This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa File: 3131392e34372e38392e302f32342d3234203d3e203338353237.roa (raw, json) Hash identifier: M5eMsMOetidsRy/C8PwAw9YejdbuLdHg+PDsTMdviAE= Subject key identifier: 60:B4:21:80:62:87:E9:5B:0B:61:79:25:8E:C9:35:28:F7:6D:EE:A3 Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Certificate serial: 185E8BCA8CE9E483140C9C309BDE59E623C5CEB3 Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa Signing time: Wed 17 Dec 2025 11:00:02 +0000 ROA not before: Wed 17 Dec 2025 10:55:02 +0000 ROA not after: Wed 16 Dec 2026 11:00:02 +0000 asID: 38527 IP address blocks: 119.47.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5e:8b:ca:8c:e9:e4:83:14:0c:9c:30:9b:de:59:e6:23:c5:ce:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473 Validity Not Before: Dec 17 10:55:02 2025 GMT Not After : Dec 16 11:00:02 2026 GMT Subject: CN=60B421806287E95B0B6179258EC93528F76DEEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:42:82:5c:b9:1f:0a:b1:2e:4c:90:4a:2f:8d: e7:d6:a2:8c:95:db:ed:83:e5:74:4a:1c:d2:38:af: be:bb:cc:ca:c6:6f:4a:24:09:ef:56:56:25:1b:9b: a0:0a:f7:4c:a0:33:fe:2a:7c:1d:75:2a:73:2c:18: 15:a4:c9:1c:de:85:fa:b9:f6:77:38:15:2a:e2:3a: d6:fe:49:38:b3:42:95:33:4a:bf:cf:a0:e7:ec:24: ce:9a:2c:de:7f:d2:7d:9c:d6:12:84:b9:d9:3e:31: 2c:46:4c:06:a5:dd:be:f6:35:8f:20:a2:10:55:33: 8a:f1:1f:09:73:7e:10:d0:24:de:12:2a:af:e4:17: 50:ff:9b:cd:8f:10:39:1a:bc:96:b6:28:1b:98:50: 41:d8:4f:75:e6:e8:33:10:16:2c:41:11:50:54:41: 01:77:c9:f4:92:d0:89:80:aa:63:b6:7f:21:46:95: ab:af:a8:2a:ee:4d:d6:b6:e7:33:86:9f:32:9a:d9: 47:64:89:88:f4:34:31:c0:e5:f3:1c:16:1d:d3:af: 62:56:51:cb:ea:34:4c:6d:c9:11:60:0e:b4:0b:01: ae:4f:e5:c2:52:10:01:3e:dd:ed:11:fb:56:04:44: 0a:1a:fc:1f:ae:9a:58:2b:51:a1:95:1f:93:1c:a8: a3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B4:21:80:62:87:E9:5B:0B:61:79:25:8E:C9:35:28:F7:6D:EE:A3 X509v3 Authority Key Identifier: keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3131392e34372e38392e302f32342d3234203d3e203338353237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.47.89.0/24 Signature Algorithm: sha256WithRSAEncryption d1:5c:1b:0a:65:21:96:51:7c:fb:a7:7a:c7:24:e0:64:81:fb: 0d:a7:5e:05:a6:81:99:d3:d0:d0:54:be:7c:7e:d4:d6:28:45: 5f:99:d2:fa:1f:4b:d7:d9:bd:f1:47:ca:d7:6f:da:2f:2f:6a: 58:df:ec:ee:f2:3c:c9:b7:9c:1b:5a:d0:b7:68:cc:da:d5:3d: b6:0d:5f:7d:c6:ae:a5:92:87:c2:85:df:87:3b:be:f2:8c:5e: 64:6d:24:d0:7b:14:19:1e:87:0c:8c:65:dc:39:cd:89:db:fc: 38:70:d0:32:51:52:eb:3a:6e:11:b8:e9:b4:16:c7:cd:64:d2: 74:55:d3:34:9b:9d:69:08:10:e7:2a:08:56:21:7e:78:ef:01: e6:9b:f4:36:b2:78:bd:6a:9f:7b:8a:34:aa:47:fe:01:e3:92: 1b:79:bc:22:2c:a6:f5:5f:14:e5:00:cc:fa:7c:30:49:7d:8f: 3c:a9:a9:d4:f0:88:54:b7:04:3a:b0:86:d6:78:d2:7c:a5:fe: 56:26:04:d4:27:55:fb:6b:54:b9:2f:ea:d6:2b:53:80:b9:2a: 64:ff:3d:36:22:7b:48:50:19:b4:90:77:4e:46:8b:38:59:61: e7:9a:1d:b0:b9:bb:5f:31:97:1b:03:f4:83:5a:45:4a:55:c0: b1:ed:74:01 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUGF6Lyozp5IMUDJwwm95Z5iPFzrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBD RjlBNjQ3MzAeFw0yNTEyMTcxMDU1MDJaFw0yNjEyMTYxMTAwMDJaMDMxMTAvBgNV BAMTKDYwQjQyMTgwNjI4N0U5NUIwQjYxNzkyNThFQzkzNTI4Rjc2REVFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQoJcuR8KsS5MkEovjefWooyV 2+2D5XRKHNI4r767zMrGb0okCe9WViUbm6AK90ygM/4qfB11KnMsGBWkyRzehfq5 9nc4FSriOtb+STizQpUzSr/PoOfsJM6aLN5/0n2c1hKEudk+MSxGTAal3b72NY8g ohBVM4rxHwlzfhDQJN4SKq/kF1D/m82PEDkavJa2KBuYUEHYT3Xm6DMQFixBEVBU QQF3yfSS0ImAqmO2fyFGlauvqCruTda25zOGnzKa2UdkiYj0NDHA5fMcFh3Tr2JW UcvqNExtyRFgDrQLAa5P5cJSEAE+3e0R+1YERAoa/B+umlgrUaGVH5McqKOvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUYLQhgGKH6VsLYXkljsk1KPdt7qMwHwYDVR0j BBgwFoAUIo51K7+4wWs7RvPTiOztUM+aZHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTdlZmQyYS0wMmFiLTQyMDItOTcwZi1mNjk5ZGZmOTdkZTUvMC8yMjhFNzUyQkJG QjhDMTZCM0I0NkYzRDM4OEVDRUQ1MENGOUE2NDczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4RTc1MkJCRkI4QzE2QjNCNDZGM0QzODhFQ0VENTBDRjlB NjQ3My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxN2VmZDJhLTAyYWItNDIwMi05 NzBmLWY2OTlkZmY5N2RlNS8wLzMxMzEzOTJlMzQzNzJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3L1kwDQYJKoZIhvcN AQELBQADggEBANFcGwplIZZRfPunesck4GSB+w2nXgWmgZnT0NBUvnx+1NYoRV+Z 0vofS9fZvfFHytdv2i8valjf7O7yPMm3nBta0LdozNrVPbYNX33GrqWSh8KF34c7 vvKMXmRtJNB7FBkehwyMZdw5zYnb/Dhw0DJRUus6bhG46bQWx81k0nRV0zSbnWkI EOcqCFYhfnjvAeab9DayeL1qn3uKNKpH/gHjkht5vCIspvVfFOUAzPp8MEl9jzyp qdTwiFS3BDqwhtZ40nyl/lYmBNQnVftrVLkv6tYrU4C5KmT/PTYie0hQGbSQd05G izhZYeeaHbC5u18xlxsD9INaRUpVwLHtdAE= -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:03 2025 by rpki-client