c6:3b:de:45:ab:e9: b8:52:5d:eb:25:09:ef:0b:2d:99:97:67:38:c7:2e: 92:80:ce:b5:b1:b3:d3:8d:03:f3:35:78:b1:96:12: 88:f7:a4:5e:f3:7e:95:22:47:b3:93:42:5b:cb:a0: 26:3a:56:dd:29:ee:a3:c4:04:17:25:d9:ea:af:a1: 53:4f:f3:af:04:41:09:3c:66:3f:8e:8a:39:24:f1: 03:63:ac:b2:5f:8c:7f:a7:06:3e:8e:62:19:69:ed: b8:31:0e:91:03:4d:aa:a7:f7:93:e8:d7:5b:4f:db: 66:6b:95:7e:d4:b1:f7:1a:b9:36:68:16:b1:3a:a1: cf:c3:0a:af:b5:8d:09:c4:6f:bb:8d:9b:19:42:7b: a1:6a:94:db:7f:41:05:69:99:d2:73:3c:a7:6b:f6: 43:a5:90:22:0a:dd:79:f7:b9:82:85:2d:f9:33:8e: 1c:a5:bf:96:76:97:7a:bf:b8:48:37:c1:43:ce:cf: 9e:90:dc:b0:2f:23:4b:1e:9b:fa:8d:f1:08:9c:3a: 1f:a8:64:75:e5:ca:da:d2:15:1e:21:2c:11:04:0a: 9e:ed:96:d2:8f:07:9b:d8:d2:80:27:08:62:ff:c3: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5E:0F:25:4C:70:42:71:D2:0F:A5:23:36:B9:D9:F7:1E:85:FC:D8 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134302e302f32322d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.140.0/22 Signature Algorithm: sha256WithRSAEncryption 34:03:b7:cf:15:4b:2d:dd:33:df:ea:e9:ef:74:cd:7e:70:d2: 06:70:3b:1c:37:00:b1:29:f6:6f:5b:a4:9c:8c:6b:6d:6e:fe: da:d1:8c:ee:c5:e9:6e:50:bf:40:e0:bb:02:64:36:d0:32:e8: 35:f9:5d:4f:cb:53:45:96:33:d4:88:63:cd:61:05:ca:f5:c9: 7a:f0:b1:ee:83:8e:5e:cc:1a:99:f2:72:4d:8c:a0:ed:63:b0: e0:50:9a:6b:da:af:77:36:ab:ef:0d:f9:07:f3:65:b4:81:ca: 79:98:88:f9:e8:ce:c0:1e:6a:4d:98:ef:f0:4a:71:ea:69:9a: 66:85:c9:cb:b4:4b:7d:18:4b:15:d3:7d:7c:b9:5d:13:fb:30: 5a:cc:6a:76:f2:4a:93:f3:67:93:19:b4:17:c8:55:40:36:ad: 52:f4:57:b7:16:fb:94:3f:d2:fd:ae:1d:cc:5e:27:0d:90:2e: 85:c3:dd:32:02:ba:52:7f:07:ea:3c:e2:7f:57:98:e3:3d:f6: 12:07:04:17:f5:ef:e8:04:c6:81:af:44:ae:20:63:84:a8:e9: f0:e7:af:b8:84:c5:7a:d3:8a:16:9e:cb:30:8a:df:99:ff:4f: bb:be:15:9e:7f:a5:85:02:19:7a:f8:00:0b:4b:9f:00:c8:97: 20:cf:1f:86 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUF0TUyM6WFGYxWVXb0RfrIcgpod0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTEyMDQwODU4MDVaFw0yNjEyMDMwOTAzMDVaMDMxMTAvBgNV BAMTKDQ5NUUwRjI1NEM3MDQyNzFEMjBGQTUyMzM2QjlEOUY3MUU4NUZDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzl0E6FteCV4Lim7Vi+EPp5eg QY0R6sY73kWr6bhSXeslCe8LLZmXZzjHLpKAzrWxs9ONA/M1eLGWEoj3pF7zfpUi R7OTQlvLoCY6Vt0p7qPEBBcl2eqvoVNP868EQQk8Zj+Oijkk8QNjrLJfjH+nBj6O Yhlp7bgxDpEDTaqn95Po11tP22ZrlX7UsfcauTZoFrE6oc/DCq+1jQnEb7uNmxlC e6FqlNt/QQVpmdJzPKdr9kOlkCIK3Xn3uYKFLfkzjhylv5Z2l3q/uEg3wUPOz56Q 3LAvI0sem/qN8QicOh+oZHXlytrSFR4hLBEECp7tltKPB5vY0oAnCGL/w5UhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSV4PJUxwQnHSD6UjNrnZ9x6F/NgwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM0MzAyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOyjDANBgkqhkiG 9w0BAQsFAAOCAQEANAO3zxVLLd0z3+rp73TNfnDSBnA7HDcAsSn2b1uknIxrbW7+ 2tGM7sXpblC/QOC7AmQ20DLoNfldT8tTRZYz1IhjzWEFyvXJevCx7oOOXswamfJy TYyg7WOw4FCaa9qvdzar7w35B/NltIHKeZiI+ejOwB5qTZjv8Epx6mmaZoXJy7RL fRhLFdN9fLldE/swWsxqdvJKk/Nnkxm0F8hVQDatUvRXtxb7lD/S/a4dzF4nDZAu hcPdMgK6Un8H6jzif1eY4z32EgcEF/Xv6ATGga9EriBjhKjp8OevuITFetOKFp7L MIrfmf9Pu74Vnn+lhQIZevgAC0ufAMiXIM8fhg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:07 2025 by rpki-client