This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa File: 3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa (raw, json) Hash identifier: 1WAoh5v9d8rC8fqVeLw6nNayKELevNDEFJOm+pz5qiE= Subject key identifier: 00:C3:01:71:38:D6:D1:CE:6C:41:2A:06:D2:1D:04:99:90:8C:6E:85 Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 59560198E805993DF2905D6A34BCD46AC7FD24B0 Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa Signing time: Fri 07 Nov 2025 10:00:01 +0000 ROA not before: Fri 07 Nov 2025 09:55:01 +0000 ROA not after: Fri 06 Nov 2026 10:00:01 +0000 asID: 141607 IP address blocks: 202.154.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:56:01:98:e8:05:99:3d:f2:90:5d:6a:34:bc:d4:6a:c7:fd:24:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Nov 7 09:55:01 2025 GMT Not After : Nov 6 10:00:01 2026 GMT Subject: CN=00C3017138D6D1CE6C412A06D21D0499908C6E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:6e:39:1f:d6:03:9a:d9:03:20:66:d8:57: 3a:5a:b8:c6:a3:55:f5:a0:77:aa:f9:3a:06:40:93: dc:4d:29:4a:1e:15:fc:0a:fc:bc:62:a5:f5:8b:57: 48:88:ca:9d:e8:f8:5f:fd:1d:5c:31:da:ee:59:5e: b9:35:93:c6:a3:62:46:a2:9a:25:21:24:0f:62:db: 32:fa:43:2c:13:85:68:d9:2c:d9:71:ac:c4:bf:98: e8:5c:b8:a3:51:71:6d:61:55:77:f8:82:d1:79:b6: 69:06:8b:99:eb:c6:2b:12:9b:9c:e6:bb:46:4b:aa: 72:d3:8c:a0:70:ce:dd:11:8e:3a:ab:ad:12:41:98: 7f:a3:f2:89:8a:6b:e1:9a:40:06:6d:51:37:5a:cb: 15:38:8b:c4:75:76:3f:6a:94:e3:56:54:69:57:02: ea:14:b8:04:d8:c5:9a:a2:fb:32:f3:aa:28:b4:10: 8e:19:62:40:1c:90:2e:0d:83:27:92:76:0a:73:86: 43:e9:0f:d5:08:a7:93:a4:53:5f:39:5f:bf:66:63: d2:6a:e9:cf:38:20:e3:6a:84:e9:37:15:14:e2:8f: 7d:7e:49:12:d6:13:07:12:07:63:3a:81:b7:65:51: 93:15:a4:14:d3:aa:1b:d6:e6:1b:1a:b6:ac:c8:07: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C3:01:71:38:D6:D1:CE:6C:41:2A:06:D2:1D:04:99:90:8C:6E:85 X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e33362e302f32332d3234203d3e20313431363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.36.0/23 Signature Algorithm: sha256WithRSAEncryption 63:e6:75:2b:cd:a9:cc:10:7a:de:11:26:6c:f3:5c:f0:15:ba: 08:79:30:06:30:14:0f:a0:05:43:99:eb:e7:ce:6b:0a:8d:0b: eb:f9:4d:d7:50:0e:b4:a6:55:a6:ff:4a:10:9c:7c:2d:3d:99: 99:cb:43:b6:7a:c5:33:8e:e4:20:59:93:2a:4d:a2:11:20:cd: 3b:08:83:53:b0:8f:25:53:aa:24:59:31:ed:20:24:1e:21:02: 35:c5:b9:3e:e8:f3:15:a5:42:b3:a0:bd:29:f0:d7:3c:81:2a: c3:34:6e:66:65:c9:b2:cb:d6:82:f1:76:07:8e:b7:bb:9d:15: bd:b4:9a:cd:8a:44:9c:9e:90:e3:a7:dd:fc:4a:fd:cd:80:57: 04:15:be:1c:0a:c3:54:45:46:c6:31:12:4e:80:41:51:61:12: bd:ab:b6:43:3f:bb:e9:d8:d9:29:9e:fc:0d:bc:37:2f:f0:41: 01:77:15:b5:f5:4d:57:0a:61:67:2f:46:52:af:f0:61:3b:fb: 02:61:ec:63:d8:35:b1:de:cf:30:6b:f6:10:7c:61:19:9a:06: a3:42:f8:81:fa:dd:7b:ab:e8:19:30:36:83:79:27:2e:4a:4c: 24:99:2b:e1:fe:fc:92:7e:8a:15:f7:31:d1:d6:52:bf:86:85: b7:4e:20:03 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWVYBmOgFmT3ykF1qNLzUasf9JLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTExMDcwOTU1MDFaFw0yNjExMDYxMDAwMDFaMDMxMTAvBgNV BAMTKDAwQzMwMTcxMzhENkQxQ0U2QzQxMkEwNkQyMUQwNDk5OTA4QzZFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfyW45H9YDmtkDIGbYVzpauMaj VfWgd6r5OgZAk9xNKUoeFfwK/LxipfWLV0iIyp3o+F/9HVwx2u5ZXrk1k8ajYkai miUhJA9i2zL6QywThWjZLNlxrMS/mOhcuKNRcW1hVXf4gtF5tmkGi5nrxisSm5zm u0ZLqnLTjKBwzt0RjjqrrRJBmH+j8omKa+GaQAZtUTdayxU4i8R1dj9qlONWVGlX AuoUuATYxZqi+zLzqii0EI4ZYkAckC4NgyeSdgpzhkPpD9UIp5OkU185X79mY9Jq 6c84IONqhOk3FRTij31+SRLWEwcSB2M6gbdlUZMVpBTTqhvW5hsatqzIB04hAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAMMBcTjW0c5sQSoG0h0EmZCMboUwHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBypokMA0GCSqG SIb3DQEBCwUAA4IBAQBj5nUrzanMEHreESZs81zwFboIeTAGMBQPoAVDmevnzmsK jQvr+U3XUA60plWm/0oQnHwtPZmZy0O2esUzjuQgWZMqTaIRIM07CINTsI8lU6ok WTHtICQeIQI1xbk+6PMVpUKzoL0p8Nc8gSrDNG5mZcmyy9aC8XYHjre7nRW9tJrN ikScnpDjp938Sv3NgFcEFb4cCsNURUbGMRJOgEFRYRK9q7ZDP7vp2NkpnvwNvDcv 8EEBdxW19U1XCmFnL0ZSr/BhO/sCYexj2DWx3s8wa/YQfGEZmgajQviB+t17q+gZ MDaDeScuSkwkmSvh/vySfooV9zHR1lK/hoW3TiAD -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:29 2025 by rpki-client