This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e20313337333633.roa File: 3230322e34332e37352e302f32342d3234203d3e20313337333633.roa (raw, json) Hash identifier: nk9CeskmOhQC6XjBRgYhclCRJwtujNj/cQR4XOqGRuQ= Subject key identifier: 97:DA:A4:9A:30:1A:0D:8B:4D:19:2C:CC:AA:EE:95:CA:FD:9E:73:04 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 0664D835029DF523A69E236C769F1D57BA37B85C Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e20313337333633.roa Signing time: Wed 24 Dec 2025 02:23:51 +0000 ROA not before: Wed 24 Dec 2025 02:18:51 +0000 ROA not after: Wed 23 Dec 2026 02:23:51 +0000 asID: 137363 IP address blocks: 202.43.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:64:d8:35:02:9d:f5:23:a6:9e:23:6c:76:9f:1d:57:ba:37:b8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Dec 24 02:18:51 2025 GMT Not After : Dec 23 02:23:51 2026 GMT Subject: CN=97DAA49A301A0D8B4D192CCCAAEE95CAFD9E7304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9d:ff:b0:d5:b9:9c:94:42:3e:e5:9f:e3:6b: ec:bd:3d:c1:5e:8a:38:0c:a3:b6:bb:46:b3:ef:34: 72:f0:b5:65:dc:4f:ba:de:83:81:89:70:f8:9d:65: 32:14:8c:6a:ea:65:b4:a9:fa:54:c3:ce:8d:21:fd: d8:cf:f5:ac:b5:f3:b0:bc:c8:47:82:49:62:c6:6c: 57:88:61:96:2d:45:0b:f4:dd:13:0c:89:e8:56:23: bb:80:32:ea:5a:f7:93:60:71:09:09:34:39:7e:a6: ac:a8:57:85:de:87:e4:5e:6b:0f:a9:3e:4c:89:56: ff:46:56:56:6e:ba:50:46:8e:07:98:a5:5a:e1:85: 38:d4:cf:5a:a7:bd:59:70:8b:ba:73:c9:60:3a:db: 03:ea:50:ba:7f:a3:03:e7:eb:fe:db:05:a9:c3:06: 82:b7:1d:c9:16:cd:57:02:f5:8a:e0:a5:f0:3f:d7: 25:dc:e3:68:84:49:32:fd:70:ad:2c:20:16:31:2c: c0:67:be:d6:49:dd:09:24:bb:d3:73:7d:e6:1f:be: e7:a1:4c:bd:5c:82:a3:82:42:ff:8b:13:c3:8e:cc: df:6d:54:16:1e:15:ae:f1:16:85:50:fb:c1:6c:02: 8c:a4:73:dd:cd:25:f1:88:17:fa:f0:85:17:de:24: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:A4:9A:30:1A:0D:8B:4D:19:2C:CC:AA:EE:95:CA:FD:9E:73:04 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e20313337333633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.75.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:5c:b3:54:49:36:f4:10:f6:e5:7e:83:0d:cb:c8:4c:18:b3: d5:d2:e5:82:da:d9:7d:de:15:a0:5b:65:e7:22:dc:e3:03:5c: b1:9f:48:26:6c:84:b2:7d:d1:b7:0e:e9:a8:d0:b6:5b:22:32: 7b:5a:85:ca:af:65:13:93:5f:44:96:24:c7:8b:88:31:e3:ab: 33:f6:2f:5e:3c:b9:27:85:85:13:b4:98:f6:80:81:86:5c:13: c2:30:14:c7:06:49:3a:76:94:8d:66:bf:19:ab:ef:ef:d6:87: 4a:0f:da:8e:c6:90:64:75:a4:09:1c:47:a9:d4:a1:45:9e:28: c2:9a:e2:69:14:ba:76:05:52:0b:f7:38:13:fb:09:86:21:e5: fb:2f:7b:ff:f7:78:77:6f:0b:99:bb:ed:2d:f2:6b:24:fb:97: a9:fc:ea:e4:48:4e:55:82:ec:3d:f5:0c:49:3e:67:d2:9b:c7: 5e:81:c5:d9:bf:4a:6e:c8:38:9e:cc:40:07:9d:bf:92:8a:9a: 2a:ca:1f:56:74:90:4c:31:e6:d3:a3:18:67:65:a5:d6:5f:32: d4:bf:0c:61:fa:e4:c7:85:ed:40:6e:2e:b7:b1:02:81:cf:74: 0c:63:c5:97:fa:54:36:c5:3e:ca:48:9b:64:34:65:9c:d6:c4: 9a:ee:5f:80 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBmTYNQKd9SOmniNsdp8dV7o3uFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTEyMjQwMjE4NTFaFw0yNjEyMjMwMjIzNTFaMDMxMTAvBgNV BAMTKDk3REFBNDlBMzAxQTBEOEI0RDE5MkNDQ0FBRUU5NUNBRkQ5RTczMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinf+w1bmclEI+5Z/ja+y9PcFe ijgMo7a7RrPvNHLwtWXcT7reg4GJcPidZTIUjGrqZbSp+lTDzo0h/djP9ay187C8 yEeCSWLGbFeIYZYtRQv03RMMiehWI7uAMupa95NgcQkJNDl+pqyoV4Xeh+Reaw+p PkyJVv9GVlZuulBGjgeYpVrhhTjUz1qnvVlwi7pzyWA62wPqULp/owPn6/7bBanD BoK3HckWzVcC9YrgpfA/1yXc42iESTL9cK0sIBYxLMBnvtZJ3Qkku9NzfeYfvueh TL1cgqOCQv+LE8OOzN9tVBYeFa7xFoVQ+8FsAoykc93NJfGIF/rwhRfeJGcLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUl9qkmjAaDYtNGSzMqu6Vyv2ecwQwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMjJlMzQzMzJlMzczNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorSzANBgkqhkiG 9w0BAQsFAAOCAQEALVyzVEk29BD25X6DDcvITBiz1dLlgtrZfd4VoFtl5yLc4wNc sZ9IJmyEsn3Rtw7pqNC2WyIye1qFyq9lE5NfRJYkx4uIMeOrM/YvXjy5J4WFE7SY 9oCBhlwTwjAUxwZJOnaUjWa/Gavv79aHSg/ajsaQZHWkCRxHqdShRZ4owpriaRS6 dgVSC/c4E/sJhiHl+y97//d4d28LmbvtLfJrJPuXqfzq5EhOVYLsPfUMST5n0pvH XoHF2b9Kbsg4nsxAB52/koqaKsofVnSQTDHm06MYZ2Wl1l8y1L8MYfrkx4XtQG4u t7ECgc90DGPFl/pUNsU+ykibZDRlnNbEmu5fgA== -----END CERTIFICATE-----Generated at Sun Jan 25 23:04:22 2026 by rpki-client