This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa File: 3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa (raw, json) Hash identifier: Tq6eQwWr1rdCCJNVIsGIEm3Uh/gJAzWFs05ZKzvmuow= Subject key identifier: 57:12:B2:C7:D2:5A:67:F8:93:D8:26:6A:B4:E6:6B:A7:62:21:2E:3E Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 67ED55E271EE3EA00226DB8DEB78DAF81A473542 Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa Signing time: Thu 18 Dec 2025 09:30:53 +0000 ROA not before: Thu 18 Dec 2025 09:25:53 +0000 ROA not after: Thu 17 Dec 2026 09:30:53 +0000 asID: 142382 IP address blocks: 157.10.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ed:55:e2:71:ee:3e:a0:02:26:db:8d:eb:78:da:f8:1a:47:35:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Dec 18 09:25:53 2025 GMT Not After : Dec 17 09:30:53 2026 GMT Subject: CN=5712B2C7D25A67F893D8266AB4E66BA762212E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:e0:63:32:0e:43:dd:10:a9:65:54:a4:3e: f6:28:22:c8:76:34:6f:c3:b1:04:11:35:d6:68:c3: 78:8c:17:85:d1:71:ec:ce:d5:8f:de:15:26:18:c6: b7:dc:d9:bd:c6:f9:15:dd:50:05:82:c0:96:8b:8f: 68:22:70:33:8b:83:c0:c5:2f:00:62:df:23:a4:79: 3c:3b:f2:3b:18:bb:a2:3e:8b:82:01:5e:7f:34:a0: 79:45:66:56:f3:37:82:88:9e:0a:bd:e6:d7:4d:f8: 95:c2:f6:6d:eb:26:7a:d7:e0:1e:ee:87:1b:32:f0: 4c:82:8f:f2:2f:de:15:67:f6:36:40:62:6e:c0:60: 97:be:03:69:80:85:8e:a1:33:ec:31:26:2a:bc:a5: cc:0f:b4:d7:2d:f0:64:e1:eb:9c:19:06:e4:7e:c2: fc:94:1f:65:41:0e:eb:60:05:c4:d0:bd:ab:c7:00: bb:43:dc:12:8c:28:6a:ff:a4:62:d1:1d:93:98:78: 7c:da:43:25:13:aa:57:1f:b1:f6:3a:2e:eb:c1:3a: ad:d1:a2:b9:56:26:4f:0f:1f:63:f6:38:a8:6a:25: dc:53:bb:42:da:b1:b0:f4:23:8a:65:40:9e:98:61: f1:f3:b5:c2:e4:39:7d:55:ec:53:b4:80:0f:6b:b5: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:12:B2:C7:D2:5A:67:F8:93:D8:26:6A:B4:E6:6B:A7:62:21:2E:3E X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.181.0/24 Signature Algorithm: sha256WithRSAEncryption f0:17:44:ee:98:3f:e0:e8:aa:c9:6c:09:94:56:4f:a3:91:25: 23:e8:14:b2:28:8b:a5:3f:21:65:4f:6f:32:22:f3:4d:f7:78: 6a:ab:79:a6:2e:a6:50:08:93:8e:1d:e2:1a:6c:ef:b2:29:76: 9c:b0:5b:11:97:e7:97:bf:e2:a7:9b:36:50:90:12:5a:84:95: 1c:fe:06:75:09:d5:9d:43:57:2c:2c:46:82:8e:11:f5:bd:b0: 0e:cd:b1:c6:9d:70:d8:4f:dd:0b:73:e4:a7:4b:d6:0d:2f:29: f0:9b:77:69:a4:b2:de:38:05:1f:8b:71:a3:43:a7:c7:5e:95: 67:f9:04:9a:95:1d:e1:e5:57:42:94:1f:a6:bf:f5:6f:e2:b0: 72:52:7e:55:d1:bb:8e:32:13:89:0e:f4:f0:07:0a:29:a2:41: bf:ac:73:33:19:91:3d:84:40:cc:3c:cf:bc:1b:1d:f1:d6:7e: 50:28:e3:8d:a3:96:63:25:ba:1b:c3:fe:ff:7b:47:8e:99:3e: 09:ea:5e:19:51:71:aa:93:a9:6a:d8:92:dc:f1:d9:07:d5:13: 64:13:bb:2b:32:60:fb:64:ce:dd:4e:7d:93:98:c8:b7:a1:4a: a2:2c:bf:82:86:2a:a4:1c:9d:c2:df:e3:30:7c:c6:f5:ca:c9: 7f:a4:a4:e8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ+1V4nHuPqACJtuN63ja+BpHNUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTEyMTgwOTI1NTNaFw0yNjEyMTcwOTMwNTNaMDMxMTAvBgNV BAMTKDU3MTJCMkM3RDI1QTY3Rjg5M0Q4MjY2QUI0RTY2QkE3NjIyMTJFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/A+BjMg5D3RCpZVSkPvYoIsh2 NG/DsQQRNdZow3iMF4XRcezO1Y/eFSYYxrfc2b3G+RXdUAWCwJaLj2gicDOLg8DF LwBi3yOkeTw78jsYu6I+i4IBXn80oHlFZlbzN4KIngq95tdN+JXC9m3rJnrX4B7u hxsy8EyCj/Iv3hVn9jZAYm7AYJe+A2mAhY6hM+wxJiq8pcwPtNct8GTh65wZBuR+ wvyUH2VBDutgBcTQvavHALtD3BKMKGr/pGLRHZOYeHzaQyUTqlcfsfY6LuvBOq3R orlWJk8PH2P2OKhqJdxTu0LasbD0I4plQJ6YYfHztcLkOX1V7FO0gA9rtedZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVxKyx9JaZ/iT2CZqtOZrp2IhLj4wHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5MGQwMjY1LTJjYzEtNDYzZC05 NDhiLWNkZWQxM2EyMDI5NS8wLzMxMzUzNzJlMzEzMDJlMzEzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQq1MA0GCSqG SIb3DQEBCwUAA4IBAQDwF0TumD/g6KrJbAmUVk+jkSUj6BSyKIulPyFlT28yIvNN 93hqq3mmLqZQCJOOHeIabO+yKXacsFsRl+eXv+KnmzZQkBJahJUc/gZ1CdWdQ1cs LEaCjhH1vbAOzbHGnXDYT90Lc+SnS9YNLynwm3dppLLeOAUfi3GjQ6fHXpVn+QSa lR3h5VdClB+mv/Vv4rByUn5V0buOMhOJDvTwBwopokG/rHMzGZE9hEDMPM+8Gx3x 1n5QKOONo5ZjJbobw/7/e0eOmT4J6l4ZUXGqk6lq2JLc8dkH1RNkE7srMmD7ZM7d Tn2TmMi3oUqiLL+ChiqkHJ3C3+MwfMb1ysl/pKTo -----END CERTIFICATE-----Generated at Mon Dec 22 12:12:14 2025 by rpki-client