This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa File: 3230322e38312e35352e302f32342d3234203d3e203435333132.roa (raw, json) Hash identifier: 7Z/QnAAlArqC3z+AB5A4pyuV3mV6xM0Gg1oQ/7ruzdM= Subject key identifier: 08:F3:1A:24:A0:6D:96:D1:EE:44:B6:2D:E4:82:C0:0C:3C:6D:C4:25 Certificate issuer: /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Certificate serial: 0425FF367BB2B050CB597519432A4BDE125BF5FF Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa Signing time: Tue 18 Nov 2025 09:03:04 +0000 ROA not before: Tue 18 Nov 2025 08:58:04 +0000 ROA not after: Tue 17 Nov 2026 09:03:04 +0000 asID: 45312 IP address blocks: 202.81.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:25:ff:36:7b:b2:b0:50:cb:59:75:19:43:2a:4b:de:12:5b:f5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441 Validity Not Before: Nov 18 08:58:04 2025 GMT Not After : Nov 17 09:03:04 2026 GMT Subject: CN=08F31A24A06D96D1EE44B62DE482C00C3C6DC425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b2:ff:32:26:a3:c2:dc:6e:ca:76:9a:9b:15: 1e:36:75:a2:46:63:b4:79:5d:69:c8:09:99:52:51: 10:27:3d:3c:ce:0f:7b:99:1f:29:d4:6b:f2:ad:ac: cd:d8:5c:b9:75:f5:c7:f3:ab:f7:1c:e3:f1:69:f3: 5c:d5:6e:1d:1e:be:94:3c:cc:13:3c:cd:c9:35:80: 7e:0d:10:5d:cc:4a:59:82:d2:ef:58:33:d3:6b:71: 7a:c2:54:95:c9:48:ef:aa:8c:0d:2f:d3:08:e4:3a: 7a:49:94:d4:10:b2:16:1d:8b:54:85:01:57:88:e2: f6:9d:a5:66:10:62:4a:82:63:d3:dd:bd:49:d7:d9: 64:d7:b5:89:79:3e:55:7a:ea:b9:e4:70:05:92:f2: 53:f5:81:92:a1:69:df:2f:f3:49:58:cd:30:20:39: dd:61:51:ce:0c:85:7f:ce:80:28:89:3c:88:92:5b: 8b:8f:21:92:3f:99:71:f2:b2:e4:90:82:30:1a:e4: 30:3c:27:02:52:c1:29:b2:a9:68:1f:74:5b:b0:ae: 4c:c2:77:e1:b7:4d:71:06:28:0b:3e:d5:be:9e:ef: 40:83:ce:d0:d8:92:0c:b9:ce:e3:d6:ef:1c:23:27: 28:6b:d2:52:7b:d9:a5:d0:7c:84:30:a6:92:c0:ec: 13:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:1A:24:A0:6D:96:D1:EE:44:B6:2D:E4:82:C0:0C:3C:6D:C4:25 X509v3 Authority Key Identifier: keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35352e302f32342d3234203d3e203435333132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.81.55.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:0d:f7:ad:bf:16:3d:28:f3:73:58:97:bd:c2:56:61:eb:5a: 65:c1:17:86:35:1d:34:2a:68:5a:43:b7:e4:6a:35:5e:18:aa: 98:67:c5:3a:a0:d5:46:47:ba:e8:4c:f9:ea:32:2d:6a:eb:fb: 28:b7:14:9c:6a:0e:51:94:c0:a1:a1:51:4a:71:40:81:fc:6a: 33:0a:f7:d9:75:4d:99:33:50:b7:f9:fe:28:cc:e8:e0:68:12: 39:d9:b9:0b:15:63:bc:41:a8:75:57:09:cc:1d:65:f8:b4:ce: 38:b1:a9:ad:40:16:a9:10:31:44:4d:33:5c:6b:da:7a:1f:ff: 9b:73:9b:f6:c9:f9:57:94:99:b0:00:96:65:e5:61:2d:4d:7f: 8a:7b:66:7f:30:1e:d1:e5:df:c4:4b:26:34:9a:fb:24:1d:3b: a8:0e:d5:5e:fa:fe:eb:58:47:bb:f9:52:32:48:f1:c0:b2:3e: f7:02:fb:56:02:f0:b7:0a:bc:cf:70:2c:3e:72:2e:b2:87:e4: 50:b9:58:d4:b7:84:2c:3a:0c:2c:6e:7a:09:00:e6:2f:b9:60: 7c:3f:59:06:be:46:64:7b:00:13:86:db:1f:6b:86:fd:a8:ff: 2a:58:4f:2b:ad:88:c6:6e:de:13:b2:81:cc:1e:b2:4c:af:9e: 43:69:9e:db -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUBCX/NnuysFDLWXUZQypL3hJb9f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB MEJGQzQ0MTAeFw0yNTExMTgwODU4MDRaFw0yNjExMTcwOTAzMDRaMDMxMTAvBgNV BAMTKDA4RjMxQTI0QTA2RDk2RDFFRTQ0QjYyREU0ODJDMDBDM0M2REM0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClsv8yJqPC3G7KdpqbFR42daJG Y7R5XWnICZlSURAnPTzOD3uZHynUa/KtrM3YXLl19cfzq/cc4/Fp81zVbh0evpQ8 zBM8zck1gH4NEF3MSlmC0u9YM9NrcXrCVJXJSO+qjA0v0wjkOnpJlNQQshYdi1SF AVeI4vadpWYQYkqCY9PdvUnX2WTXtYl5PlV66rnkcAWS8lP1gZKhad8v80lYzTAg Od1hUc4MhX/OgCiJPIiSW4uPIZI/mXHysuSQgjAa5DA8JwJSwSmyqWgfdFuwrkzC d+G3TXEGKAs+1b6e70CDztDYkgy5zuPW7xwjJyhr0lJ72aXQfIQwppLA7BMlAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUCPMaJKBtltHuRLYt5ILADDxtxCUwHwYDVR0j BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4 NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTcwDQYJKoZIhvcN AQELBQADggEBAIwN962/Fj0o83NYl73CVmHrWmXBF4Y1HTQqaFpDt+RqNV4Yqphn xTqg1UZHuuhM+eoyLWrr+yi3FJxqDlGUwKGhUUpxQIH8ajMK99l1TZkzULf5/ijM 6OBoEjnZuQsVY7xBqHVXCcwdZfi0zjixqa1AFqkQMURNM1xr2nof/5tzm/bJ+VeU mbAAlmXlYS1Nf4p7Zn8wHtHl38RLJjSa+yQdO6gO1V76/utYR7v5UjJI8cCyPvcC +1YC8LcKvM9wLD5yLrKH5FC5WNS3hCw6DCxuegkA5i+5YHw/WQa+RmR7ABOG2x9r hv2o/ypYTyutiMZu3hOygcweskyvnkNpnts= -----END CERTIFICATE-----Generated at Sat Dec 6 23:32:23 2025 by rpki-client