This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa File: 3131392e322e35312e302f32342d3234203d3e20313439373436.roa (raw, json) Hash identifier: oeZmr3dpPOSKqyrPruBZU1vvAe8Vo0KgbyY7tyhEXpI= Subject key identifier: 69:D2:01:01:01:35:46:DD:D5:93:AB:9F:0A:2E:4B:05:30:76:DD:70 Certificate issuer: /CN=C00163880F235714759920507217F2A7D557C953 Certificate serial: 3FAB4C58B8118D750CD672CDE695B35AC6049AB1 Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa Signing time: Sat 22 Nov 2025 18:01:09 +0000 ROA not before: Sat 22 Nov 2025 17:56:09 +0000 ROA not after: Sat 21 Nov 2026 18:01:09 +0000 asID: 149746 IP address blocks: 119.2.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ab:4c:58:b8:11:8d:75:0c:d6:72:cd:e6:95:b3:5a:c6:04:9a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00163880F235714759920507217F2A7D557C953 Validity Not Before: Nov 22 17:56:09 2025 GMT Not After : Nov 21 18:01:09 2026 GMT Subject: CN=69D20101013546DDD593AB9F0A2E4B053076DD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:9b:0f:5b:c3:08:5b:f9:79:8c:a9:20:90: 80:08:88:0b:31:83:d9:c2:16:2f:38:74:55:c7:64: b9:9d:e4:fb:11:2d:a2:3e:d9:95:f1:a5:df:04:e6: f5:fb:d0:c7:e4:f0:0a:36:8f:0e:67:64:b8:65:27: ac:90:79:43:7e:5a:45:17:80:6a:33:c7:42:77:fe: 34:9e:2a:db:25:98:9d:4b:f2:b3:a9:59:0c:36:e0: 89:f6:cf:8d:48:04:49:50:33:b4:5d:18:42:ce:0f: fa:75:e3:0c:18:be:1e:9b:83:5e:fc:f6:b5:2b:ed: 5d:54:a8:f1:9d:e9:0a:5c:3d:b3:80:fb:bf:49:a4: 7c:68:ee:3e:d8:66:1d:97:e2:3c:4a:cb:20:fe:0c: c8:1f:60:7e:47:41:4a:66:f1:7d:70:fb:01:4b:4d: ce:eb:69:21:70:a5:04:62:63:29:a8:84:84:37:f1: fe:e5:23:ac:1c:85:3b:1d:a1:9b:6d:7f:84:d4:7c: c9:cc:03:f3:17:50:8d:ad:da:90:fb:30:96:eb:50: ae:de:ef:c2:49:a9:30:e5:c2:b9:87:2a:53:a2:0c: f4:e6:87:24:c4:e6:72:26:40:9a:6e:fa:04:60:58: 32:3f:6e:06:7b:e4:33:3b:ed:84:b4:c8:d5:53:db: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:01:01:01:35:46:DD:D5:93:AB:9F:0A:2E:4B:05:30:76:DD:70 X509v3 Authority Key Identifier: keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131392e322e35312e302f32342d3234203d3e20313439373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.2.51.0/24 Signature Algorithm: sha256WithRSAEncryption e0:cb:b0:41:3b:d0:fc:40:0b:ae:b8:04:d6:ec:05:4e:db:23: b4:e0:4c:24:e9:c4:ad:4a:cb:4c:97:b1:e3:27:fb:09:0d:f7: c4:ca:be:92:e5:44:b1:c7:03:eb:93:92:65:f3:f5:c4:41:bd: 0c:c9:0b:e3:09:46:2b:f4:25:b5:5e:6d:02:0c:a2:d0:ad:12: d4:2b:c1:86:16:7b:44:d4:8f:8e:b9:15:29:fb:39:68:ed:2b: 60:66:6b:a5:4a:af:73:57:26:ab:cf:f3:09:11:b8:df:2f:ec: 58:0e:a2:fa:fd:1a:dc:91:92:66:93:37:4c:5f:72:dd:d5:fb: 9f:8e:e4:ba:68:e4:5b:3a:9b:7b:63:88:04:5a:c3:b0:0d:1e: 8d:19:bb:87:02:b3:90:ab:68:9b:88:bb:7e:75:1b:32:bc:05: f7:6b:5e:d9:2a:f7:2c:d5:62:77:35:93:08:fc:2d:1f:6e:03: 9d:f5:3c:ba:a4:c3:95:16:14:00:5f:eb:44:4c:a8:b3:21:9f: 4c:d0:76:90:96:73:5a:a0:4d:17:b7:cb:50:73:80:19:14:6e: 6a:ce:5f:c7:0e:a5:cc:fe:41:b0:e0:38:19:f5:ef:74:a2:20: 3f:75:a6:4a:ec:8f:cd:ca:8a:10:2b:94:2f:26:29:f9:9b:c0: 77:5b:05:31 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUP6tMWLgRjXUM1nLN5pWzWsYEmrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdE NTU3Qzk1MzAeFw0yNTExMjIxNzU2MDlaFw0yNjExMjExODAxMDlaMDMxMTAvBgNV BAMTKDY5RDIwMTAxMDEzNTQ2RERENTkzQUI5RjBBMkU0QjA1MzA3NkRENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+ZsPW8MIW/l5jKkgkIAIiAsx g9nCFi84dFXHZLmd5PsRLaI+2ZXxpd8E5vX70Mfk8Ao2jw5nZLhlJ6yQeUN+WkUX gGozx0J3/jSeKtslmJ1L8rOpWQw24In2z41IBElQM7RdGELOD/p14wwYvh6bg178 9rUr7V1UqPGd6QpcPbOA+79JpHxo7j7YZh2X4jxKyyD+DMgfYH5HQUpm8X1w+wFL Tc7raSFwpQRiYymohIQ38f7lI6wchTsdoZttf4TUfMnMA/MXUI2t2pD7MJbrUK7e 78JJqTDlwrmHKlOiDPTmhyTE5nImQJpu+gRgWDI/bgZ75DM77YS0yNVT22mXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUadIBAQE1Rt3Vk6ufCi5LBTB23XAwHwYDVR0j BBgwFoAUwAFjiA8jVxR1mSBQchfyp9VXyVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWE3YTExNS1iOGI4LTQ5MGItODMyMC1jOWU1OWExMDAzZGQvMC9DMDAxNjM4ODBG MjM1NzE0NzU5OTIwNTA3MjE3RjJBN0Q1NTdDOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwMTYzODgwRjIzNTcxNDc1OTkyMDUwNzIxN0YyQTdENTU3 Qzk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTdhMTE1LWI4YjgtNDkwYi04 MzIwLWM5ZTU5YTEwMDNkZC8wLzMxMzEzOTJlMzIyZTM1MzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM0MzkzNzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3AjMwDQYJKoZIhvcN AQELBQADggEBAODLsEE70PxAC664BNbsBU7bI7TgTCTpxK1Ky0yXseMn+wkN98TK vpLlRLHHA+uTkmXz9cRBvQzJC+MJRiv0JbVebQIMotCtEtQrwYYWe0TUj465FSn7 OWjtK2Bma6VKr3NXJqvP8wkRuN8v7FgOovr9GtyRkmaTN0xfct3V+5+O5Lpo5Fs6 m3tjiARaw7ANHo0Zu4cCs5CraJuIu351GzK8BfdrXtkq9yzVYnc1kwj8LR9uA531 PLqkw5UWFABf60RMqLMhn0zQdpCWc1qgTRe3y1BzgBkUbmrOX8cOpcz+QbDgOBn1 73SiID91pkrsj83KihArlC8mKfmbwHdbBTE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:13:09 2025 by rpki-client