This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa File: 3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa (raw, json) Hash identifier: Q1wQYF2XtInj2d/t3tW21h1V//UQoT/xphWVYkOXt/o= Subject key identifier: 54:81:B7:A8:7D:F6:3A:3F:11:9B:16:91:38:DA:12:4D:23:A9:D5:20 Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 31AD499119F5162C2F8E6E733A359CBE4FF9F1E2 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa Signing time: Mon 01 Dec 2025 03:00:02 +0000 ROA not before: Mon 01 Dec 2025 02:55:02 +0000 ROA not after: Mon 30 Nov 2026 03:00:02 +0000 asID: 138074 IP address blocks: 202.43.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ad:49:91:19:f5:16:2c:2f:8e:6e:73:3a:35:9c:be:4f:f9:f1:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: Dec 1 02:55:02 2025 GMT Not After : Nov 30 03:00:02 2026 GMT Subject: CN=5481B7A87DF63A3F119B169138DA124D23A9D520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:e6:cc:36:19:df:fa:19:15:c1:b9:0b:e9: b0:e2:30:7e:27:be:0c:69:ef:49:95:24:e8:98:6f: 08:84:3a:ef:63:f2:99:e1:30:f5:72:2d:3c:d1:47: 7f:bf:43:5a:b5:80:49:8b:27:21:59:3c:1e:9e:86: 05:c4:4d:6a:a6:47:ad:79:e7:d1:5b:cb:77:ea:ab: 2f:98:53:6f:52:28:27:95:5e:e7:df:31:d2:90:f1: 92:34:42:7a:08:7c:31:da:a5:16:d8:8d:33:34:a7: 67:9d:ac:bc:51:7f:c0:e5:7c:59:9b:92:14:1f:89: 8f:7d:b5:fe:43:d8:51:84:36:24:de:d7:ac:88:f4: 45:c1:96:32:25:a4:a5:3d:53:ea:95:61:31:c7:b4: 65:90:fc:c8:f7:82:14:50:05:79:04:36:fd:5d:39: 71:10:d3:d1:16:3d:11:fa:d4:d2:9a:53:a9:ee:08: 0d:b0:94:30:40:b1:c1:13:a7:ee:fe:10:5b:20:ba: 4d:db:0e:33:c3:bb:11:0a:0f:66:3e:1a:63:54:5c: d1:e5:cf:9a:7b:28:96:10:c8:e5:e2:b9:d5:15:e6: 69:de:c8:a9:17:9c:ec:7d:1c:cb:b0:d4:91:f3:1d: 7d:ea:29:eb:dd:92:3c:6e:ca:45:c6:4b:30:60:4c: 33:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:81:B7:A8:7D:F6:3A:3F:11:9B:16:91:38:DA:12:4D:23:A9:D5:20 X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235312e302f32342d3234203d3e20313338303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.251.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:60:87:4a:10:60:79:82:30:95:c9:61:54:f7:eb:9e:25:9d: bd:f9:67:c7:1b:d8:ac:89:42:b7:8a:20:91:fd:60:ca:f9:5e: 74:35:9f:3a:49:39:51:0f:cd:82:8b:da:4c:cd:95:9c:a8:c6: b8:e0:9d:82:29:47:76:c3:c9:96:f7:da:ab:b4:48:0b:df:e5: f5:ca:60:d4:37:12:a4:a1:a3:26:fe:54:3f:63:6f:c0:bf:65: de:67:23:a3:91:f1:ee:2f:65:35:8a:92:3b:b3:fa:f5:17:95: 3e:cd:3b:bf:9a:11:e6:85:53:c9:5b:7e:89:d9:ca:96:25:ec: de:b2:56:84:d5:ac:54:63:12:53:1c:1a:a5:f4:f2:b9:62:21: 2b:a5:e5:9c:aa:19:b1:d0:e3:1f:3e:1b:47:b0:52:86:6d:e9: ff:21:8e:65:b4:81:05:8b:28:ba:e8:31:06:46:6a:0f:2a:10: 77:8b:9d:8b:53:70:88:92:ab:af:eb:a1:6d:a3:e5:15:41:cd: bb:cd:9f:09:e4:38:ec:61:0a:2e:d2:00:96:84:f5:a6:c7:05: 57:36:95:3e:fe:b2:7d:17:74:b8:72:ff:51:22:fd:57:f9:eb: 09:07:ce:03:74:17:1f:8b:34:c4:54:c1:04:50:1a:7b:21:95: 39:40:f6:72 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMa1JkRn1Fiwvjm5zOjWcvk/58eIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTEyMDEwMjU1MDJaFw0yNjExMzAwMzAwMDJaMDMxMTAvBgNV BAMTKDU0ODFCN0E4N0RGNjNBM0YxMTlCMTY5MTM4REExMjREMjNBOUQ1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLObMNhnf+hkVwbkL6bDiMH4n vgxp70mVJOiYbwiEOu9j8pnhMPVyLTzRR3+/Q1q1gEmLJyFZPB6ehgXETWqmR615 59Fby3fqqy+YU29SKCeVXuffMdKQ8ZI0QnoIfDHapRbYjTM0p2edrLxRf8DlfFmb khQfiY99tf5D2FGENiTe16yI9EXBljIlpKU9U+qVYTHHtGWQ/Mj3ghRQBXkENv1d OXEQ09EWPRH61NKaU6nuCA2wlDBAscETp+7+EFsguk3bDjPDuxEKD2Y+GmNUXNHl z5p7KJYQyOXiudUV5mneyKkXnOx9HMuw1JHzHX3qKevdkjxuykXGSzBgTDN9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVIG3qH32Oj8RmxaRONoSTSOp1SAwHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiv7MA0GCSqG SIb3DQEBCwUAA4IBAQAqYIdKEGB5gjCVyWFU9+ueJZ29+WfHG9isiUK3iiCR/WDK +V50NZ86STlRD82Ci9pMzZWcqMa44J2CKUd2w8mW99qrtEgL3+X1ymDUNxKkoaMm /lQ/Y2/Av2XeZyOjkfHuL2U1ipI7s/r1F5U+zTu/mhHmhVPJW36J2cqWJezeslaE 1axUYxJTHBql9PK5YiErpeWcqhmx0OMfPhtHsFKGben/IY5ltIEFiyi66DEGRmoP KhB3i52LU3CIkquv66Fto+UVQc27zZ8J5DjsYQou0gCWhPWmxwVXNpU+/rJ9F3S4 cv9RIv1X+esJB84DdBcfizTEVMEEUBp7IZU5QPZy -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:39 2025 by rpki-client