This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e203435323938.roa File: 3230322e34332e37352e302f32342d3234203d3e203435323938.roa (raw, json) Hash identifier: i6/PHdchDVzNOn1ijGjOYuOBRtdGd0SlcF2ajlTzVgU= Subject key identifier: F8:D1:2C:53:F1:8A:E2:93:AA:C5:0C:92:93:34:A5:15:BB:32:66:B6 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 2C50DDF81833D3A97762B1C69FFA3A4D8BC701BC Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e203435323938.roa Signing time: Wed 24 Dec 2025 02:23:15 +0000 ROA not before: Wed 24 Dec 2025 02:18:15 +0000 ROA not after: Wed 23 Dec 2026 02:23:15 +0000 asID: 45298 IP address blocks: 202.43.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:50:dd:f8:18:33:d3:a9:77:62:b1:c6:9f:fa:3a:4d:8b:c7:01:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Dec 24 02:18:15 2025 GMT Not After : Dec 23 02:23:15 2026 GMT Subject: CN=F8D12C53F18AE293AAC50C929334A515BB3266B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f6:66:f8:cd:44:a5:33:2d:c2:46:f9:18:5c: 78:d7:07:be:ca:52:74:25:78:a5:3f:9c:1f:d5:b7: 15:9c:10:2a:14:0a:77:92:d4:b0:ef:d2:9c:f8:de: 67:b1:30:94:02:84:cd:d3:77:bd:0e:64:ac:a2:2b: 9d:f7:71:d2:98:11:43:19:39:24:c1:81:e9:87:a5: 74:5f:91:77:59:65:c4:b3:2a:16:c1:b9:fe:eb:7d: df:0e:db:b9:7b:48:95:bd:b7:83:6e:70:ac:a4:ff: 63:a4:d7:da:47:6f:1e:0b:ee:70:f2:a5:7e:1e:92: 05:b5:34:92:be:3d:e3:04:4d:fc:2b:12:29:e4:f2: 14:dd:fc:64:06:50:a9:b4:75:eb:ae:4f:59:cc:a6: f8:1a:92:f6:6b:b3:e0:86:5a:94:23:8a:f9:1c:46: d6:f0:0c:e4:e8:cc:51:00:38:fb:6e:36:e8:b6:3f: a7:a1:59:83:4e:ec:1b:9c:4b:e8:49:1b:0d:49:bf: d6:04:99:bb:84:6b:ce:7d:48:fe:a8:0c:48:76:e1: 8d:e9:32:25:7b:00:ae:68:4b:7e:58:14:9d:0e:ea: 18:d0:45:14:86:89:60:95:e4:d4:d1:1a:13:52:2a: 8f:66:9c:f8:d8:60:16:a3:65:a5:be:f1:d2:32:c9: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:2C:53:F1:8A:E2:93:AA:C5:0C:92:93:34:A5:15:BB:32:66:B6 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3230322e34332e37352e302f32342d3234203d3e203435323938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.43.75.0/24 Signature Algorithm: sha256WithRSAEncryption 84:07:74:b1:14:d7:a9:c1:c2:61:08:26:ee:af:65:73:76:c3: 11:7f:77:92:3f:db:72:9f:df:56:7c:0e:53:9e:f1:f5:20:f7: 71:b1:1d:05:1a:59:a5:99:34:67:0d:9c:b3:33:94:55:ba:77: b5:b4:70:ed:20:c5:92:40:71:97:d8:91:4f:23:d4:b7:5b:11: c5:fa:e4:7f:81:d0:c7:b1:0c:de:aa:66:ed:61:f8:ed:b7:da: c1:2d:ef:09:24:eb:63:d5:5b:85:d2:e0:2b:77:d2:a2:65:5e: b3:62:d1:b5:10:a7:06:74:c5:a6:cb:af:b9:b8:2f:f7:84:81: 82:fe:c3:57:38:de:7b:fd:3b:e5:d6:6b:13:29:a1:96:09:7f: 76:a7:f2:c0:c5:d4:18:7c:3e:ce:fa:a5:89:b1:36:a7:b3:f0: 52:9a:6f:60:0d:bd:41:8c:07:b6:12:85:53:e2:49:51:df:a4: 75:01:84:60:e8:dc:b2:ea:b1:ec:d0:bb:67:13:74:ab:e6:4b: a6:d9:9b:1f:29:82:f1:07:8c:1a:3c:9d:3b:5e:f0:63:a4:9d: f3:a2:56:18:88:a4:69:00:03:3b:46:b6:48:25:f4:e5:5a:b0: 50:3e:28:03:e8:8e:06:66:86:95:41:27:7a:12:9c:8e:e0:0b: ca:cb:71:ac -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULFDd+Bgz06l3YrHGn/o6TYvHAbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTEyMjQwMjE4MTVaFw0yNjEyMjMwMjIzMTVaMDMxMTAvBgNV BAMTKEY4RDEyQzUzRjE4QUUyOTNBQUM1MEM5MjkzMzRBNTE1QkIzMjY2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa9mb4zUSlMy3CRvkYXHjXB77K UnQleKU/nB/VtxWcECoUCneS1LDv0pz43mexMJQChM3Td70OZKyiK533cdKYEUMZ OSTBgemHpXRfkXdZZcSzKhbBuf7rfd8O27l7SJW9t4NucKyk/2Ok19pHbx4L7nDy pX4ekgW1NJK+PeMETfwrEink8hTd/GQGUKm0deuuT1nMpvgakvZrs+CGWpQjivkc RtbwDOTozFEAOPtuNui2P6ehWYNO7BucS+hJGw1Jv9YEmbuEa859SP6oDEh24Y3p MiV7AK5oS35YFJ0O6hjQRRSGiWCV5NTRGhNSKo9mnPjYYBajZaW+8dIyycCdAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU+NEsU/GK4pOqxQySkzSlFbsyZrYwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMyMzAzMjJlMzQzMzJlMzczNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKK0swDQYJKoZIhvcN AQELBQADggEBAIQHdLEU16nBwmEIJu6vZXN2wxF/d5I/23Kf31Z8DlOe8fUg93Gx HQUaWaWZNGcNnLMzlFW6d7W0cO0gxZJAcZfYkU8j1LdbEcX65H+B0MexDN6qZu1h +O232sEt7wkk62PVW4XS4Ct30qJlXrNi0bUQpwZ0xabLr7m4L/eEgYL+w1c43nv9 O+XWaxMpoZYJf3an8sDF1Bh8Ps76pYmxNqez8FKab2ANvUGMB7YShVPiSVHfpHUB hGDo3LLqsezQu2cTdKvmS6bZmx8pgvEHjBo8nTte8GOknfOiVhiIpGkAAztGtkgl 9OVasFA+KAPojgZmhpVBJ3oSnI7gC8rLcaw= -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:09 2026 by rpki-client