This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa File: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (raw, json) Hash identifier: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg= Subject key identifier: F9:EF:18:DC:C5:DD:1E:C1:4E:C6:DB:BD:17:CC:CC:42:35:C5:57:20 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 51A74C0566447EBC9531DC40E90ED570254B512F Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa Signing time: Thu 20 Nov 2025 10:00:02 +0000 ROA not before: Thu 20 Nov 2025 09:55:02 +0000 ROA not after: Thu 19 Nov 2026 10:00:02 +0000 asID: 150228 IP address blocks: 223.25.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a7:4c:05:66:44:7e:bc:95:31:dc:40:e9:0e:d5:70:25:4b:51:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Nov 20 09:55:02 2025 GMT Not After : Nov 19 10:00:02 2026 GMT Subject: CN=F9EF18DCC5DD1EC14EC6DBBD17CCCC4235C55720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:c0:10:61:bb:c1:f7:07:3b:71:42:b5:86: c8:9f:61:ac:08:f9:ff:0e:52:a3:79:23:9b:d5:75: 06:b9:61:00:74:53:d6:ac:2b:e0:92:0c:3b:8e:60: 06:1f:47:14:d5:4e:8c:31:ad:91:a6:6e:15:22:ed: b3:16:6a:82:8e:76:b5:98:4c:3e:b2:a3:f5:32:a7: f4:c4:5e:e3:86:a4:f3:43:eb:7b:cd:c5:c5:87:72: eb:0b:57:11:43:d3:34:e1:6a:52:c2:4c:4d:b1:8b: 6d:a6:d7:54:c9:ac:16:63:dd:fd:43:55:86:30:36: 11:2b:f1:06:c6:ec:e7:30:9c:8d:00:24:9c:3c:a0: 38:99:f8:bd:bb:46:d9:ea:4a:79:56:75:bb:ff:17: 76:a5:78:b6:a8:6b:4e:09:aa:24:5f:dc:ea:b2:73: c9:5f:c2:0c:13:92:94:db:b8:a5:11:39:9e:e6:b0: b3:cd:5e:f9:7c:c8:1d:a7:87:01:7f:29:c4:4f:db: 69:ba:18:1d:33:35:77:d3:ff:bf:5f:89:57:a8:8c: eb:4d:7a:c3:1d:4a:5d:35:45:67:45:72:af:cf:d7: 09:ce:6d:19:39:80:2f:17:00:83:35:bb:36:a5:94: 20:48:b4:ca:dd:aa:cd:12:a3:1e:86:4e:3c:7a:2e: 20:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EF:18:DC:C5:DD:1E:C1:4E:C6:DB:BD:17:CC:CC:42:35:C5:57:20 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.25.104.0/24 Signature Algorithm: sha256WithRSAEncryption 51:54:0d:55:ab:9f:fc:40:ad:49:cd:af:a9:d5:b3:27:19:0c: ba:b8:ea:9a:6f:56:9a:f3:f4:d8:59:b6:15:4a:08:a8:bf:b8: 6f:8a:87:f2:04:d9:57:05:bb:aa:c0:1b:01:9f:9d:2e:de:e4: fe:5c:b9:aa:8b:9f:58:63:8c:83:52:88:32:c5:a9:a6:e0:70: f2:c2:45:86:6a:d9:db:68:ed:7a:12:e4:bf:e3:d3:d7:bc:7d: cb:be:66:bb:61:7d:0b:a6:41:06:31:55:a2:4d:3d:ed:72:8b: 27:26:ad:5a:38:1a:0e:fa:7a:3d:08:43:32:42:f9:4f:5f:5d: 5e:2c:6c:20:9d:53:0f:0d:50:60:3b:88:2d:3c:96:74:ae:8b: 7e:7d:19:5c:af:ed:90:68:3a:94:aa:5b:6a:03:25:b8:81:8c: 82:e4:1f:f0:03:55:3a:f9:bb:ae:87:2d:0d:16:6d:43:e8:9e: 4f:36:b1:81:33:b6:b9:77:2e:96:a3:2b:e1:d8:43:e8:11:24: cb:b1:06:b0:57:5a:06:48:8f:a6:9a:ba:b1:40:6b:c2:7f:ed: 38:0b:aa:c2:fe:01:a8:0c:db:b7:8d:39:2f:b4:64:1d:ec:2e: f1:fe:bd:cd:9a:fc:3c:62:5c:42:65:e7:a1:34:b5:75:84:94: d4:c9:17:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUadMBWZEfryVMdxA6Q7VcCVLUS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNTExMjAwOTU1MDJaFw0yNjExMTkxMDAwMDJaMDMxMTAvBgNV BAMTKEY5RUYxOERDQzVERDFFQzE0RUM2REJCRDE3Q0NDQzQyMzVDNTU3MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZsAQYbvB9wc7cUK1hsifYawI +f8OUqN5I5vVdQa5YQB0U9asK+CSDDuOYAYfRxTVTowxrZGmbhUi7bMWaoKOdrWY TD6yo/Uyp/TEXuOGpPND63vNxcWHcusLVxFD0zThalLCTE2xi22m11TJrBZj3f1D VYYwNhEr8QbG7OcwnI0AJJw8oDiZ+L27RtnqSnlWdbv/F3aleLaoa04JqiRf3Oqy c8lfwgwTkpTbuKUROZ7msLPNXvl8yB2nhwF/KcRP22m6GB0zNXfT/79fiVeojOtN esMdSl01RWdFcq/P1wnObRk5gC8XAIM1uzallCBItMrdqs0Sox6GTjx6LiAdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+e8Y3MXdHsFOxtu9F8zMQjXFVyAwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3xloMA0GCSqG SIb3DQEBCwUAA4IBAQBRVA1Vq5/8QK1Jza+p1bMnGQy6uOqab1aa8/TYWbYVSgio v7hviofyBNlXBbuqwBsBn50u3uT+XLmqi59YY4yDUogyxamm4HDywkWGatnbaO16 EuS/49PXvH3Lvma7YX0LpkEGMVWiTT3tcosnJq1aOBoO+no9CEMyQvlPX11eLGwg nVMPDVBgO4gtPJZ0rot+fRlcr+2QaDqUqltqAyW4gYyC5B/wA1U6+buuhy0NFm1D 6J5PNrGBM7a5dy6Woyvh2EPoESTLsQawV1oGSI+mmrqxQGvCf+04C6rC/gGoDNu3 jTkvtGQd7C7x/r3Nmvw8YlxCZeehNLV1hJTUyReJ -----END CERTIFICATE-----Generated at Sun Dec 7 05:31:23 2025 by rpki-client