This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa File: 3230322e35312e35382e302f32332d3233203d3e203330383630.roa (raw, json) Hash identifier: nmYMdBmJi2dLE67aggA0wkg2W+WeeYl9g1CRUjC4EIE= Subject key identifier: 7B:AE:7B:88:FD:E1:5C:E4:EB:F7:2C:06:2E:7D:2C:56:30:A2:C9:67 Certificate issuer: /CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Certificate serial: 0D23A524536ED94DE9248CF53FC2C9C67B8C95AA Authority key identifier: 3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa Signing time: Mon 24 Nov 2025 14:00:03 +0000 ROA not before: Mon 24 Nov 2025 13:55:03 +0000 ROA not after: Mon 23 Nov 2026 14:00:03 +0000 asID: 30860 IP address blocks: 202.51.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:23:a5:24:53:6e:d9:4d:e9:24:8c:f5:3f:c2:c9:c6:7b:8c:95:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6B5AF231FD809FBC8E599215B14D357AC66A8C Validity Not Before: Nov 24 13:55:03 2025 GMT Not After : Nov 23 14:00:03 2026 GMT Subject: CN=7BAE7B88FDE15CE4EBF72C062E7D2C5630A2C967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:33:57:ee:e9:71:af:2e:40:2d:fa:6b:df:3e: 0a:b8:bb:1d:3e:90:69:84:d2:7e:29:fd:6e:f7:37: 00:69:2b:97:61:f5:4a:14:d6:80:36:ab:75:35:dc: 96:f4:78:04:9a:96:ec:67:39:d1:db:99:bf:02:e3: 1b:22:32:a3:dc:94:e7:10:84:8f:0c:b9:b9:3e:76: ff:17:3f:9c:7e:c4:0a:83:55:41:f4:6d:29:cf:7a: 5e:76:60:1e:0c:39:08:c7:17:e5:1b:e7:51:3d:87: 40:c5:e4:4a:df:ab:f5:f6:8a:95:5b:fa:b0:d9:da: 44:83:f9:ed:06:01:a6:65:e6:3e:fa:c7:0e:f9:70: 91:6c:62:2b:08:95:40:b1:4e:74:52:77:58:de:bf: 27:59:16:e8:34:f2:c2:41:19:ff:19:fe:34:0e:ff: e5:bc:32:17:49:3f:31:80:ef:73:4f:12:42:c5:dc: 93:ab:a6:65:90:e5:82:ec:a9:f6:87:a5:d6:5d:79: 9d:bd:a0:37:a5:cf:82:7a:08:b4:42:1a:47:24:d4: 8f:41:75:d9:5e:0f:60:cd:f3:33:c2:57:83:67:a4: 33:0c:cc:41:d0:2c:bb:2d:94:fc:a6:f4:5a:4d:83: 0d:94:86:f7:d8:63:09:b2:93:a2:9f:ae:52:c2:b6: ed:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AE:7B:88:FD:E1:5C:E4:EB:F7:2C:06:2E:7D:2C:56:30:A2:C9:67 X509v3 Authority Key Identifier: keyid:3E:6B:5A:F2:31:FD:80:9F:BC:8E:59:92:15:B1:4D:35:7A:C6:6A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6B5AF231FD809FBC8E599215B14D357AC66A8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be540164-3d46-4794-bf55-b6b134d9ab13/0/3230322e35312e35382e302f32332d3233203d3e203330383630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.58.0/23 Signature Algorithm: sha256WithRSAEncryption 88:5a:c0:9d:e6:ce:4f:fc:f3:a1:68:bb:56:d3:92:b4:3e:ef: 4c:14:fe:14:fd:65:33:78:ad:52:31:f7:1b:80:7d:fd:28:c5: 3a:f6:75:47:6e:51:31:3f:88:b6:da:27:9f:db:7e:64:ea:ad: c9:09:ee:68:94:8a:73:fe:13:4d:7b:4e:5a:e4:81:95:ca:de: 5f:1d:e8:ba:63:62:77:af:49:cc:7f:52:8b:ee:1e:e1:47:ed: cd:20:8c:a3:70:5f:c6:76:4b:df:66:aa:55:ed:dc:ef:5e:a0: 3e:a8:3a:f8:56:b9:b1:bf:b7:40:f4:9b:da:54:46:4d:b5:56: 30:8b:33:4a:9b:68:46:40:b0:c6:f0:5d:a8:91:bc:01:e3:af: 66:94:da:3d:bc:e5:cf:2f:12:48:fa:e6:60:68:b8:8c:3a:fc: 38:58:d9:58:08:49:ab:5a:48:14:a2:ee:24:a5:b3:98:20:01: 00:04:b0:25:48:ec:cf:fb:d9:3c:f2:7f:59:f7:d3:59:9b:bf: df:03:7e:ad:f5:9f:c2:e2:57:73:10:f7:18:d9:7a:7c:36:74: 01:64:df:f1:ce:9c:ce:93:10:dc:ab:3f:ec:eb:65:f8:8f:4e: 9a:46:b9:65:a9:50:f2:af:bc:c0:16:b4:ba:a7:5a:cb:a3:15: e8:78:1e:7c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDSOlJFNu2U3pJIz1P8LJxnuMlaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3 QUM2NkE4QzAeFw0yNTExMjQxMzU1MDNaFw0yNjExMjMxNDAwMDNaMDMxMTAvBgNV BAMTKDdCQUU3Qjg4RkRFMTVDRTRFQkY3MkMwNjJFN0QyQzU2MzBBMkM5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtM1fu6XGvLkAt+mvfPgq4ux0+ kGmE0n4p/W73NwBpK5dh9UoU1oA2q3U13Jb0eASaluxnOdHbmb8C4xsiMqPclOcQ hI8Mubk+dv8XP5x+xAqDVUH0bSnPel52YB4MOQjHF+Ub51E9h0DF5Erfq/X2ipVb +rDZ2kSD+e0GAaZl5j76xw75cJFsYisIlUCxTnRSd1jevydZFug08sJBGf8Z/jQO /+W8MhdJPzGA73NPEkLF3JOrpmWQ5YLsqfaHpdZdeZ29oDelz4J6CLRCGkck1I9B ddleD2DN8zPCV4NnpDMMzEHQLLstlPym9FpNgw2UhvfYYwmyk6KfrlLCtu2FAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUe657iP3hXOTr9ywGLn0sVjCiyWcwHwYDVR0j BBgwFoAUPmta8jH9gJ+8jlmSFbFNNXrGaowwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTU0MDE2NC0zZDQ2LTQ3OTQtYmY1NS1iNmIxMzRkOWFiMTMvMC8zRTZCNUFGMjMx RkQ4MDlGQkM4RTU5OTIxNUIxNEQzNTdBQzY2QThDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2QjVBRjIzMUZEODA5RkJDOEU1OTkyMTVCMTREMzU3QUM2 NkE4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNTQwMTY0LTNkNDYtNDc5NC1i ZjU1LWI2YjEzNGQ5YWIxMy8wLzMyMzAzMjJlMzUzMTJlMzUzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMzMzAzODM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKMzowDQYJKoZIhvcN AQELBQADggEBAIhawJ3mzk/886Fou1bTkrQ+70wU/hT9ZTN4rVIx9xuAff0oxTr2 dUduUTE/iLbaJ5/bfmTqrckJ7miUinP+E017TlrkgZXK3l8d6LpjYnevScx/Uovu HuFH7c0gjKNwX8Z2S99mqlXt3O9eoD6oOvhWubG/t0D0m9pURk21VjCLM0qbaEZA sMbwXaiRvAHjr2aU2j285c8vEkj65mBouIw6/DhY2VgISataSBSi7iSls5ggAQAE sCVI7M/72Tzyf1n301mbv98Dfq31n8LiV3MQ9xjZenw2dAFk3/HOnM6TENyrP+zr ZfiPTppGuWWpUPKvvMAWtLqnWsujFeh4Hnw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:48 2025 by rpki-client