This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa File: 3230332e3134382e38352e302f32342d3234203d3e203435323839.roa (raw, json) Hash identifier: qaFCPFspiQeiO/D4iLrD1q+n5cnqG21DWLl7U5yS6HU= Subject key identifier: 6A:F3:97:BA:DC:1D:E9:F9:0F:F9:01:F3:6F:55:97:0F:D7:96:FD:CD Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Certificate serial: 437DD59E76CF7D5D1A56161FFAF1D8A6A55CE755 Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa Signing time: Sat 17 Jan 2026 08:01:09 +0000 ROA not before: Sat 17 Jan 2026 07:56:09 +0000 ROA not after: Sat 16 Jan 2027 08:01:09 +0000 asID: 45289 IP address blocks: 203.148.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7d:d5:9e:76:cf:7d:5d:1a:56:16:1f:fa:f1:d8:a6:a5:5c:e7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61 Validity Not Before: Jan 17 07:56:09 2026 GMT Not After : Jan 16 08:01:09 2027 GMT Subject: CN=6AF397BADC1DE9F90FF901F36F55970FD796FDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:be:34:dc:e5:bc:db:1a:2f:b1:9c:44:ba: 05:63:e2:3d:61:18:08:a5:d0:e1:25:cc:9f:3e:62: cf:e1:ed:62:f1:88:78:0b:34:41:8a:45:27:5b:92: ec:b2:09:4d:8d:77:1f:a4:47:44:26:1e:c6:62:03: 1e:ae:7e:fc:fc:e9:c0:f0:46:51:dc:c3:e1:d3:92: bc:31:34:28:d8:87:09:3a:81:36:bc:44:f6:46:e4: 44:a6:d4:cf:a7:b3:50:7b:2c:7d:88:0b:c3:1e:82: 25:73:e5:b1:3f:81:b8:69:5d:0e:f5:02:48:e7:47: fe:c3:9b:e7:1c:e0:90:1a:42:c5:49:f6:70:45:c2: 57:5a:fb:bb:c7:76:d2:7c:30:96:ae:17:10:a3:eb: 42:5d:75:08:7b:5e:75:fe:a3:ed:f2:3d:69:7a:fc: 62:2a:60:c6:03:3f:a8:42:9a:7f:8d:1d:8e:70:ed: 93:2d:9b:fe:55:53:b9:99:45:2e:21:6a:cf:66:2c: 45:7f:31:80:c0:26:0d:98:aa:83:b9:d5:2e:81:7b: 00:d5:5b:1c:23:9d:15:5b:31:5f:8a:52:53:8d:ac: c9:1b:69:75:3f:fa:67:55:14:32:86:42:1a:a2:70: b4:39:99:28:22:ef:1c:e8:05:c9:a9:99:0d:f3:0f: 2e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F3:97:BA:DC:1D:E9:F9:0F:F9:01:F3:6F:55:97:0F:D7:96:FD:CD X509v3 Authority Key Identifier: keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38352e302f32342d3234203d3e203435323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.148.85.0/24 Signature Algorithm: sha256WithRSAEncryption 06:7e:fd:83:94:88:7d:fd:e8:6d:ef:f4:a9:04:03:0d:f4:df: 59:88:2c:46:37:b7:2c:f9:7a:4c:14:72:71:49:8b:f0:64:73: 83:f6:c4:2f:0b:9a:9c:1b:80:fa:07:e2:6a:b6:ba:3a:6a:03: d9:0d:62:8c:40:19:d1:5a:76:b1:4c:aa:5b:8d:43:85:41:d2: 38:32:cb:52:8f:40:3f:9e:f5:5c:39:b9:a4:7f:8f:62:97:7a: 0a:1b:1c:20:1f:f4:dd:76:b1:85:94:0e:93:a8:90:18:09:fa: a1:0b:a9:2d:da:d1:6a:78:00:63:d4:c1:cb:e0:e2:86:17:b7: 8b:cf:57:2c:d2:17:be:23:1c:a7:60:0e:ec:7b:2c:65:2c:0e: a5:76:8a:df:ef:d9:59:4f:c8:20:bb:9c:3a:59:2b:59:f1:db: c5:f4:0d:53:da:91:2e:3d:c8:1a:06:97:72:34:57:67:b3:23: ec:a7:08:12:16:f3:ad:59:06:e9:4b:b4:df:1d:98:78:b6:a9: 6c:e1:91:d2:89:c2:fa:17:84:da:04:87:51:d4:71:5e:5d:75: 6d:27:03:4f:58:40:6f:e0:21:6b:e9:75:db:74:dd:41:7a:2a: f5:b3:39:e3:b6:42:8f:66:67:71:3c:d5:f3:99:01:d0:bf:4c: b3:c7:ce:2b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ33VnnbPfV0aVhYf+vHYpqVc51UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx MkU0RkQ2MTAeFw0yNjAxMTcwNzU2MDlaFw0yNzAxMTYwODAxMDlaMDMxMTAvBgNV BAMTKDZBRjM5N0JBREMxREU5RjkwRkY5MDFGMzZGNTU5NzBGRDc5NkZEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xr403OW82xovsZxEugVj4j1h GAil0OElzJ8+Ys/h7WLxiHgLNEGKRSdbkuyyCU2Ndx+kR0QmHsZiAx6ufvz86cDw RlHcw+HTkrwxNCjYhwk6gTa8RPZG5ESm1M+ns1B7LH2IC8MegiVz5bE/gbhpXQ71 AkjnR/7Dm+cc4JAaQsVJ9nBFwlda+7vHdtJ8MJauFxCj60JddQh7XnX+o+3yPWl6 /GIqYMYDP6hCmn+NHY5w7ZMtm/5VU7mZRS4has9mLEV/MYDAJg2YqoO51S6BewDV WxwjnRVbMV+KUlONrMkbaXU/+mdVFDKGQhqicLQ5mSgi7xzoBcmpmQ3zDy7jAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUavOXutwd6fkP+QHzb1WXD9eW/c0wHwYDVR0j BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3 RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0 RkQ2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzAzMzJlMzEzNDM4MmUzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuUVTANBgkqhkiG 9w0BAQsFAAOCAQEABn79g5SIff3obe/0qQQDDfTfWYgsRje3LPl6TBRycUmL8GRz g/bELwuanBuA+gfiara6OmoD2Q1ijEAZ0Vp2sUyqW41DhUHSODLLUo9AP571XDm5 pH+PYpd6ChscIB/03XaxhZQOk6iQGAn6oQupLdrRangAY9TBy+Dihhe3i89XLNIX viMcp2AO7HssZSwOpXaK3+/ZWU/IILucOlkrWfHbxfQNU9qRLj3IGgaXcjRXZ7Mj 7KcIEhbzrVkG6Uu03x2YeLapbOGR0onC+heE2gSHUdRxXl11bScDT1hAb+Aha+l1 23TdQXoq9bM547ZCj2ZncTzV85kB0L9Ms8fOKw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:16:49 2026 by rpki-client