This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38382e302f32342d3234203d3e203338353237.roa File: 3131392e34372e38382e302f32342d3234203d3e203338353237.roa (raw, json) Hash identifier: ZHYZolADCQ3Nh0kSpTOhEiQyqWLeuJaaRLk6yahYzfE= Subject key identifier: 1D:49:0D:28:F6:84:EF:46:88:E4:95:4B:70:82:92:41:64:28:EA:6A Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 7B1045AE05E34F72BDC3B55ACC88E22A33AB6C26 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38382e302f32342d3234203d3e203338353237.roa Signing time: Wed 17 Dec 2025 11:00:02 +0000 ROA not before: Wed 17 Dec 2025 10:55:02 +0000 ROA not after: Wed 16 Dec 2026 11:00:02 +0000 asID: 38527 IP address blocks: 119.47.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:10:45:ae:05:e3:4f:72:bd:c3:b5:5a:cc:88:e2:2a:33:ab:6c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Dec 17 10:55:02 2025 GMT Not After : Dec 16 11:00:02 2026 GMT Subject: CN=1D490D28F684EF4688E4954B708292416428EA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:28:24:26:7e:b3:61:a9:05:b1:6e:40:c0: 14:7d:ee:5f:19:b5:10:80:0f:61:5d:49:82:b8:71: c0:02:14:39:c9:30:8f:64:59:44:be:05:91:3f:0e: d8:7c:ce:be:c3:2c:fd:eb:e8:09:3c:24:0d:c5:f6: 2e:84:b4:98:eb:17:9d:32:8f:10:6b:85:8a:30:fd: 53:de:bd:2c:38:73:84:13:c7:bb:67:cb:f3:9d:04: 45:6a:6e:e1:d0:62:a2:30:c5:54:02:aa:01:10:c3: fe:d7:21:21:e0:58:ad:9c:2d:fd:89:fd:be:eb:4d: 45:7a:46:42:2f:62:d4:29:d6:82:5d:77:ce:0e:96: 47:99:88:47:0a:fb:a8:67:9b:e0:d4:5e:29:6f:bf: 00:7b:5c:55:ed:e6:15:a0:6f:b5:a6:c2:fe:50:21: 63:18:04:06:23:e7:83:d2:96:11:af:71:83:cf:ec: a1:9c:31:53:7e:43:cf:49:83:e5:b6:68:42:24:bc: b8:87:9d:81:7c:e1:ab:b1:9b:0f:e5:75:d8:16:80: f2:1e:f7:44:02:b5:1b:53:2f:13:a0:30:16:9c:26: 2e:34:82:11:82:eb:97:b3:80:ca:9a:08:1d:10:87: f5:f6:22:4d:d9:db:5a:a9:ec:89:cc:79:1a:85:c4: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:49:0D:28:F6:84:EF:46:88:E4:95:4B:70:82:92:41:64:28:EA:6A X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38382e302f32342d3234203d3e203338353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.88.0/24 Signature Algorithm: sha256WithRSAEncryption 53:88:d4:5f:96:1e:06:d0:cb:da:03:82:74:04:b3:4b:bc:d0: ae:2b:f1:01:d1:b2:cb:c7:d8:4b:25:bf:bc:41:b3:42:a4:58: 1e:a8:12:21:9f:ff:91:09:79:a2:4c:d6:57:04:79:74:1f:dd: 9d:8a:7f:46:2a:4e:59:6e:0d:57:f8:7d:c9:2a:98:c1:4c:3f: 24:19:15:22:59:08:3c:09:f6:d4:6e:b0:33:ff:32:c7:33:b4: 4d:bf:82:b3:9a:27:17:29:b8:ef:29:e8:a5:02:f3:c7:44:86: 4f:c8:c4:e7:c0:49:99:ec:ca:89:4b:4f:f3:00:35:8f:9a:91: f7:71:38:6c:57:ea:51:7a:44:8d:7a:5e:bb:8f:d8:77:29:21: a0:57:a4:22:d6:05:e6:39:d7:d3:df:c6:cd:f2:ec:36:e8:e1: e4:a8:03:1a:53:8d:cd:d5:c4:72:00:75:eb:e9:cb:50:df:f0: e0:95:a3:5f:3a:0d:d9:b4:9f:3b:30:19:f8:17:f7:7b:63:bc: ef:51:90:8c:f1:3c:f0:0b:e9:89:f3:f8:dd:e2:89:ff:9d:bf: db:50:f3:0f:77:0f:0b:dd:17:7d:50:0d:9a:93:9c:b7:72:cd: 9d:ea:0b:d4:60:b0:97:24:24:ed:ed:d5:b3:07:8b:93:e0:1c: 25:9d:db:f0 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUexBFrgXjT3K9w7VazIjiKjOrbCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTEyMTcxMDU1MDJaFw0yNjEyMTYxMTAwMDJaMDMxMTAvBgNV BAMTKDFENDkwRDI4RjY4NEVGNDY4OEU0OTU0QjcwODI5MjQxNjQyOEVBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtCgkJn6zYakFsW5AwBR97l8Z tRCAD2FdSYK4ccACFDnJMI9kWUS+BZE/Dth8zr7DLP3r6Ak8JA3F9i6EtJjrF50y jxBrhYow/VPevSw4c4QTx7tny/OdBEVqbuHQYqIwxVQCqgEQw/7XISHgWK2cLf2J /b7rTUV6RkIvYtQp1oJdd84OlkeZiEcK+6hnm+DUXilvvwB7XFXt5hWgb7Wmwv5Q IWMYBAYj54PSlhGvcYPP7KGcMVN+Q89Jg+W2aEIkvLiHnYF84auxmw/lddgWgPIe 90QCtRtTLxOgMBacJi40ghGC65ezgMqaCB0Qh/X2Ik3Z21qp7InMeRqFxJMFAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUHUkNKPaE70aI5JVLcIKSQWQo6mowHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzgzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3L1gwDQYJKoZIhvcN AQELBQADggEBAFOI1F+WHgbQy9oDgnQEs0u80K4r8QHRssvH2Eslv7xBs0KkWB6o EiGf/5EJeaJM1lcEeXQf3Z2Kf0YqTlluDVf4fckqmMFMPyQZFSJZCDwJ9tRusDP/ MscztE2/grOaJxcpuO8p6KUC88dEhk/IxOfASZnsyolLT/MANY+akfdxOGxX6lF6 RI16XruP2HcpIaBXpCLWBeY519Pfxs3y7Dbo4eSoAxpTjc3VxHIAdevpy1Df8OCV o186Ddm0nzswGfgX93tjvO9RkIzxPPAL6Ynz+N3iif+dv9tQ8w93DwvdF31QDZqT nLdyzZ3qC9RgsJckJO3t1bMHi5PgHCWd2/A= -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:09 2025 by rpki-client