This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa File: 3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa (raw, json) Hash identifier: 1buHOMlubpPb1vK9bmP2byXKlPQ3RocJRoJnWCufqIM= Subject key identifier: 09:BE:C5:DF:41:87:CE:C6:B4:73:61:B1:B5:48:19:34:B4:8B:7B:02 Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 7C6791E498C24ED41F51BEC98238684CEA85A368 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa Signing time: Mon 01 Dec 2025 03:00:02 +0000 ROA not before: Mon 01 Dec 2025 02:55:02 +0000 ROA not after: Mon 30 Nov 2026 03:00:02 +0000 asID: 138074 IP address blocks: 202.43.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:91:e4:98:c2:4e:d4:1f:51:be:c9:82:38:68:4c:ea:85:a3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: Dec 1 02:55:02 2025 GMT Not After : Nov 30 03:00:02 2026 GMT Subject: CN=09BEC5DF4187CEC6B47361B1B5481934B48B7B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b2:be:17:3b:c3:e8:8a:e4:28:0e:04:1e:41: 80:29:98:ff:76:61:59:3a:ab:68:d5:25:5f:62:d8: 3b:57:b4:8a:ee:98:50:51:99:85:73:36:a5:a0:ed: 1c:f4:1f:ff:4c:6d:ab:18:b8:1c:ad:02:92:75:b4: 7a:5f:95:5b:b5:1c:63:a6:20:36:30:07:1f:00:95: e9:18:87:6e:93:ad:54:7c:ea:e9:c3:d9:a0:5b:6f: fc:3d:f9:35:96:1c:d7:15:72:3e:46:02:bb:89:26: be:0c:e2:f6:ff:dc:8b:80:02:b6:ea:5c:8a:3e:2b: f7:80:16:f8:aa:91:d6:a1:45:8f:c7:36:8a:95:b3: f7:ac:d3:cc:19:ab:28:7a:20:d9:65:ad:7c:e5:87: 31:f5:b3:39:74:6a:a9:4e:9b:72:c9:e3:31:90:c8: 5f:b9:2d:11:1f:11:8f:67:99:55:dc:72:d7:2e:e4: d8:97:96:dd:21:fe:e2:91:10:7b:c0:2c:f0:58:47: 70:e3:3f:c3:10:4b:9c:c7:b2:5e:69:03:e4:bd:8f: 70:7c:01:d4:70:62:e4:f0:ac:36:c5:9c:00:c8:12: cb:b7:20:a6:9c:6f:aa:45:6f:3e:79:aa:15:27:b3: 9a:8c:24:f1:98:ac:5d:97:72:a7:8a:4a:37:b3:55: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BE:C5:DF:41:87:CE:C6:B4:73:61:B1:B5:48:19:34:B4:8B:7B:02 X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235302e302f32342d3234203d3e20313338303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.250.0/24 Signature Algorithm: sha256WithRSAEncryption 51:00:f4:1c:ed:58:51:fb:f2:ab:c0:ff:af:ba:8d:24:13:e5: 5b:27:2a:81:ed:50:94:d7:7e:de:30:05:f8:4f:2f:55:63:3e: a1:96:10:a4:ff:9f:3f:8a:24:a6:f1:c2:ea:2b:8e:a2:24:7d: 40:a5:b9:5f:1f:e7:b0:d9:3d:8c:80:e7:cb:6e:83:fb:6e:64: 14:6e:3b:21:25:cb:49:ef:a1:4b:94:8b:6b:35:1a:f3:5a:72: 21:20:d1:06:51:4c:65:25:92:38:d8:a9:3e:a7:35:ad:3c:a6: 3c:45:9d:0c:06:23:b5:db:55:e8:ae:0c:c8:a5:9c:62:b2:60: cf:5b:0d:b7:06:0e:87:cc:94:32:46:26:7b:70:e6:44:e5:21: ca:db:24:6d:ef:a0:39:72:92:8b:7b:4c:70:8c:ca:a0:ab:a7: b9:00:27:ca:b9:7f:2d:44:6b:32:cd:2a:aa:5a:38:6b:25:43: 69:10:56:fe:9d:67:b4:dd:c1:f5:af:90:1b:87:58:b5:ec:28: af:36:c7:13:86:23:88:b2:fb:11:93:08:71:c0:2e:ac:4a:8b: d2:c3:1f:75:87:6e:f4:f3:d0:77:f2:8f:4c:39:9a:59:89:ff: 69:87:bc:9a:7c:99:50:c1:72:04:73:9c:82:4f:41:56:8e:84: 3a:9b:b6:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfGeR5JjCTtQfUb7JgjhoTOqFo2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTEyMDEwMjU1MDJaFw0yNjExMzAwMzAwMDJaMDMxMTAvBgNV BAMTKDA5QkVDNURGNDE4N0NFQzZCNDczNjFCMUI1NDgxOTM0QjQ4QjdCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sr4XO8PoiuQoDgQeQYApmP92 YVk6q2jVJV9i2DtXtIrumFBRmYVzNqWg7Rz0H/9MbasYuBytApJ1tHpflVu1HGOm IDYwBx8AlekYh26TrVR86unD2aBbb/w9+TWWHNcVcj5GAruJJr4M4vb/3IuAArbq XIo+K/eAFviqkdahRY/HNoqVs/es08wZqyh6INllrXzlhzH1szl0aqlOm3LJ4zGQ yF+5LREfEY9nmVXcctcu5NiXlt0h/uKREHvALPBYR3DjP8MQS5zHsl5pA+S9j3B8 AdRwYuTwrDbFnADIEsu3IKacb6pFbz55qhUns5qMJPGYrF2XcqeKSjezVdkjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCb7F30GHzsa0c2GxtUgZNLSLewIwHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiv6MA0GCSqG SIb3DQEBCwUAA4IBAQBRAPQc7VhR+/KrwP+vuo0kE+VbJyqB7VCU137eMAX4Ty9V Yz6hlhCk/58/iiSm8cLqK46iJH1ApblfH+ew2T2MgOfLboP7bmQUbjshJctJ76FL lItrNRrzWnIhINEGUUxlJZI42Kk+pzWtPKY8RZ0MBiO121XorgzIpZxismDPWw23 Bg6HzJQyRiZ7cOZE5SHK2yRt76A5cpKLe0xwjMqgq6e5ACfKuX8tRGsyzSqqWjhr JUNpEFb+nWe03cH1r5Abh1i17CivNscThiOIsvsRkwhxwC6sSovSwx91h27089B3 8o9MOZpZif9ph7yafJlQwXIEc5yCT0FWjoQ6m7bR -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:50 2025 by rpki-client