This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa File: 3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa (raw, json) Hash identifier: JDH+gobgArWBqlghHnTfcvkUwySmHX04lneC2+qPCi0= Subject key identifier: 68:9A:9E:89:F0:33:AE:31:ED:97:58:EC:DA:56:DB:47:68:64:49:D0 Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 5B40D7A5A123442AEEA4EFFD3B098A9F9989372C Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa Signing time: Thu 04 Dec 2025 08:00:00 +0000 ROA not before: Thu 04 Dec 2025 07:55:00 +0000 ROA not after: Thu 03 Dec 2026 08:00:00 +0000 asID: 9794 IP address blocks: 115.178.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:40:d7:a5:a1:23:44:2a:ee:a4:ef:fd:3b:09:8a:9f:99:89:37:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Dec 4 07:55:00 2025 GMT Not After : Dec 3 08:00:00 2026 GMT Subject: CN=689A9E89F033AE31ED9758ECDA56DB47686449D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:73:2f:66:b1:e2:cc:58:d0:6b:54:0a:fd:4f: 6e:8e:2c:13:b3:bf:5c:0a:ef:e0:82:af:b6:f5:78: a1:21:e4:49:a2:11:8e:68:e6:96:7d:5f:39:51:b8: bf:9f:52:96:43:e5:4c:fe:5a:0f:67:7c:7a:87:1a: ce:7c:04:b1:61:16:e2:6b:84:e3:c5:cd:88:cf:c6: aa:5b:2f:68:02:84:f6:8b:5d:c3:09:c8:ae:21:85: bb:07:05:cf:fa:65:92:99:d4:57:b3:37:17:6a:be: 69:09:a3:86:5a:78:77:c6:bb:91:75:8c:2b:0d:18: 1d:5e:c0:7b:62:70:d7:6f:32:aa:59:49:f2:e9:e5: 09:d5:5b:3d:5c:69:49:b8:9e:2e:31:b2:11:61:36: 08:ef:e9:90:b6:31:2e:f3:f5:b3:5e:1e:e2:51:23: df:00:46:62:64:61:65:56:41:2a:aa:04:fd:b2:ac: 78:60:6b:27:bf:76:b4:04:66:ab:9f:8c:57:aa:6b: 2c:fd:0e:16:c9:93:15:47:61:eb:19:d9:05:fd:5f: 28:d2:1b:b0:cc:99:55:fb:6a:ab:f3:2c:59:d4:53: 89:d2:7e:8d:15:40:b0:11:74:c1:26:13:2c:e6:51: 46:b7:4f:46:ab:e9:08:6a:66:c3:e3:72:30:21:1d: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:9E:89:F0:33:AE:31:ED:97:58:EC:DA:56:DB:47:68:64:49:D0 X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.148.0/22 Signature Algorithm: sha256WithRSAEncryption 38:4e:b3:41:9b:1a:f5:53:c4:a6:d3:58:14:68:d1:20:2a:be: 88:54:d6:3c:9d:ec:8a:59:9e:43:76:04:de:01:97:97:d8:d2: 66:8e:d2:69:9b:d7:a0:ab:b1:fc:6d:df:c9:42:5d:de:e0:e2: de:0b:84:c2:7d:8b:e5:8d:d0:40:d5:39:45:e9:f2:75:c1:8c: d6:4b:3f:7c:e7:2e:37:44:ef:dc:17:4f:c3:3a:06:4e:74:3f: 1a:42:9e:91:ef:5d:69:3b:c3:ed:07:40:0b:bc:c0:06:10:f6: c5:5a:2f:31:f4:b5:cd:14:11:a4:2b:53:ad:8f:e1:d9:97:6a: 71:4f:5f:6f:f5:1c:26:38:1d:07:dc:c8:25:ed:b4:24:ce:e3: b6:c9:4a:19:b5:e5:98:63:4b:01:19:16:af:6b:8c:af:2c:52: da:78:7c:b7:51:2c:c7:0e:eb:f7:b5:bd:83:39:f5:96:ff:6d: 5a:65:1c:9a:e1:b7:d5:bb:11:0f:89:eb:b3:8f:70:ee:60:f1: 0a:f5:bd:a4:85:ad:8d:b9:b0:68:58:eb:48:e9:70:40:55:d4: cc:74:f6:18:ae:6f:ad:19:01:5e:75:b2:16:48:68:e9:89:58: 33:aa:6e:4a:bf:82:bc:b9:d5:e6:6c:f5:df:cd:64:b8:9e:10: 2d:53:3e:06 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUW0DXpaEjRCrupO/9OwmKn5mJNywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTEyMDQwNzU1MDBaFw0yNjEyMDMwODAwMDBaMDMxMTAvBgNV BAMTKDY4OUE5RTg5RjAzM0FFMzFFRDk3NThFQ0RBNTZEQjQ3Njg2NDQ5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxcy9mseLMWNBrVAr9T26OLBOz v1wK7+CCr7b1eKEh5EmiEY5o5pZ9XzlRuL+fUpZD5Uz+Wg9nfHqHGs58BLFhFuJr hOPFzYjPxqpbL2gChPaLXcMJyK4hhbsHBc/6ZZKZ1FezNxdqvmkJo4ZaeHfGu5F1 jCsNGB1ewHticNdvMqpZSfLp5QnVWz1caUm4ni4xshFhNgjv6ZC2MS7z9bNeHuJR I98ARmJkYWVWQSqqBP2yrHhgaye/drQEZqufjFeqayz9DhbJkxVHYesZ2QX9XyjS G7DMmVX7aqvzLFnUU4nSfo0VQLARdMEmEyzmUUa3T0ar6QhqZsPjcjAhHRZFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUaJqeifAzrjHtl1js2lbbR2hkSdAwHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM0MzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOylDANBgkqhkiG 9w0BAQsFAAOCAQEAOE6zQZsa9VPEptNYFGjRICq+iFTWPJ3silmeQ3YE3gGXl9jS Zo7SaZvXoKux/G3fyUJd3uDi3guEwn2L5Y3QQNU5RenydcGM1ks/fOcuN0Tv3BdP wzoGTnQ/GkKeke9daTvD7QdAC7zABhD2xVovMfS1zRQRpCtTrY/h2ZdqcU9fb/Uc JjgdB9zIJe20JM7jtslKGbXlmGNLARkWr2uMryxS2nh8t1Esxw7r97W9gzn1lv9t WmUcmuG31bsRD4nrs49w7mDxCvW9pIWtjbmwaFjrSOlwQFXUzHT2GK5vrRkBXnWy Fkho6YlYM6puSr+CvLnV5mz1381kuJ4QLVM+Bg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:16 2025 by rpki-client