This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa File: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (raw, json) Hash identifier: sQjzMKfSbeLjhatpOUa2jqoPr0yDGU2BnKpmrQbbfNA= Subject key identifier: 95:37:57:C7:ED:C7:74:09:35:C1:01:EA:8C:4E:7E:C8:1A:8B:6D:97 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 5E3445860A26D2A6FDF710D2C47D80495519C45C Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa Signing time: Fri 19 Dec 2025 09:00:00 +0000 ROA not before: Fri 19 Dec 2025 08:55:00 +0000 ROA not after: Fri 18 Dec 2026 09:00:00 +0000 asID: 17826 IP address blocks: 202.149.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:34:45:86:0a:26:d2:a6:fd:f7:10:d2:c4:7d:80:49:55:19:c4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Dec 19 08:55:00 2025 GMT Not After : Dec 18 09:00:00 2026 GMT Subject: CN=953757C7EDC7740935C101EA8C4E7EC81A8B6D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:91:d5:eb:5a:49:25:b8:e5:0b:cf:78:15: a3:e2:9e:52:72:0d:a4:99:6a:b1:0d:0d:d1:bb:22: 35:7f:00:74:3c:67:8e:97:3c:e6:77:7b:30:3f:99: e1:a1:b1:83:82:64:95:ab:ab:53:a0:a9:9c:f4:5f: ae:a9:ad:d0:7f:c3:83:c8:21:b3:94:2c:0b:10:ad: 78:c0:d0:ef:13:5c:f5:bf:3a:3c:fc:32:96:13:df: 2c:3c:60:49:5d:b1:03:d5:22:20:0f:cd:79:21:c8: c2:a0:b4:6c:52:5e:f6:50:71:31:27:3d:fb:80:39: e2:3b:88:7d:8d:30:1f:c0:3e:d6:fb:3a:84:6d:bc: a1:7a:f8:5f:ee:93:1f:9b:be:bf:2a:e2:18:9c:48: 91:47:33:ba:f1:3e:df:8d:df:5d:61:03:b0:70:b4: eb:57:f8:4a:1e:2c:46:27:f9:20:81:59:15:42:c0: 66:92:15:81:bc:78:87:c6:1a:b5:89:74:e7:b7:65: b5:cf:65:86:54:62:9b:0e:47:68:cd:90:36:39:a4: 47:a5:1c:68:b4:bd:ce:02:bc:8e:d4:16:95:49:d0: 93:ad:e8:f2:63:00:3e:fc:6e:d6:d5:90:a6:ab:cf: 56:b6:21:c2:68:33:31:5f:f8:cb:1f:9d:34:d3:9e: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:37:57:C7:ED:C7:74:09:35:C1:01:EA:8C:4E:7E:C8:1A:8B:6D:97 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/3230322e3134392e36342e302f31392d3234203d3e203137383236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.149.64.0/19 Signature Algorithm: sha256WithRSAEncryption 5b:be:55:cf:03:e5:ef:77:23:9d:3b:25:69:3f:3f:4f:e7:65: bb:77:62:ed:07:8f:61:6e:06:c8:a6:3e:a5:b4:23:c0:f8:c1: 78:72:97:b6:d2:7a:ef:0f:92:2e:0c:97:cf:39:46:a0:10:eb: b3:89:21:7a:63:11:34:59:55:93:c2:aa:50:ba:bc:ce:e8:26: 2d:b3:58:fd:9a:03:19:0f:77:4f:b3:a1:3c:66:b0:47:83:34: 8d:fc:d5:26:f0:ad:a1:6d:55:7c:d9:d3:f3:88:b3:49:cf:72: bf:3b:4c:0b:0b:99:99:ec:5d:d0:c1:e2:0b:14:db:99:05:66: 4f:1a:7a:4c:81:89:1e:56:8f:49:4a:14:eb:29:d6:f5:fa:2e: 93:bf:8d:92:85:d1:1d:bb:d9:a6:e3:1c:7f:2c:40:39:ed:71: 95:a0:2a:a8:cb:ca:bb:af:4f:a0:c1:73:5d:4c:01:bc:31:26: 39:bc:0f:c9:61:bc:14:c9:24:69:c3:aa:75:16:a6:a8:9d:c1: 08:95:a4:d5:74:e7:34:06:20:59:70:01:9c:0e:fc:1d:c3:93: 36:70:18:1c:c4:c3:e0:ae:0c:bb:2b:1c:f7:94:b7:c6:25:ac: 8f:ba:1f:f3:54:7b:7d:91:ff:fe:12:a4:a2:8d:85:0f:e9:d0: c4:fe:4e:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXjRFhgom0qb99xDSxH2ASVUZxFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEyMTkwODU1MDBaFw0yNjEyMTgwOTAwMDBaMDMxMTAvBgNV BAMTKDk1Mzc1N0M3RURDNzc0MDkzNUMxMDFFQThDNEU3RUM4MUE4QjZEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqJHV61pJJbjlC894FaPinlJy DaSZarENDdG7IjV/AHQ8Z46XPOZ3ezA/meGhsYOCZJWrq1OgqZz0X66prdB/w4PI IbOULAsQrXjA0O8TXPW/Ojz8MpYT3yw8YEldsQPVIiAPzXkhyMKgtGxSXvZQcTEn PfuAOeI7iH2NMB/APtb7OoRtvKF6+F/ukx+bvr8q4hicSJFHM7rxPt+N311hA7Bw tOtX+EoeLEYn+SCBWRVCwGaSFYG8eIfGGrWJdOe3ZbXPZYZUYpsOR2jNkDY5pEel HGi0vc4CvI7UFpVJ0JOt6PJjAD78btbVkKarz1a2IcJoMzFf+MsfnTTTnkMFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlTdXx+3HdAk1wQHqjE5+yBqLbZcwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkZDFlYWNkLWEwNjctNDkyNC05 Mjg0LWJjNmYxMGQ4ZDVhOC8wLzMyMzAzMjJlMzEzNDM5MmUzNjM0MmUzMDJmMzEz OTJkMzIzNDIwM2QzZTIwMzEzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqVQDANBgkqhkiG 9w0BAQsFAAOCAQEAW75VzwPl73cjnTslaT8/T+dlu3di7QePYW4GyKY+pbQjwPjB eHKXttJ67w+SLgyXzzlGoBDrs4khemMRNFlVk8KqULq8zugmLbNY/ZoDGQ93T7Oh PGawR4M0jfzVJvCtoW1VfNnT84izSc9yvztMCwuZmexd0MHiCxTbmQVmTxp6TIGJ HlaPSUoU6ynW9fouk7+NkoXRHbvZpuMcfyxAOe1xlaAqqMvKu69PoMFzXUwBvDEm ObwPyWG8FMkkacOqdRamqJ3BCJWk1XTnNAYgWXABnA78HcOTNnAYHMTD4K4Muysc 95S3xiWsj7of81R7fZH//hKkoo2FD+nQxP5Opg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:42:20 2026 by rpki-client