This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa File: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (raw, json) Hash identifier: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo= Subject key identifier: 2C:CD:B7:B8:3A:E8:5A:82:9C:79:E1:52:F2:02:B1:00:CE:0E:7D:27 Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Certificate serial: 53C612A8ECCDA2A542DAFCCA58923A1F22DF14A0 Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa Signing time: Sun 09 Nov 2025 03:00:01 +0000 ROA not before: Sun 09 Nov 2025 02:55:01 +0000 ROA not after: Sun 08 Nov 2026 03:00:01 +0000 asID: 141673 IP address blocks: 202.57.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:12:a8:ec:cd:a2:a5:42:da:fc:ca:58:92:3a:1f:22:df:14:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Validity Not Before: Nov 9 02:55:01 2025 GMT Not After : Nov 8 03:00:01 2026 GMT Subject: CN=2CCDB7B83AE85A829C79E152F202B100CE0E7D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:36:af:ec:74:df:2d:8e:87:c4:97:f5:62: 9e:97:fd:4d:b6:fd:c3:6d:ec:bf:91:76:d1:66:c7: bc:97:3a:e4:c0:82:e5:61:9d:fe:fb:5d:97:9f:cb: 8a:58:17:70:42:59:69:79:6a:f3:2b:60:ab:1e:c6: 07:bc:a4:4b:38:05:fd:38:ef:29:19:3a:0f:8b:6d: ed:ce:0c:80:ed:74:30:67:dc:7b:2a:2f:8a:e4:7a: 6d:18:fe:90:be:d6:48:08:a2:67:bd:0e:2f:96:ae: dc:3a:c2:ba:b0:25:8f:50:59:f7:7c:bd:41:3e:d1: 90:d9:3c:eb:f4:83:5b:3b:06:0d:97:5f:48:26:a5: e2:8d:9d:18:6a:3c:80:1f:8b:ba:81:c5:11:c2:0b: 2c:f2:6a:18:1a:a9:26:7c:41:5f:d6:cb:8d:f0:af: 58:c0:d7:dd:a3:68:04:cc:c7:30:af:7d:7b:28:b9: 07:57:4b:c9:3a:55:c8:d2:e7:0a:02:f0:9a:87:13: 0c:ce:91:2a:50:e8:f6:75:c9:63:44:53:4a:08:06: 95:98:a7:f0:02:86:05:4f:e9:03:57:b0:3e:09:33: 6b:fe:8a:6b:16:1f:a4:36:42:eb:c4:56:3c:4f:6d: b8:d1:ab:c0:77:5c:ee:5a:62:1e:fe:ca:8d:64:d4: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CD:B7:B8:3A:E8:5A:82:9C:79:E1:52:F2:02:B1:00:CE:0E:7D:27 X509v3 Authority Key Identifier: keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32302e302f32342d3234203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.57.20.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5f:d8:bf:f6:26:4e:87:60:3f:87:a4:42:90:ee:70:ed:b2: ee:84:ef:c7:df:28:c3:96:34:3e:0f:4b:b8:ce:95:f0:f3:99: 11:b2:96:0d:f9:ab:26:00:b5:6d:69:2d:cd:7d:78:ca:92:36: a5:94:51:0c:fc:7c:17:bf:c4:68:35:ac:57:47:93:25:c8:30: e8:90:51:f5:83:12:4c:f7:19:54:e2:ac:04:de:79:b3:74:80: 7d:85:26:36:0b:5c:2a:8f:1e:fe:e3:1a:f0:28:f0:97:e7:0b: bf:fc:0d:35:f9:a4:ed:e3:f7:e9:88:2e:f6:e0:ee:ae:2b:82: 43:d3:fb:80:09:f4:4e:50:b6:5a:10:e0:eb:68:82:46:ce:be: 2f:70:2c:7a:d2:a6:8e:71:20:0a:4b:4c:c6:1a:e8:24:b5:70: c7:0e:0f:48:d2:f5:5f:9d:bf:73:a8:b3:aa:48:0e:60:82:a8: b8:4d:d9:a9:26:55:18:b8:85:8f:e0:bf:94:22:bf:70:7b:c5: 1e:9e:c2:26:2b:ad:99:ab:81:1a:ea:1a:29:69:1a:18:9d:62: 9e:56:07:3b:52:c3:2c:a4:e7:0e:db:49:32:61:42:29:0c:14: c0:de:75:5b:90:59:93:0a:79:60:2f:d8:4b:8b:29:c3:c1:74: e8:64:09:d1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUU8YSqOzNoqVC2vzKWJI6HyLfFKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3 Qjg1OUJENTAeFw0yNTExMDkwMjU1MDFaFw0yNjExMDgwMzAwMDFaMDMxMTAvBgNV BAMTKDJDQ0RCN0I4M0FFODVBODI5Qzc5RTE1MkYyMDJCMTAwQ0UwRTdEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXjav7HTfLY6HxJf1Yp6X/U22 /cNt7L+RdtFmx7yXOuTAguVhnf77XZefy4pYF3BCWWl5avMrYKsexge8pEs4Bf04 7ykZOg+Lbe3ODIDtdDBn3HsqL4rkem0Y/pC+1kgIome9Di+Wrtw6wrqwJY9QWfd8 vUE+0ZDZPOv0g1s7Bg2XX0gmpeKNnRhqPIAfi7qBxRHCCyzyahgaqSZ8QV/Wy43w r1jA192jaATMxzCvfXsouQdXS8k6VcjS5woC8JqHEwzOkSpQ6PZ1yWNEU0oIBpWY p/AChgVP6QNXsD4JM2v+imsWH6Q2QuvEVjxPbbjRq8B3XO5aYh7+yo1k1AjtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULM23uDroWoKceeFS8gKxAM4OfScwHwYDVR0j BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1 OUJENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkM2YwOTViLTcxMzAtNDEyMi1h ZjI1LTdkMmU3YTExYjFiMS8wLzMyMzAzMjJlMzUzNzJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMo5FDANBgkqhkiG 9w0BAQsFAAOCAQEAQF/Yv/YmTodgP4ekQpDucO2y7oTvx98ow5Y0Pg9LuM6V8POZ EbKWDfmrJgC1bWktzX14ypI2pZRRDPx8F7/EaDWsV0eTJcgw6JBR9YMSTPcZVOKs BN55s3SAfYUmNgtcKo8e/uMa8Cjwl+cLv/wNNfmk7eP36Ygu9uDuriuCQ9P7gAn0 TlC2WhDg62iCRs6+L3AsetKmjnEgCktMxhroJLVwxw4PSNL1X52/c6izqkgOYIKo uE3ZqSZVGLiFj+C/lCK/cHvFHp7CJiutmauBGuoaKWkaGJ1inlYHO1LDLKTnDttJ MmFCKQwUwN51W5BZkwp5YC/YS4spw8F06GQJ0Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:09 2025 by rpki-client