This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa File: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (raw, json) Hash identifier: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0= Subject key identifier: 24:06:1B:CA:3A:3C:95:B4:EC:F1:CD:58:0F:DF:C4:97:30:B8:79:53 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 3126FE6E214EC869F3ECBB1214B757A95ED97FAF Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa Signing time: Mon 14 Apr 2025 15:09:28 +0000 ROA not before: Mon 14 Apr 2025 15:04:28 +0000 ROA not after: Mon 13 Apr 2026 15:09:28 +0000 asID: 140481 IP address blocks: 110.76.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:26:fe:6e:21:4e:c8:69:f3:ec:bb:12:14:b7:57:a9:5e:d9:7f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Apr 14 15:04:28 2025 GMT Not After : Apr 13 15:09:28 2026 GMT Subject: CN=24061BCA3A3C95B4ECF1CD580FDFC49730B87953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:15:47:0f:6d:69:e9:8c:65:48:92:07:8e: 06:3e:08:b2:c1:b0:d5:2c:19:0f:96:63:c8:0c:65: cf:39:f4:e6:d6:42:ad:72:f1:64:7a:ed:dc:f1:bc: 24:6b:c1:58:9b:ae:8e:b6:0c:28:1d:1f:f9:fa:74: 37:e4:1a:20:a6:bf:a9:b6:b4:a5:0e:88:53:9e:66: 00:6c:aa:94:88:fd:29:e7:26:e6:27:8d:16:0f:da: a9:93:54:0b:95:50:38:cb:60:e8:df:de:a1:a2:c1: a4:70:96:dd:5c:00:3c:00:9c:e1:78:91:c6:ad:82: ba:eb:d2:dd:5c:3a:91:cb:6f:78:0f:49:4c:66:7e: 59:f9:3c:3e:37:48:7d:6d:08:f2:4a:14:7f:86:aa: 0d:13:6b:50:f6:aa:5f:c6:be:f8:c3:45:09:2a:f3: 13:89:c2:cb:a1:a9:8b:30:ef:b2:2d:02:e3:04:68: d1:18:6f:3f:ec:ed:87:88:58:85:3f:ac:5f:43:af: 12:de:44:22:aa:08:a6:15:26:8e:8f:5c:66:61:59: 28:db:0a:7c:d9:fe:4f:5d:77:86:27:da:1f:d5:8d: 25:cd:cf:55:b4:50:ba:94:aa:3c:a9:81:c9:3d:b7: 0e:c1:f2:d4:d3:cd:32:85:04:ff:b7:d5:d4:b6:82: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:06:1B:CA:3A:3C:95:B4:EC:F1:CD:58:0F:DF:C4:97:30:B8:79:53 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.146.0/23 Signature Algorithm: sha256WithRSAEncryption 15:67:d9:09:4b:62:49:66:62:6f:1a:f8:4f:c6:f4:8d:13:4c: df:34:42:29:97:34:43:d3:62:18:43:14:dc:e7:74:98:d3:94: 57:55:0e:e2:0a:a4:30:70:df:36:6f:00:96:d1:ab:be:83:4f: ea:a1:63:c2:2e:16:6d:07:b6:6e:bf:69:56:35:69:0b:dc:11: 72:f7:e7:30:c2:8a:19:1a:ce:48:e4:68:dc:ce:e3:dd:00:06: 1f:fa:20:11:43:e9:6c:f6:ea:30:e2:f9:2a:7f:18:9e:85:f1: f3:4e:d0:9c:d8:8a:49:0d:0c:d3:59:bd:ed:c4:71:d8:61:db: 93:24:f4:1d:0c:46:b4:97:29:42:41:9b:be:5d:60:55:d0:f6: eb:1e:c5:e1:26:5c:58:17:dd:68:a5:54:1d:39:36:1d:1f:28: f0:fc:ae:f5:46:44:ff:5b:69:f5:99:65:57:18:b4:fe:12:54: e6:29:d1:53:30:38:4b:15:1d:b7:f0:ac:22:f6:7b:bc:6e:eb: ca:21:5b:52:6b:d1:4b:35:62:e8:39:0c:0f:2e:5e:3a:61:84: 20:66:6b:fe:10:c9:ea:93:b1:50:6b:03:cf:d1:97:97:40:70: d7:46:d9:69:16:60:bc:8f:f1:2e:93:1c:c2:e9:c4:8e:8a:bc: e9:79:3d:22 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMSb+biFOyGnz7LsSFLdXqV7Zf68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTA0MTQxNTA0MjhaFw0yNjA0MTMxNTA5MjhaMDMxMTAvBgNV BAMTKDI0MDYxQkNBM0EzQzk1QjRFQ0YxQ0Q1ODBGREZDNDk3MzBCODc5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDhVHD21p6YxlSJIHjgY+CLLB sNUsGQ+WY8gMZc859ObWQq1y8WR67dzxvCRrwVibro62DCgdH/n6dDfkGiCmv6m2 tKUOiFOeZgBsqpSI/SnnJuYnjRYP2qmTVAuVUDjLYOjf3qGiwaRwlt1cADwAnOF4 kcatgrrr0t1cOpHLb3gPSUxmfln5PD43SH1tCPJKFH+Gqg0Ta1D2ql/GvvjDRQkq 8xOJwsuhqYsw77ItAuMEaNEYbz/s7YeIWIU/rF9DrxLeRCKqCKYVJo6PXGZhWSjb CnzZ/k9dd4Yn2h/VjSXNz1W0ULqUqjypgck9tw7B8tTTzTKFBP+31dS2gg8xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJAYbyjo8lbTs8c1YD9/ElzC4eVMwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNDM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbkySMA0GCSqG SIb3DQEBCwUAA4IBAQAVZ9kJS2JJZmJvGvhPxvSNE0zfNEIplzRD02IYQxTc53SY 05RXVQ7iCqQwcN82bwCW0au+g0/qoWPCLhZtB7Zuv2lWNWkL3BFy9+cwwooZGs5I 5GjczuPdAAYf+iARQ+ls9uow4vkqfxiehfHzTtCc2IpJDQzTWb3txHHYYduTJPQd DEa0lylCQZu+XWBV0PbrHsXhJlxYF91opVQdOTYdHyjw/K71RkT/W2n1mWVXGLT+ ElTmKdFTMDhLFR238Kwi9nu8buvKIVtSa9FLNWLoOQwPLl46YYQgZmv+EMnqk7FQ awPP0ZeXQHDXRtlpFmC8j/EukxzC6cSOirzpeT0i -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:29 2025 by rpki-client