This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa File: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (raw, json) Hash identifier: QaVL8FZIkXQEPUlKXDz1K7gc9JnXnHYzpgLLHSEIXzo= Subject key identifier: 56:AF:71:AE:0F:26:2F:CA:F7:A1:7D:AB:7C:DF:C5:18:04:CF:EF:00 Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Certificate serial: 7AD3840F299382736EEE771BAAE23B6396033270 Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa Signing time: Tue 09 Dec 2025 11:34:43 +0000 ROA not before: Tue 09 Dec 2025 11:29:43 +0000 ROA not after: Tue 08 Dec 2026 11:34:43 +0000 asID: 55664 IP address blocks: 45.249.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:84:0f:29:93:82:73:6e:ee:77:1b:aa:e2:3b:63:96:03:32:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Validity Not Before: Dec 9 11:29:43 2025 GMT Not After : Dec 8 11:34:43 2026 GMT Subject: CN=56AF71AE0F262FCAF7A17DAB7CDFC51804CFEF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:93:aa:aa:55:83:70:7c:5f:11:ad:a1:84:a8: e4:6e:0f:33:06:41:a0:45:5c:93:a9:50:d7:df:59: 5a:8e:f7:de:7d:28:ed:9f:0d:f9:5b:a9:1a:f3:80: 8a:b9:9a:63:84:77:57:1c:ee:39:79:7c:86:82:72: e1:fb:ae:79:01:1b:1a:0a:d1:fb:d8:71:cd:1d:ea: 9c:1f:ff:5e:ae:fc:d9:75:03:fc:dc:fd:08:a9:a8: 65:a5:6c:b9:cc:ae:2e:5e:73:14:a1:8c:ae:57:af: f2:81:3e:d5:20:aa:0d:df:95:30:65:d2:39:6d:69: 6b:8a:38:0a:60:38:b5:3f:5c:40:bd:5b:27:c9:2e: 3e:a3:da:d4:49:50:58:6d:04:4b:aa:32:15:9b:25: e6:6c:fb:5c:ca:74:24:4a:57:83:2a:eb:26:8a:78: 85:25:56:a3:d3:45:56:a5:b8:2a:2e:79:bf:04:e0: e4:c3:ce:64:4a:6a:be:ac:07:15:44:14:32:43:a6: b3:d0:36:4f:86:c5:a5:62:f4:31:75:67:75:12:77: 6d:08:86:54:fd:18:f6:ec:75:56:5d:ba:20:e9:a0: 49:18:41:68:66:36:27:83:63:d6:ad:82:3a:cc:35: 44:9f:80:91:d2:74:2d:a7:c8:a2:1d:84:4e:9e:7f: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:AF:71:AE:0F:26:2F:CA:F7:A1:7D:AB:7C:DF:C5:18:04:CF:EF:00 X509v3 Authority Key Identifier: keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/34352e3234392e3232312e302f32342d3234203d3e203535363634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.249.221.0/24 Signature Algorithm: sha256WithRSAEncryption 14:87:5c:04:ae:84:1d:03:1b:30:56:b6:1a:54:c6:ac:86:83: 09:3f:9b:bc:d3:90:7f:46:13:ef:fc:2a:f4:f7:1d:3f:58:bf: e4:84:59:43:40:d3:70:a4:dc:08:22:bd:58:84:20:a8:1b:36: d5:8d:ae:fa:53:50:0b:f0:0a:42:f7:67:5b:db:81:43:54:28: de:5c:67:1c:b1:8d:56:b2:5d:5f:8e:6e:f0:06:23:84:b1:25: 38:37:ed:3a:6f:84:86:07:35:ae:d6:15:49:98:eb:11:36:a9: 78:1b:92:35:1b:8d:de:78:d6:da:a1:68:cf:07:c4:e1:1b:4e: d5:b4:57:72:72:84:8e:85:ff:f4:ec:98:ea:86:52:6b:a8:e2: a5:1e:c3:cf:e1:94:75:96:63:dc:14:d3:08:f4:21:54:71:44: 63:36:b2:d0:23:08:f9:55:f5:57:57:6b:90:ff:46:c5:32:b8: b2:04:d1:b8:c1:3a:59:8c:48:85:bd:4f:ad:c6:6b:96:54:ec: 80:2b:39:8d:08:44:d0:c1:19:87:8b:93:c0:47:f9:9a:9e:6c: 06:f6:5d:bf:1e:b0:75:8d:13:3c:89:ce:ba:0b:9a:12:f2:af: fa:99:ac:9c:0f:55:40:c6:b6:4a:b4:07:1e:b0:eb:8e:b8:3c: ec:d4:1a:54 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUetOEDymTgnNu7ncbquI7Y5YDMnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1 QUQwNzRENTAeFw0yNTEyMDkxMTI5NDNaFw0yNjEyMDgxMTM0NDNaMDMxMTAvBgNV BAMTKDU2QUY3MUFFMEYyNjJGQ0FGN0ExN0RBQjdDREZDNTE4MDRDRkVGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsk6qqVYNwfF8RraGEqORuDzMG QaBFXJOpUNffWVqO9959KO2fDflbqRrzgIq5mmOEd1cc7jl5fIaCcuH7rnkBGxoK 0fvYcc0d6pwf/16u/Nl1A/zc/QipqGWlbLnMri5ecxShjK5Xr/KBPtUgqg3flTBl 0jltaWuKOApgOLU/XEC9WyfJLj6j2tRJUFhtBEuqMhWbJeZs+1zKdCRKV4Mq6yaK eIUlVqPTRValuCoueb8E4OTDzmRKar6sBxVEFDJDprPQNk+GxaVi9DF1Z3USd20I hlT9GPbsdVZduiDpoEkYQWhmNieDY9atgjrMNUSfgJHSdC2nyKIdhE6ef0xpAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUVq9xrg8mL8r3oX2rfN/FGATP7wAwHwYDVR0j BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw NzRENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i MDUyLTMwNTg3YmY5ZWZmNy8wLzM0MzUyZTMyMzQzOTJlMzIzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC353TANBgkqhkiG 9w0BAQsFAAOCAQEAFIdcBK6EHQMbMFa2GlTGrIaDCT+bvNOQf0YT7/wq9PcdP1i/ 5IRZQ0DTcKTcCCK9WIQgqBs21Y2u+lNQC/AKQvdnW9uBQ1Qo3lxnHLGNVrJdX45u 8AYjhLElODftOm+Ehgc1rtYVSZjrETapeBuSNRuN3njW2qFozwfE4RtO1bRXcnKE joX/9OyY6oZSa6jipR7Dz+GUdZZj3BTTCPQhVHFEYzay0CMI+VX1V1drkP9GxTK4 sgTRuME6WYxIhb1PrcZrllTsgCs5jQhE0MEZh4uTwEf5mp5sBvZdvx6wdY0TPInO uguaEvKv+pmsnA9VQMa2SrQHHrDrjrg87NQaVA== -----END CERTIFICATE-----Generated at Fri Dec 19 11:15:35 2025 by rpki-client