This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa File: 3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa (raw, json) Hash identifier: 6GuT0WNGNAuW+mMwzOZfOwnrZJiyz2WtE/5vgADo9MY= Subject key identifier: 3E:F4:F1:C8:91:FD:32:83:ED:27:97:7E:86:37:B4:CE:6C:39:85:DC Certificate issuer: /CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Certificate serial: 2D21BED99DAEDD1220ABFE73A966E27C1BDB3330 Authority key identifier: C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa Signing time: Mon 01 Dec 2025 02:00:02 +0000 ROA not before: Mon 01 Dec 2025 01:55:02 +0000 ROA not after: Mon 30 Nov 2026 02:00:02 +0000 asID: 138074 IP address blocks: 202.43.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:be:d9:9d:ae:dd:12:20:ab:fe:73:a9:66:e2:7c:1b:db:33:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8EC18E027639B05BC58A2228D126486BEFB3ABB Validity Not Before: Dec 1 01:55:02 2025 GMT Not After : Nov 30 02:00:02 2026 GMT Subject: CN=3EF4F1C891FD3283ED27977E8637B4CE6C3985DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:51:ae:70:27:fd:90:86:ea:91:64:5b:a9: a7:31:f2:a2:67:8c:6f:bd:ce:6b:d6:be:3f:2b:3c: 21:23:ae:4b:0c:d4:90:aa:49:90:8b:00:84:99:4b: 22:55:f9:72:60:a6:65:20:60:28:eb:cf:eb:63:d4: 3b:4e:42:b8:5d:7d:36:7e:4b:ec:fd:5f:0e:61:12: 17:ac:77:ea:3a:0c:35:2d:e9:f1:88:52:6a:2e:cb: 57:c7:2a:9e:50:d0:59:22:c1:4c:69:a7:8b:da:4b: 39:06:ff:e5:92:df:cf:64:b6:af:bf:9e:f4:19:85: 33:8f:9e:44:55:e2:85:54:ad:1e:b9:e2:3a:1a:7c: b7:b8:da:4e:01:a5:1d:82:77:f3:64:e3:ea:b7:83: 99:74:dc:35:aa:c0:11:30:3f:1c:c4:68:48:26:00: 33:2e:23:cf:9a:be:89:7e:e5:d2:de:e6:57:e4:1c: a0:23:5d:bd:52:c4:c8:de:fe:93:91:64:04:39:0a: d9:69:0c:9b:68:09:64:98:9d:dc:52:52:e7:f9:3a: 72:65:0f:a3:4e:82:be:54:58:d7:29:25:e2:2c:d6: 67:10:ff:31:03:f9:65:d7:25:e9:82:36:16:05:5b: b8:a4:2b:97:33:23:38:40:fc:00:62:aa:2f:7b:e7: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:F1:C8:91:FD:32:83:ED:27:97:7E:86:37:B4:CE:6C:39:85:DC X509v3 Authority Key Identifier: keyid:C8:EC:18:E0:27:63:9B:05:BC:58:A2:22:8D:12:64:86:BE:FB:3A:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/C8EC18E027639B05BC58A2228D126486BEFB3ABB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8EC18E027639B05BC58A2228D126486BEFB3ABB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c289706-a4f4-4e1f-9a6e-01c9c53cd8f9/0/3230322e34332e3235332e302f32342d3234203d3e20313338303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.253.0/24 Signature Algorithm: sha256WithRSAEncryption 93:32:20:f9:04:93:c8:d0:9c:79:b1:9f:e9:93:a3:19:6d:ce: d5:b6:cb:ab:be:35:37:53:8c:56:77:cb:50:b8:c1:86:d7:63: ac:86:68:29:b7:ee:3c:da:a1:23:5a:cf:ac:8d:60:49:7f:32: 1b:7e:59:a3:a2:3e:1f:c6:19:91:56:42:32:85:11:d7:93:f4: 4b:2f:c7:1d:4f:21:3b:e5:7e:ea:31:9b:08:e5:34:68:1b:d9: 0b:c6:83:5a:5c:33:73:85:7e:24:f7:1a:ce:a9:ef:76:d6:14: 49:7f:03:f6:2c:4b:30:3a:fd:fe:c0:8e:e4:51:12:3e:26:2d: ad:2a:4a:b1:65:94:43:08:19:76:ed:f1:32:81:5b:90:88:85: 90:2f:3f:b3:06:dd:31:a3:62:10:7a:f8:dc:5a:ba:49:a3:32: db:97:dd:57:2e:b8:06:12:91:9c:61:70:f5:7a:41:89:5e:9c: 1c:c9:37:7c:f0:a9:24:d0:79:d9:76:d8:71:52:43:c2:6b:ad: dd:90:89:d4:6f:a0:ef:10:e3:96:0e:a5:b7:6d:ce:5c:e1:f9: 4b:69:5d:93:30:3c:a1:fa:aa:5e:b7:6d:12:e2:07:d0:b2:be: e8:ed:7c:d0:1b:ff:21:fb:56:41:d8:6a:38:d7:c4:a5:23:0d: a5:fe:e4:bf -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULSG+2Z2u3RIgq/5zqWbifBvbMzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZC RUZCM0FCQjAeFw0yNTEyMDEwMTU1MDJaFw0yNjExMzAwMjAwMDJaMDMxMTAvBgNV BAMTKDNFRjRGMUM4OTFGRDMyODNFRDI3OTc3RTg2MzdCNENFNkMzOTg1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VFGucCf9kIbqkWRbqacx8qJn jG+9zmvWvj8rPCEjrksM1JCqSZCLAISZSyJV+XJgpmUgYCjrz+tj1DtOQrhdfTZ+ S+z9Xw5hEhesd+o6DDUt6fGIUmouy1fHKp5Q0FkiwUxpp4vaSzkG/+WS389ktq+/ nvQZhTOPnkRV4oVUrR654joafLe42k4BpR2Cd/Nk4+q3g5l03DWqwBEwPxzEaEgm ADMuI8+avol+5dLe5lfkHKAjXb1SxMje/pORZAQ5CtlpDJtoCWSYndxSUuf5OnJl D6NOgr5UWNcpJeIs1mcQ/zED+WXXJemCNhYFW7ikK5czIzhA/ABiqi975/F1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPvTxyJH9MoPtJ5d+hje0zmw5hdwwHwYDVR0j BBgwFoAUyOwY4CdjmwW8WKIijRJkhr77OrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzI4OTcwNi1hNGY0LTRlMWYtOWE2ZS0wMWM5YzUzY2Q4ZjkvMC9DOEVDMThFMDI3 NjM5QjA1QkM1OEEyMjI4RDEyNjQ4NkJFRkIzQUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhFQzE4RTAyNzYzOUIwNUJDNThBMjIyOEQxMjY0ODZCRUZC M0FCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjMjg5NzA2LWE0ZjQtNGUxZi05 YTZlLTAxYzljNTNjZDhmOS8wLzMyMzAzMjJlMzQzMzJlMzIzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiv9MA0GCSqG SIb3DQEBCwUAA4IBAQCTMiD5BJPI0Jx5sZ/pk6MZbc7VtsurvjU3U4xWd8tQuMGG 12Oshmgpt+482qEjWs+sjWBJfzIbflmjoj4fxhmRVkIyhRHXk/RLL8cdTyE75X7q MZsI5TRoG9kLxoNaXDNzhX4k9xrOqe921hRJfwP2LEswOv3+wI7kURI+Ji2tKkqx ZZRDCBl27fEygVuQiIWQLz+zBt0xo2IQevjcWrpJozLbl91XLrgGEpGcYXD1ekGJ XpwcyTd88Kkk0HnZdthxUkPCa63dkInUb6DvEOOWDqW3bc5c4flLaV2TMDyh+qpe t20S4gfQsr7o7XzQG/8h+1ZB2Go418SlIw2l/uS/ -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:25 2025 by rpki-client