This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa File: 3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (raw, json) Hash identifier: EFxWA7vxSgHBwram8ylJUW5n68a3XpYhbkZqHyGTFPU= Subject key identifier: 98:9D:E7:88:EE:14:96:FD:2E:EF:73:2F:75:73:A2:AC:59:08:85:7E Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Certificate serial: 18F6D95F537ECC06E34613F267B5249CE0BBF634 Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa Signing time: Fri 28 Nov 2025 07:48:17 +0000 ROA not before: Fri 28 Nov 2025 07:43:17 +0000 ROA not after: Fri 27 Nov 2026 07:48:17 +0000 asID: 132644 IP address blocks: 116.204.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f6:d9:5f:53:7e:cc:06:e3:46:13:f2:67:b5:24:9c:e0:bb:f6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633 Validity Not Before: Nov 28 07:43:17 2025 GMT Not After : Nov 27 07:48:17 2026 GMT Subject: CN=989DE788EE1496FD2EEF732F7573A2AC5908857E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:96:c2:a8:08:10:c9:f6:c4:c8:01:b1:9a:64: f0:70:cf:74:f3:0c:99:71:52:58:cd:d6:2e:c1:98: c4:53:18:77:f5:8f:4e:8e:96:68:89:05:ba:55:17: 74:9a:14:ac:c1:8b:a3:42:11:64:6f:18:a9:38:70: f0:8c:56:a4:f0:f3:ab:c0:ad:5a:f8:0f:d6:21:f3: 7a:85:5a:73:bd:51:54:d6:f7:70:be:f6:3b:b2:a9: d2:7b:e6:7e:28:9d:77:1b:c1:7e:3d:c9:97:5a:f0: dc:64:52:33:03:78:01:ce:7b:ab:53:ea:4f:bc:67: 5d:b8:4d:37:14:d4:99:be:fa:cb:a0:e8:0e:a6:77: ad:1b:36:f7:08:94:c0:4a:71:07:5a:b4:da:aa:cc: 71:29:bc:20:f4:88:35:90:21:57:ce:a3:f4:b0:7a: cf:96:da:c2:54:f6:28:bd:d7:c5:68:14:07:0a:3a: 2f:fd:f1:b4:83:fb:68:c0:f1:c0:11:92:bd:d3:69: f7:17:76:2b:db:c1:4f:e7:38:76:df:8b:f2:af:61: a3:b5:cb:c1:fa:92:4d:54:67:3e:27:fa:05:e4:59: 08:55:87:1c:c4:a9:b6:ac:be:a5:63:96:ff:b5:7a: da:8a:21:2d:2d:b7:6c:4e:ad:4c:f3:38:68:45:0b: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:E7:88:EE:14:96:FD:2E:EF:73:2F:75:73:A2:AC:59:08:85:7E X509v3 Authority Key Identifier: keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 116.204.250.0/23 Signature Algorithm: sha256WithRSAEncryption 02:de:e0:be:8c:b6:5e:ff:c7:95:38:35:3f:00:e6:65:f8:3e: 21:db:cd:13:37:45:ca:f2:a5:08:f7:8d:db:ba:02:8e:0a:0c: f7:aa:93:27:05:3e:63:a4:9f:eb:fe:22:dd:42:17:70:71:34: 66:d3:d7:c6:ea:d2:9a:af:e6:3c:22:40:23:09:06:59:b8:5d: 2b:fb:6b:8e:20:ea:c4:48:de:7b:ca:55:1e:bb:5e:60:f5:8a: bd:26:c4:ac:c0:5c:0c:8c:45:5d:91:b0:f3:d0:ce:4f:f8:b1: 22:ff:96:47:50:14:7f:69:b2:f8:01:59:69:06:32:27:b7:a4: 40:b8:16:7a:88:bd:8a:9f:88:6a:4f:13:33:40:1d:74:9a:9c: 78:2e:fa:74:fd:93:9e:00:62:fa:1e:a8:12:27:74:b3:eb:2a: 72:df:63:a3:73:3e:48:aa:00:e7:b1:dc:b9:ea:dd:49:66:82: 06:8d:23:b1:6b:d6:09:c3:32:75:ad:e1:9d:64:02:d2:22:3f: 7c:3b:05:94:eb:44:74:35:58:b9:31:c4:ac:bc:ab:cc:62:8f: 87:ec:9c:01:62:d1:8d:05:69:c8:88:ee:51:1b:86:2e:11:1f: d6:12:bb:d2:de:08:86:c7:ab:58:1b:b9:23:c1:50:ec:32:52: b6:56:c9:db -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGPbZX1N+zAbjRhPyZ7UknOC79jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC Q0RBRDYzMzAeFw0yNTExMjgwNzQzMTdaFw0yNjExMjcwNzQ4MTdaMDMxMTAvBgNV BAMTKDk4OURFNzg4RUUxNDk2RkQyRUVGNzMyRjc1NzNBMkFDNTkwODg1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMlsKoCBDJ9sTIAbGaZPBwz3Tz DJlxUljN1i7BmMRTGHf1j06OlmiJBbpVF3SaFKzBi6NCEWRvGKk4cPCMVqTw86vA rVr4D9Yh83qFWnO9UVTW93C+9juyqdJ75n4onXcbwX49yZda8NxkUjMDeAHOe6tT 6k+8Z124TTcU1Jm++sug6A6md60bNvcIlMBKcQdatNqqzHEpvCD0iDWQIVfOo/Sw es+W2sJU9ii918VoFAcKOi/98bSD+2jA8cARkr3TafcXdivbwU/nOHbfi/KvYaO1 y8H6kk1UZz4n+gXkWQhVhxzEqbasvqVjlv+1etqKIS0tt2xOrUzzOGhFC0FJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmJ3niO4Ulv0u73MvdXOirFkIhX4wHwYDVR0j BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4 MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB RDYzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFmLTM4ZTItNDVhYS05 N2RjLTk5Mjc5NjQxMWNjMS8wLzMxMzEzNjJlMzIzMDM0MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzIzNjM0MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF0zPowDQYJ KoZIhvcNAQELBQADggEBAALe4L6Mtl7/x5U4NT8A5mX4PiHbzRM3RcrypQj3jdu6 Ao4KDPeqkycFPmOkn+v+It1CF3BxNGbT18bq0pqv5jwiQCMJBlm4XSv7a44g6sRI 3nvKVR67XmD1ir0mxKzAXAyMRV2RsPPQzk/4sSL/lkdQFH9psvgBWWkGMie3pEC4 FnqIvYqfiGpPEzNAHXSanHgu+nT9k54AYvoeqBIndLPrKnLfY6NzPkiqAOex3Lnq 3UlmggaNI7Fr1gnDMnWt4Z1kAtIiP3w7BZTrRHQ1WLkxxKy8q8xij4fsnAFi0Y0F aciI7lEbhi4RH9YSu9LeCIbHq1gbuSPBUOwyUrZWyds= -----END CERTIFICATE-----Generated at Wed Dec 3 14:52:17 2025 by rpki-client