This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
File: 3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier: VifE7Wr8tK2WTGIv3bTq2aUEchCN5xLy1H1qEbmh1Jg=
Subject key identifier: EA:78:A8:BB:5B:17:3D:92:1D:DF:71:31:10:F5:66:4A:FA:68:50:9F
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: C0D7E6AAE4F3C3741F5D59999A6C7C42BA66D4
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
Signing time: Thu 04 Dec 2025 09:03:05 +0000
ROA not before: Thu 04 Dec 2025 08:58:05 +0000
ROA not after: Thu 03 Dec 2026 09:03:05 +0000
asID: 9794
IP address blocks: 115.178.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c0:d7:e6:aa:e4:f3:c3:74:1f:5d:59:99:9a:6c:7c:42:ba:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Dec 4 08:58:05 2025 GMT
Not After : Dec 3 09:03:05 2026 GMT
Subject: CN=EA78A8BB5B173D921DDF713110F5664AFA68509F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:bc:25:a1:37:16:3d:51:06:18:80:d4:7c:
16:d5:5a:f4:1d:1b:97:ed:d9:04:64:cf:d1:ad:a3:
1c:e2:bb:f5:fc:27:a7:be:b8:f4:e4:ec:25:bf:0a:
11:89:69:46:50:24:03:16:0f:0d:bc:07:a9:87:46:
86:61:6e:7d:96:62:78:dd:13:1c:fa:c6:c2:1f:1b:
67:a9:05:21:2e:7f:e6:88:6b:43:09:12:f9:39:28:
27:a9:32:03:10:07:7f:e0:d2:a0:ae:9d:5d:66:22:
01:c5:4b:58:96:12:e1:00:b7:e8:89:10:ba:43:35:
37:26:ac:d5:69:b0:89:56:3d:68:0f:ae:ac:67:7d:
be:95:e8:29:d7:1b:30:71:e6:94:ef:fc:96:b1:ef:
63:e1:32:ce:31:e1:c9:e0:02:d0:ed:71:56:88:d6:
8c:49:66:82:03:24:06:ec:0b:7f:41:af:a6:09:78:
84:70:03:a2:cd:0c:85:76:1c:1e:a8:67:7a:e0:29:
98:63:e9:b1:d4:6c:dd:a2:61:84:a8:c1:8a:a6:7b:
42:84:32:b5:f3:9e:7a:d1:51:cc:18:13:48:eb:e7:
fa:61:65:eb:9d:6b:8f:d4:8c:86:c5:f4:07:cd:81:
91:6b:7f:82:e2:d6:e5:2a:6e:ca:80:54:72:51:cf:
6c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:A8:BB:5B:17:3D:92:1D:DF:71:31:10:F5:66:4A:FA:68:50:9F
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135362e302f32322d3234203d3e2039373934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:6d:4a:63:8a:22:df:7f:eb:09:40:b8:cb:2d:cc:4e:37:bf:
29:16:69:08:96:e1:04:9f:69:84:da:7c:4b:cc:c2:8e:ec:fe:
a3:a7:3f:ce:46:6b:9a:76:de:b2:37:37:1e:ea:6a:d0:12:5d:
69:7b:56:7b:03:c0:c9:61:f5:11:52:3f:1f:ee:33:df:c7:d8:
68:9a:db:6a:9d:44:d8:6f:b0:2d:bf:32:10:aa:71:be:61:62:
ae:ef:12:37:03:4f:ae:42:a6:f9:3f:01:c8:24:19:f7:e4:4b:
ea:17:60:f0:9b:57:61:50:91:55:ba:8d:3c:ab:71:22:38:69:
9e:23:d9:72:2e:57:c4:be:e2:27:ac:e3:2f:3d:bf:e2:b2:54:
0a:6b:86:55:c6:3b:13:c3:07:cb:ee:b1:34:9f:4b:ac:eb:b5:
85:9d:7b:c5:3e:a3:43:04:f0:53:92:e1:b5:ce:d9:a6:aa:50:
6d:ec:2a:4d:4c:ff:bd:53:b7:ec:16:40:d7:2e:27:89:4a:6a:
6f:9e:95:57:c1:ae:40:dc:07:a8:d1:85:96:98:46:c9:72:16:
9a:58:ba:32:cc:c0:ab:f2:45:2c:4b:b6:df:e4:c0:b5:e3:e2:
d2:9c:1c:25:2b:c7:b8:f0:a7:32:2b:a1:95:5d:ba:7a:ea:e1:
a7:41:d0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:40 2025 by rpki-client