This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538353532.roa File: 34332e3234302e3233302e302f32342d3234203d3e203538353532.roa (raw, json) Hash identifier: eiewOhS4/DTAUFlr34iitL0eGEAbgISKf4GIVQFcunI= Subject key identifier: 4D:53:E9:EC:37:C5:F3:FC:54:B6:6C:46:CD:E0:0A:41:E4:0A:F7:30 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 068557A40095C077D8B5525CBB34A16F6C634B48 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538353532.roa Signing time: Thu 13 Nov 2025 04:00:00 +0000 ROA not before: Thu 13 Nov 2025 03:55:00 +0000 ROA not after: Thu 12 Nov 2026 04:00:00 +0000 asID: 58552 IP address blocks: 43.240.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:85:57:a4:00:95:c0:77:d8:b5:52:5c:bb:34:a1:6f:6c:63:4b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 13 03:55:00 2025 GMT Not After : Nov 12 04:00:00 2026 GMT Subject: CN=4D53E9EC37C5F3FC54B66C46CDE00A41E40AF730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9c:96:29:c9:47:f7:c8:d7:cd:53:3c:0f:09: 28:55:d3:f7:d9:2f:e9:26:9a:9b:6c:ef:35:8e:cf: dc:93:a0:ad:73:9f:ca:03:4a:ba:5c:ba:9d:5c:e5: 5b:a2:de:6e:e5:e6:53:f4:b0:98:fe:16:6d:ad:e5: 53:a1:b0:0a:3f:98:dc:d6:71:d2:9b:04:b1:d0:40: 81:c2:f4:e8:98:b5:af:20:36:db:51:d0:e7:61:ea: 34:13:cf:03:80:d2:22:35:54:93:a9:ab:71:f8:65: 47:a1:1d:4a:50:88:70:5c:87:d6:85:ae:76:e0:9b: ef:6a:d7:36:e0:84:bb:8e:df:51:52:39:2e:4a:40: af:58:79:12:92:2a:bc:34:a9:03:60:0f:c8:b0:3f: 37:1e:89:7b:0f:de:9a:38:f6:4d:ad:cd:8d:9f:31: 7b:bb:63:4e:44:fa:2f:b2:b6:7b:d3:54:82:fe:15: 3e:85:57:b7:b8:57:1d:d6:14:66:a7:7d:5c:7b:b9: c0:99:51:79:a5:85:73:61:00:04:51:c3:01:f0:1a: c4:36:aa:d8:11:d8:88:aa:68:60:a2:7c:86:63:96: f7:47:67:cf:dd:cd:3b:c2:83:77:84:ee:d2:c2:3b: 4f:ce:1d:e1:d4:34:84:88:88:de:f2:7b:90:15:6c: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:53:E9:EC:37:C5:F3:FC:54:B6:6C:46:CD:E0:0A:41:E4:0A:F7:30 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/34332e3234302e3233302e302f32342d3234203d3e203538353532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.230.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:8e:7d:52:24:e8:dc:df:bf:71:aa:73:ab:9d:a9:3c:80:0e: 71:02:bf:14:2e:30:cd:40:30:a6:82:82:05:f7:45:04:07:f0: 8a:63:28:1d:5c:68:bb:0a:fc:57:1a:d5:3f:9f:11:ff:73:00: 48:a6:9a:cf:c7:4b:e6:b7:5e:28:f7:ec:03:c3:c2:1e:d5:51: df:75:1f:30:b5:3b:06:a0:6e:a7:6a:70:bc:f7:b6:ef:ac:e3: 83:23:02:af:a9:8c:78:fe:b1:33:1c:b9:08:8f:3f:25:07:a1: be:3f:a2:7b:d8:45:79:cf:23:7b:0a:34:fe:d7:ff:1b:8d:3d: 31:2b:2f:a1:ba:e5:27:45:1c:32:c5:1b:60:c4:b4:dd:7a:0e: ad:b6:8c:68:b4:48:10:bd:bf:fa:ef:96:6b:62:09:80:e0:a4: df:65:41:4a:e0:69:48:c8:d8:ca:e0:38:77:52:d0:88:af:0a: 7b:2c:1b:6a:67:65:3e:9a:1d:6e:6e:a9:4a:d9:75:0a:c9:f0: 5a:bf:e4:09:53:82:19:66:9c:d0:05:f1:2f:eb:71:51:0f:1d: 0d:32:d5:8f:17:0e:c1:6c:55:af:63:04:49:61:c0:21:4e:f2: bb:ec:bc:b1:32:ef:b3:7a:1d:50:f5:19:17:41:2e:c4:55:47: af:37:c0:62 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBoVXpACVwHfYtVJcuzShb2xjS0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTExMTMwMzU1MDBaFw0yNjExMTIwNDAwMDBaMDMxMTAvBgNV BAMTKDRENTNFOUVDMzdDNUYzRkM1NEI2NkM0NkNERTAwQTQxRTQwQUY3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnJYpyUf3yNfNUzwPCShV0/fZ L+kmmpts7zWOz9yToK1zn8oDSrpcup1c5Vui3m7l5lP0sJj+Fm2t5VOhsAo/mNzW cdKbBLHQQIHC9OiYta8gNttR0Odh6jQTzwOA0iI1VJOpq3H4ZUehHUpQiHBch9aF rnbgm+9q1zbghLuO31FSOS5KQK9YeRKSKrw0qQNgD8iwPzceiXsP3po49k2tzY2f MXu7Y05E+i+ytnvTVIL+FT6FV7e4Vx3WFGanfVx7ucCZUXmlhXNhAARRwwHwGsQ2 qtgR2IiqaGCifIZjlvdHZ8/dzTvCg3eE7tLCO0/OHeHUNISIiN7ye5AVbCUHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTVPp7DfF8/xUtmxGzeAKQeQK9zAwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzM0MzMyZTMyMzQzMDJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw5jANBgkqhkiG 9w0BAQsFAAOCAQEAWo59UiTo3N+/capzq52pPIAOcQK/FC4wzUAwpoKCBfdFBAfw imMoHVxouwr8VxrVP58R/3MASKaaz8dL5rdeKPfsA8PCHtVR33UfMLU7BqBup2pw vPe276zjgyMCr6mMeP6xMxy5CI8/JQehvj+ie9hFec8jewo0/tf/G409MSsvobrl J0UcMsUbYMS03XoOrbaMaLRIEL2/+u+Wa2IJgOCk32VBSuBpSMjYyuA4d1LQiK8K eywbamdlPpodbm6pStl1CsnwWr/kCVOCGWac0AXxL+txUQ8dDTLVjxcOwWxVr2ME SWHAIU7yu+y8sTLvs3odUPUZF0EuxFVHrzfAYg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:39:43 2025 by rpki-client