This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3234203d3e203538333831.roa File: 3230322e34332e3234382e302f32332d3234203d3e203538333831.roa (raw, json) Hash identifier: fLwaxSiPiMGYGYjTwweBcQlSgL4S11+kugIMQEQ/4F8= Subject key identifier: 5A:99:69:40:7C:D0:9F:04:E8:73:78:07:F9:14:D4:D3:7C:35:CA:8D Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 088E0013B4551DAA829EE194CC1DECE565AF77D8 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3234203d3e203538333831.roa Signing time: Mon 01 Dec 2025 03:00:03 +0000 ROA not before: Mon 01 Dec 2025 02:55:03 +0000 ROA not after: Mon 30 Nov 2026 03:00:03 +0000 asID: 58381 IP address blocks: 202.43.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:8e:00:13:b4:55:1d:aa:82:9e:e1:94:cc:1d:ec:e5:65:af:77:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: Dec 1 02:55:03 2025 GMT Not After : Nov 30 03:00:03 2026 GMT Subject: CN=5A9969407CD09F04E8737807F914D4D37C35CA8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:dc:32:52:39:a9:e3:a7:80:23:25:43:5a: 5c:96:e3:db:13:a4:94:06:9e:57:46:01:13:57:33: b7:95:de:6e:90:7b:ab:ce:b7:b2:06:d6:6e:a6:b3: ea:5d:77:bf:cb:1f:47:b2:49:bf:cc:07:f1:ad:d4: 3c:f9:31:99:64:ce:d8:99:04:47:8b:ab:b2:9d:14: c5:cf:17:92:23:52:06:55:8b:18:59:70:d3:2c:5a: a2:63:7f:58:49:c9:d5:c5:8d:03:65:ac:f4:db:50: 35:39:6d:4c:42:fb:04:25:a9:6b:d4:bf:c8:91:49: 1c:ca:29:fa:97:13:da:79:0a:cc:52:70:a8:76:33: 08:da:09:2d:d5:36:d8:8f:aa:e8:55:c9:ce:29:90: 48:8f:42:b2:5a:55:57:4e:97:54:58:c3:97:28:f2: d1:31:32:5a:21:46:82:4b:4f:5d:03:b8:4f:cb:18: 24:ae:b7:88:6b:50:4b:45:9b:51:4d:32:8b:e4:93: 28:1b:a2:45:62:37:68:78:97:85:b7:fb:f6:26:3c: ce:4f:5d:67:fa:f8:07:df:89:17:54:e0:3b:71:71: c1:87:15:2c:12:d1:ac:dc:5d:df:b2:2d:10:fa:60: 39:65:7e:83:79:7d:87:14:fa:2d:d8:88:22:41:49: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:69:40:7C:D0:9F:04:E8:73:78:07:F9:14:D4:D3:7C:35:CA:8D X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3234382e302f32332d3234203d3e203538333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.248.0/23 Signature Algorithm: sha256WithRSAEncryption 28:77:fc:76:4e:75:d3:84:85:04:3a:a2:8f:e5:2c:8e:d4:13: 58:b8:2d:2b:a1:5f:49:bb:78:5f:85:91:0c:19:e6:dd:65:9d: 98:1d:29:b0:1e:ff:53:5f:30:77:0c:31:ae:54:d9:74:21:99: d4:e1:ff:f7:bc:69:8c:af:ea:6d:b2:a1:0e:4d:7c:61:09:40: fd:bc:d7:60:11:77:3b:02:83:6f:31:30:7a:52:5b:1d:d5:c0: eb:62:64:30:7c:2d:95:12:23:f4:9e:b3:80:46:4c:f1:bb:47: 15:f3:93:00:eb:fa:53:88:68:cc:0c:99:93:b5:9d:59:be:06: 76:88:39:d8:47:87:ad:cc:e7:77:82:64:4c:3f:d2:a9:8b:85: 88:4a:89:b5:6d:16:d1:42:2b:61:bb:02:41:35:23:c4:4c:cf: 4c:cf:6c:7c:a3:d3:97:c8:70:76:dc:47:cb:d1:5f:9b:96:91: c0:cf:75:cf:a9:87:97:1e:a6:c8:51:97:d5:c2:b9:63:fd:6d: b1:eb:e6:7d:52:ef:94:3c:5b:24:9a:32:92:ce:10:1f:48:36: 72:13:bc:53:24:a6:25:4f:50:d0:01:e4:e4:b8:9b:c8:2f:11: 05:8e:91:e4:9f:50:6d:c6:9d:99:d5:16:82:b0:6c:4a:4c:32: 99:0a:cb:1f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCI4AE7RVHaqCnuGUzB3s5WWvd9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTEyMDEwMjU1MDNaFw0yNjExMzAwMzAwMDNaMDMxMTAvBgNV BAMTKDVBOTk2OTQwN0NEMDlGMDRFODczNzgwN0Y5MTRENEQzN0MzNUNBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcdwyUjmp46eAIyVDWlyW49sT pJQGnldGARNXM7eV3m6Qe6vOt7IG1m6ms+pdd7/LH0eySb/MB/Gt1Dz5MZlkztiZ BEeLq7KdFMXPF5IjUgZVixhZcNMsWqJjf1hJydXFjQNlrPTbUDU5bUxC+wQlqWvU v8iRSRzKKfqXE9p5CsxScKh2MwjaCS3VNtiPquhVyc4pkEiPQrJaVVdOl1RYw5co 8tExMlohRoJLT10DuE/LGCSut4hrUEtFm1FNMovkkygbokViN2h4l4W3+/YmPM5P XWf6+AffiRdU4DtxccGHFSwS0azcXd+yLRD6YDllfoN5fYcU+i3YiCJBSeM/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWplpQHzQnwToc3gH+RTU03w1yo0wHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcor+DANBgkqhkiG 9w0BAQsFAAOCAQEAKHf8dk5104SFBDqij+UsjtQTWLgtK6FfSbt4X4WRDBnm3WWd mB0psB7/U18wdwwxrlTZdCGZ1OH/97xpjK/qbbKhDk18YQlA/bzXYBF3OwKDbzEw elJbHdXA62JkMHwtlRIj9J6zgEZM8btHFfOTAOv6U4hozAyZk7WdWb4Gdog52EeH rcznd4JkTD/SqYuFiEqJtW0W0UIrYbsCQTUjxEzPTM9sfKPTl8hwdtxHy9Ffm5aR wM91z6mHlx6myFGX1cK5Y/1tsevmfVLvlDxbJJoyks4QH0g2chO8UySmJU9Q0AHk 5LibyC8RBY6R5J9QbcadmdUWgrBsSkwymQrLHw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:00 2025 by rpki-client