This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa File: 3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa (raw, json) Hash identifier: a6vjJCY0G3sE4v3WN7t7hC+lqTwnPMdzhMJwrZ9Vqpw= Subject key identifier: 7F:BC:D0:DD:8B:D7:9D:AF:1E:63:42:E9:6F:1A:AF:0F:F6:8E:8F:8E Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Certificate serial: 2B797F7CAF7DFFD53109E0D7F6E46308300B21EC Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa Signing time: Thu 04 Dec 2025 08:00:00 +0000 ROA not before: Thu 04 Dec 2025 07:55:00 +0000 ROA not after: Thu 03 Dec 2026 08:00:00 +0000 asID: 9794 IP address blocks: 115.178.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:24:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:79:7f:7c:af:7d:ff:d5:31:09:e0:d7:f6:e4:63:08:30:0b:21:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361 Validity Not Before: Dec 4 07:55:00 2025 GMT Not After : Dec 3 08:00:00 2026 GMT Subject: CN=7FBCD0DD8BD79DAF1E6342E96F1AAF0FF68E8F8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:0c:3b:eb:20:46:ab:c9:c3:3a:d5:c1:b6: 0f:8d:24:d7:6c:39:84:9e:44:4a:01:cb:2e:3c:a4: f2:4b:e6:3a:ba:0a:97:28:ac:96:38:af:d1:c7:2a: 89:9a:87:30:b6:f6:65:1b:3e:cf:b1:9f:b4:90:6d: d7:61:37:aa:9e:d2:09:86:44:cd:d4:29:e3:8a:cc: d1:e4:fc:d7:82:28:73:03:15:b9:56:4b:5d:25:06: 4f:35:98:e6:56:b3:15:ea:dc:bc:5d:a8:85:30:4c: 25:92:1d:60:42:9d:2f:3e:a3:82:18:19:72:12:88: 94:51:53:7a:cd:59:b7:a6:44:c2:c4:c5:2b:7f:78: 93:f3:0d:b9:63:80:5f:77:57:9b:19:35:fe:c3:34: 60:07:91:a3:ab:94:f7:ac:a5:98:95:21:f4:51:8f: b7:9f:d1:fc:ad:32:77:d1:e4:e6:72:2d:54:3b:98: 03:62:ad:27:01:07:ff:e4:f8:8d:1b:0a:55:7e:60: 5c:f1:76:3e:aa:28:12:11:68:12:bc:43:16:c9:b0: 61:7a:d8:b2:fd:3c:73:de:6b:17:6b:b6:e9:48:37: a9:50:18:49:ae:8e:e5:4c:d5:53:3c:09:b1:1a:88: 9d:fe:3a:6c:95:33:dc:86:32:db:e2:f5:ad:d1:d9: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BC:D0:DD:8B:D7:9D:AF:1E:63:42:E9:6F:1A:AF:0F:F6:8E:8F:8E X509v3 Authority Key Identifier: keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e2039373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.178.152.0/22 Signature Algorithm: sha256WithRSAEncryption 66:b7:a6:2d:09:7c:9a:45:26:dc:13:bd:7e:63:57:ed:cb:30: 04:dc:a0:af:be:24:bf:94:17:09:6b:bf:7d:d5:2b:ac:d4:76: 5e:8b:78:8e:b3:32:f3:b1:3f:5c:36:49:29:5d:ce:a9:30:96: fc:f6:1a:a7:90:ff:74:33:4e:61:1d:f7:1a:4c:71:ef:1f:66: c5:a1:0b:13:4f:65:3c:8c:62:92:54:9d:72:b5:91:67:96:d0: 08:ae:f0:f7:2a:c4:c8:ef:3b:7e:cf:0e:45:ef:7a:40:b3:6d: 0f:fd:67:c0:79:b3:de:38:62:af:d9:a0:0e:74:c1:2a:bd:da: 9d:85:85:79:ec:f7:d4:8a:7a:e1:c9:e7:da:09:ed:1f:85:9a: 3f:5b:1c:d6:5c:ef:14:8f:28:f5:33:e8:6a:bd:5d:c0:9d:78: 43:4e:52:1e:07:f2:36:ad:9c:40:c5:f3:dc:14:fe:11:bc:86: a9:d1:ed:ce:1a:fb:fe:c7:48:85:bd:07:1a:52:a1:23:52:4f: 09:1d:84:d2:91:1b:80:54:67:41:09:14:7b:00:21:0f:b4:1a: ec:77:a8:f4:0b:c5:24:7d:23:05:00:df:1c:87:0d:56:04:df: ff:88:c5:5a:13:ca:fe:1a:3a:6d:05:f8:8a:27:16:de:fc:53: e9:97:3f:c3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK3l/fK99/9UxCeDX9uRjCDALIewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3 NjNDRjM2MTAeFw0yNTEyMDQwNzU1MDBaFw0yNjEyMDMwODAwMDBaMDMxMTAvBgNV BAMTKDdGQkNEMEREOEJENzlEQUYxRTYzNDJFOTZGMUFBRjBGRjY4RThGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Cww76yBGq8nDOtXBtg+NJNds OYSeREoByy48pPJL5jq6CpcorJY4r9HHKomahzC29mUbPs+xn7SQbddhN6qe0gmG RM3UKeOKzNHk/NeCKHMDFblWS10lBk81mOZWsxXq3LxdqIUwTCWSHWBCnS8+o4IY GXISiJRRU3rNWbemRMLExSt/eJPzDbljgF93V5sZNf7DNGAHkaOrlPespZiVIfRR j7ef0fytMnfR5OZyLVQ7mANirScBB//k+I0bClV+YFzxdj6qKBIRaBK8QxbJsGF6 2LL9PHPeaxdrtulIN6lQGEmujuVM1VM8CbEaiJ3+OmyVM9yGMtvi9a3R2XMVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUf7zQ3YvXna8eY0LpbxqvD/aOj44wHwYDVR0j BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i NjBiLTZlOTkwNDEyOGNhOC8wLzMxMzEzNTJlMzEzNzM4MmUzMTM1MzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnOymDANBgkqhkiG 9w0BAQsFAAOCAQEAZremLQl8mkUm3BO9fmNX7cswBNygr74kv5QXCWu/fdUrrNR2 Xot4jrMy87E/XDZJKV3OqTCW/PYap5D/dDNOYR33Gkxx7x9mxaELE09lPIxiklSd crWRZ5bQCK7w9yrEyO87fs8ORe96QLNtD/1nwHmz3jhir9mgDnTBKr3anYWFeez3 1Ip64cnn2gntH4WaP1sc1lzvFI8o9TPoar1dwJ14Q05SHgfyNq2cQMXz3BT+EbyG qdHtzhr7/sdIhb0HGlKhI1JPCR2E0pEbgFRnQQkUewAhD7Qa7Heo9AvFJH0jBQDf HIcNVgTf/4jFWhPK/ho6bQX4iicW3vxT6Zc/ww== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:21 2025 by rpki-client