This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa File: 3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa (raw, json) Hash identifier: /wV95wT81KDKro/jg/Buo94wrPpWyGBGso5Gssi1qLc= Subject key identifier: E1:04:42:B6:DD:5C:75:FA:B4:59:EB:BF:78:42:2D:6C:80:2D:EC:1E Certificate issuer: /CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Certificate serial: 7E79B1CF659DE27344F57D1DAAC8EFD36AC7642D Authority key identifier: C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa Signing time: Thu 11 Dec 2025 03:02:06 +0000 ROA not before: Thu 11 Dec 2025 02:57:06 +0000 ROA not after: Thu 10 Dec 2026 03:02:06 +0000 asID: 141142 IP address blocks: 122.248.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 13:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:b1:cf:65:9d:e2:73:44:f5:7d:1d:aa:c8:ef:d3:6a:c7:64:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C16E46D556A47D2429EC847E95E7C429D38AC26D Validity Not Before: Dec 11 02:57:06 2025 GMT Not After : Dec 10 03:02:06 2026 GMT Subject: CN=E10442B6DD5C75FAB459EBBF78422D6C802DEC1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:7b:1d:36:2a:5a:58:0f:fe:05:74:57:35: 9e:fa:83:0f:85:62:4c:b4:a2:08:25:72:2e:48:c6: 09:90:39:ce:46:05:c7:c2:04:10:95:ff:4f:a2:0d: 35:1a:32:14:e3:17:31:ad:7f:77:fd:01:59:34:94: b3:36:73:65:93:06:b6:dc:33:73:18:b2:a6:85:e7: ce:c7:16:a2:65:d7:81:f6:21:4e:88:4f:04:46:8e: cf:8a:77:97:33:52:e9:0f:5d:93:85:99:e1:eb:41: 39:c5:4a:34:db:e6:5a:58:2d:b9:d4:f0:64:f4:82: 4f:63:1e:6c:14:40:3e:00:fc:1c:d8:1b:6e:33:e2: 00:a7:29:16:c2:83:58:a1:f1:f1:4f:4a:8e:59:37: ac:de:cf:0b:86:35:69:41:68:ec:d9:8a:c4:73:a2: fe:43:08:19:65:8f:ed:8f:a5:f0:90:bf:78:e7:93: 27:46:27:e7:6c:0f:dc:71:77:0b:79:9a:be:78:7a: ec:c0:f9:79:ae:55:aa:dc:32:48:b6:ba:79:c3:ae: 7d:28:ff:41:fd:cf:48:22:02:9f:ce:69:42:49:e4: ff:d6:eb:0b:d2:5f:29:39:e8:ed:70:df:4f:39:84: da:a9:af:92:0e:ee:96:51:7d:16:91:40:fd:c2:68: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:42:B6:DD:5C:75:FA:B4:59:EB:BF:78:42:2D:6C:80:2D:EC:1E X509v3 Authority Key Identifier: keyid:C1:6E:46:D5:56:A4:7D:24:29:EC:84:7E:95:E7:C4:29:D3:8A:C2:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/C16E46D556A47D2429EC847E95E7C429D38AC26D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C16E46D556A47D2429EC847E95E7C429D38AC26D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df2e7fd6-eb5e-480a-8e97-c55f68e0589a/0/3132322e3234382e34342e302f32342d3234203d3e20313431313432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.248.44.0/24 Signature Algorithm: sha256WithRSAEncryption 23:45:b1:ae:19:58:8e:08:5f:71:7a:08:90:a4:e4:86:1e:ee: e1:5c:00:d2:fc:d3:0c:64:a4:e1:5d:44:89:d4:19:0a:e0:e3: cd:e0:09:64:b1:99:d1:0a:15:74:75:91:15:3f:d2:b6:08:d5: ee:d7:ac:da:1e:df:6a:49:13:17:8e:c1:45:d0:96:7a:0b:e7: 27:42:cd:07:9c:aa:ad:ff:06:0e:94:d3:90:77:43:82:b0:97: 26:50:a2:19:1f:01:d0:37:5b:fc:d4:82:22:1a:f7:12:ac:dd: f5:f6:4e:b0:14:e0:35:c3:b4:bd:62:82:a3:2d:7a:ea:43:f5: 33:64:c7:ce:cc:42:70:77:0e:77:33:45:06:91:8a:77:87:b4: 00:d7:ff:01:f6:6a:37:e7:5b:56:a7:58:c3:fc:78:2a:bc:dc: 21:1e:54:5d:7e:4a:68:7b:d7:e6:1e:7d:28:dc:89:14:9f:0f: ab:d5:4f:b8:ab:8e:e5:1b:cc:ce:e2:d1:3f:69:6b:27:1e:d4: 38:36:89:af:83:36:c1:4f:93:df:20:7b:40:3c:7a:b0:67:65: 78:dc:a5:2c:e7:c6:76:8f:cb:99:d4:3c:96:d5:61:38:4f:9d: ac:85:86:71:95:eb:27:0f:fe:c7:3c:fb:d3:bf:aa:a8:39:6b: 62:fd:99:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfnmxz2Wd4nNE9X0dqsjv02rHZC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlE MzhBQzI2RDAeFw0yNTEyMTEwMjU3MDZaFw0yNjEyMTAwMzAyMDZaMDMxMTAvBgNV BAMTKEUxMDQ0MkI2REQ1Qzc1RkFCNDU5RUJCRjc4NDIyRDZDODAyREVDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJXsdNipaWA/+BXRXNZ76gw+F Yky0ogglci5IxgmQOc5GBcfCBBCV/0+iDTUaMhTjFzGtf3f9AVk0lLM2c2WTBrbc M3MYsqaF587HFqJl14H2IU6ITwRGjs+Kd5czUukPXZOFmeHrQTnFSjTb5lpYLbnU 8GT0gk9jHmwUQD4A/BzYG24z4gCnKRbCg1ih8fFPSo5ZN6zezwuGNWlBaOzZisRz ov5DCBllj+2PpfCQv3jnkydGJ+dsD9xxdwt5mr54euzA+XmuVarcMki2unnDrn0o /0H9z0giAp/OaUJJ5P/W6wvSXyk56O1w3085hNqpr5IO7pZRfRaRQP3CaJw/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4QRCtt1cdfq0Weu/eEItbIAt7B4wHwYDVR0j BBgwFoAUwW5G1VakfSQp7IR+lefEKdOKwm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjJlN2ZkNi1lYjVlLTQ4MGEtOGU5Ny1jNTVmNjhlMDU4OWEvMC9DMTZFNDZENTU2 QTQ3RDI0MjlFQzg0N0U5NUU3QzQyOUQzOEFDMjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2RTQ2RDU1NkE0N0QyNDI5RUM4NDdFOTVFN0M0MjlEMzhB QzI2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMmU3ZmQ2LWViNWUtNDgwYS04 ZTk3LWM1NWY2OGUwNTg5YS8wLzMxMzIzMjJlMzIzNDM4MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAevgsMA0GCSqG SIb3DQEBCwUAA4IBAQAjRbGuGViOCF9xegiQpOSGHu7hXADS/NMMZKThXUSJ1BkK 4OPN4AlksZnRChV0dZEVP9K2CNXu16zaHt9qSRMXjsFF0JZ6C+cnQs0HnKqt/wYO lNOQd0OCsJcmUKIZHwHQN1v81IIiGvcSrN319k6wFOA1w7S9YoKjLXrqQ/UzZMfO zEJwdw53M0UGkYp3h7QA1/8B9mo351tWp1jD/HgqvNwhHlRdfkpoe9fmHn0o3IkU nw+r1U+4q47lG8zO4tE/aWsnHtQ4NomvgzbBT5PfIHtAPHqwZ2V43KUs58Z2j8uZ 1DyW1WE4T52shYZxlesnD/7HPPvTv6qoOWti/ZlV -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:04 2025 by rpki-client