This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa File: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (raw, json) Hash identifier: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw= Subject key identifier: B8:0C:3A:32:5E:35:E8:87:EA:40:35:CC:DC:D8:E9:35:E7:73:EF:52 Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 5BDCA746873A9B0DDB6F7AA180086B2FB9A935AF Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa Signing time: Tue 02 Dec 2025 00:00:01 +0000 ROA not before: Mon 01 Dec 2025 23:55:01 +0000 ROA not after: Tue 01 Dec 2026 00:00:01 +0000 asID: 140405 IP address blocks: 210.247.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dc:a7:46:87:3a:9b:0d:db:6f:7a:a1:80:08:6b:2f:b9:a9:35:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Dec 1 23:55:01 2025 GMT Not After : Dec 1 00:00:01 2026 GMT Subject: CN=B80C3A325E35E887EA4035CCDCD8E935E773EF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:ba:fc:b5:15:b1:08:b6:e4:f7:71:3c:a8: c0:06:84:de:94:0a:83:19:0e:c0:4b:65:7c:1f:1a: 91:f4:6c:7b:31:d3:40:80:54:9d:4b:59:cb:72:99: e8:21:6c:85:d1:01:d5:ca:51:90:47:40:91:71:ab: a3:2a:c9:97:c7:17:fc:91:42:3e:c8:68:3f:07:a0: 6d:2a:ea:4b:a0:fc:e3:01:97:87:d5:d5:db:d2:c7: b3:89:53:41:c4:64:bd:a1:15:eb:0b:15:0b:94:b8: 5b:7e:df:82:8d:b2:31:95:ab:5b:46:19:29:c6:2f: 1e:05:60:8e:06:9b:94:17:f8:97:63:f4:70:3a:29: f0:bc:ac:ad:03:55:d5:98:c6:60:19:60:72:41:46: 23:bc:7a:b5:7a:3a:c3:4e:d1:11:6e:e4:0f:ef:8d: ec:3f:9a:70:d1:0e:bf:61:37:38:13:a0:34:9b:74: 85:40:e1:7a:3a:dc:2b:9f:e6:34:d7:f1:11:88:3d: e8:38:17:47:a1:e2:a7:06:9c:ef:18:9d:e1:94:a4: e5:56:34:9b:20:e5:d6:b7:eb:2a:e2:92:46:e3:fe: 8a:44:7c:1f:ab:53:bf:03:bc:2e:c6:05:b6:d5:ad: 25:4f:58:df:23:86:64:38:26:e5:79:70:1b:dd:1f: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:3A:32:5E:35:E8:87:EA:40:35:CC:DC:D8:E9:35:E7:73:EF:52 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.247.241.0/24 Signature Algorithm: sha256WithRSAEncryption 96:b4:c5:b2:91:fb:d3:cd:62:68:c6:6d:d4:73:1b:cd:98:ea: d7:ed:63:db:91:18:54:d0:0e:84:ec:02:8a:4d:d6:4a:d5:fe: 7a:ef:8b:1d:7f:b5:f5:f6:ba:8c:75:49:f8:04:71:8e:37:7b: 8d:18:be:ab:7d:a9:a9:de:e4:03:6e:b4:46:45:3b:93:a8:cc: 29:1c:b4:48:60:eb:ff:16:ee:1b:32:1a:4f:ba:f9:d9:66:bb: 5a:55:4f:e8:ee:f4:96:bb:21:b5:aa:4b:70:08:7d:93:05:c0: 35:a6:38:e5:5b:a9:fa:2c:b8:2e:ae:0b:1d:c0:6a:5c:f2:5a: 03:b6:f4:51:c3:8a:cb:88:85:4e:eb:75:25:02:1d:4d:91:56: 04:ab:94:65:bb:3b:7a:72:a5:31:be:4a:ef:5a:37:bb:56:51: d8:57:d1:0b:4d:4f:c0:2f:fe:91:fe:91:b0:c6:58:24:7f:86: ca:20:cd:60:6f:75:ed:7e:2c:5d:dd:d3:13:c0:f0:bf:7a:57: 88:fd:c3:f5:08:a0:a8:75:00:6e:a6:d0:55:ac:a7:d9:83:01: 27:ce:1e:82:1f:3c:ae:8d:d7:77:15:5c:2a:dd:09:fa:96:0c: c5:4f:07:cb:e3:40:48:21:4d:e7:80:b1:ba:68:17:8f:90:ab: 45:34:3d:ca -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUW9ynRoc6mw3bb3qhgAhrL7mpNa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTEyMDEyMzU1MDFaFw0yNjEyMDEwMDAwMDFaMDMxMTAvBgNV BAMTKEI4MEMzQTMyNUUzNUU4ODdFQTQwMzVDQ0RDRDhFOTM1RTc3M0VGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98br8tRWxCLbk93E8qMAGhN6U CoMZDsBLZXwfGpH0bHsx00CAVJ1LWctymeghbIXRAdXKUZBHQJFxq6MqyZfHF/yR Qj7IaD8HoG0q6kug/OMBl4fV1dvSx7OJU0HEZL2hFesLFQuUuFt+34KNsjGVq1tG GSnGLx4FYI4Gm5QX+Jdj9HA6KfC8rK0DVdWYxmAZYHJBRiO8erV6OsNO0RFu5A/v jew/mnDRDr9hNzgToDSbdIVA4Xo63Cuf5jTX8RGIPeg4F0eh4qcGnO8YneGUpOVW NJsg5da36yrikkbj/opEfB+rU78DvC7GBbbVrSVPWN8jhmQ4JuV5cBvdH4l1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuAw6Ml416IfqQDXM3NjpNedz71IwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/EwDQYJ KoZIhvcNAQELBQADggEBAJa0xbKR+9PNYmjGbdRzG82Y6tftY9uRGFTQDoTsAopN 1krV/nrvix1/tfX2uox1SfgEcY43e40Yvqt9qane5ANutEZFO5OozCkctEhg6/8W 7hsyGk+6+dlmu1pVT+ju9Ja7IbWqS3AIfZMFwDWmOOVbqfosuC6uCx3AalzyWgO2 9FHDisuIhU7rdSUCHU2RVgSrlGW7O3pypTG+Su9aN7tWUdhX0QtNT8Av/pH+kbDG WCR/hsogzWBvde1+LF3d0xPA8L96V4j9w/UIoKh1AG6m0FWsp9mDASfOHoIfPK6N 13cVXCrdCfqWDMVPB8vjQEghTeeAsbpoF4+Qq0U0Pco= -----END CERTIFICATE-----Generated at Sun Dec 7 04:30:22 2025 by rpki-client