This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa File: 3230322e34332e37342e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: i+PnRRnUxlVeVQWYK+xvxmyT3h6ABZPSD9MUCiKy2nc= Subject key identifier: A2:33:65:B1:DD:0D:32:B8:B2:A6:45:2D:99:96:0E:58:E0:7A:3C:85 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 6D8038A6C9F7DC633EA54A6E161889BB3D814151 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa Signing time: Mon 22 Dec 2025 04:14:34 +0000 ROA not before: Mon 22 Dec 2025 04:09:34 +0000 ROA not after: Mon 21 Dec 2026 04:14:34 +0000 asID: 45298 IP address blocks: 202.43.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:80:38:a6:c9:f7:dc:63:3e:a5:4a:6e:16:18:89:bb:3d:81:41:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Dec 22 04:09:34 2025 GMT Not After : Dec 21 04:14:34 2026 GMT Subject: CN=A23365B1DD0D32B8B2A6452D99960E58E07A3C85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:b7:18:6e:80:73:55:5d:40:e2:99:1f:23: e0:5e:f4:b5:be:ee:d7:74:cb:76:4e:8f:f5:d0:67: 99:05:3d:bf:b7:b4:87:57:e3:4c:d2:d1:58:e9:98: 26:26:8f:7c:b4:5d:1e:f8:56:85:ed:3a:b2:86:fe: de:fc:a4:4f:61:11:6b:aa:46:c1:e2:05:71:9f:72: c9:e4:c1:e6:6a:4b:99:1d:ab:74:3b:7d:b3:e1:58: 7b:63:ac:2c:1c:48:05:9c:84:ce:bb:74:51:8c:ef: af:fd:15:be:ca:52:02:dc:11:63:5a:06:98:7b:03: 2a:de:de:2b:a3:10:37:ed:05:97:f3:08:ad:af:28: 53:d0:ff:a1:aa:0c:46:44:1d:ff:46:47:28:72:24: 7c:63:44:83:22:c9:64:a3:5d:c4:5b:78:05:ba:11: ae:61:3f:e0:d0:96:74:eb:62:c7:ce:93:26:f6:f9: ca:5c:73:dc:47:0d:39:09:1c:1d:48:7e:ea:1f:45: 24:47:1d:c8:38:16:75:f6:f5:82:2d:92:49:9d:43: 29:18:6e:71:36:29:9f:48:88:a1:bc:dd:26:9a:3e: 68:f1:27:82:97:03:6c:3a:d8:4a:48:19:d4:53:4b: f3:8c:26:ce:d8:bf:43:77:95:34:ef:66:7b:a3:cf: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:33:65:B1:DD:0D:32:B8:B2:A6:45:2D:99:96:0E:58:E0:7A:3C:85 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37342e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.74.0/24 Signature Algorithm: sha256WithRSAEncryption 79:be:10:a8:31:af:34:30:ab:f6:16:d5:15:23:cd:29:dd:e5: 10:14:88:f8:ed:d2:cd:d1:ac:09:6f:14:1e:5b:d1:e1:fa:81: 2d:2a:73:ca:8e:a8:7e:1a:6d:6d:20:1c:65:7a:ca:77:6a:b7: 31:8b:7d:4c:52:46:19:11:90:ef:66:a0:20:91:eb:c3:ee:86: e4:ed:a8:23:6e:10:7b:a5:95:b5:4b:c6:42:b2:37:fe:b9:16: f5:7c:f1:50:63:8f:26:a6:28:21:3e:a1:08:62:fb:bf:b8:49: 53:7d:62:2b:a4:b0:89:ec:a6:34:76:75:79:12:2f:3c:b3:b0: 2b:e9:38:26:4a:17:13:27:b8:d3:0d:3e:a1:81:43:89:d0:9e: 11:59:76:8a:ac:c9:39:82:34:fd:19:c7:df:e6:fa:c4:8b:a7: 19:a6:db:96:a5:8f:13:f5:b7:bb:2a:37:39:69:53:c6:85:87: 11:97:9f:5b:e0:4b:ab:a2:6f:46:7f:90:20:ee:d6:16:1d:b2: a7:27:a7:5a:6d:c7:91:f3:6f:16:c3:31:27:74:72:5d:59:1f: 6f:09:ba:e6:06:c8:67:e5:a8:c8:42:20:1e:bb:5f:64:a4:3a: 66:ea:04:a6:38:c6:6d:74:af:1e:a8:e6:ea:33:bb:82:a4:39: de:9d:b1:7d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbYA4psn33GM+pUpuFhiJuz2BQVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTEyMjIwNDA5MzRaFw0yNjEyMjEwNDE0MzRaMDMxMTAvBgNV BAMTKEEyMzM2NUIxREQwRDMyQjhCMkE2NDUyRDk5OTYwRTU4RTA3QTNDODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+bcYboBzVV1A4pkfI+Be9LW+ 7td0y3ZOj/XQZ5kFPb+3tIdX40zS0VjpmCYmj3y0XR74VoXtOrKG/t78pE9hEWuq RsHiBXGfcsnkweZqS5kdq3Q7fbPhWHtjrCwcSAWchM67dFGM76/9Fb7KUgLcEWNa Bph7Ayre3iujEDftBZfzCK2vKFPQ/6GqDEZEHf9GRyhyJHxjRIMiyWSjXcRbeAW6 Ea5hP+DQlnTrYsfOkyb2+cpcc9xHDTkJHB1IfuofRSRHHcg4FnX29YItkkmdQykY bnE2KZ9IiKG83SaaPmjxJ4KXA2w62EpIGdRTS/OMJs7Yv0N3lTTvZnujz00tAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUojNlsd0NMriypkUtmZYOWOB6PIUwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMjJlMzQzMzJlMzczNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKK0owDQYJKoZIhvcN AQELBQADggEBAHm+EKgxrzQwq/YW1RUjzSnd5RAUiPjt0s3RrAlvFB5b0eH6gS0q c8qOqH4abW0gHGV6yndqtzGLfUxSRhkRkO9moCCR68PuhuTtqCNuEHullbVLxkKy N/65FvV88VBjjyamKCE+oQhi+7+4SVN9YiuksInspjR2dXkSLzyzsCvpOCZKFxMn uNMNPqGBQ4nQnhFZdoqsyTmCNP0Zx9/m+sSLpxmm25aljxP1t7sqNzlpU8aFhxGX n1vgS6uib0Z/kCDu1hYdsqcnp1ptx5HzbxbDMSd0cl1ZH28JuuYGyGflqMhCIB67 X2SkOmbqBKY4xm10rx6o5uozu4KkOd6dsX0= -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:08 2026 by rpki-client