This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa File: 3230322e39352e3132382e302f31392d3234203d3e2039383735.roa (raw, json) Hash identifier: xDpFhjjMngTPpjRB9g/5z8fBoWaGjnEWkp+kcNddHxc= Subject key identifier: 59:89:04:1D:0B:F0:23:C8:F6:72:64:DB:8F:73:11:C8:87:C0:DE:2C Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Certificate serial: 40DA909E6CD53159519FBF6EDC8323B76A3E93DD Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa Signing time: Fri 02 Jan 2026 10:00:02 +0000 ROA not before: Fri 02 Jan 2026 09:55:02 +0000 ROA not after: Fri 01 Jan 2027 10:00:02 +0000 asID: 9875 IP address blocks: 202.95.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:da:90:9e:6c:d5:31:59:51:9f:bf:6e:dc:83:23:b7:6a:3e:93:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Validity Not Before: Jan 2 09:55:02 2026 GMT Not After : Jan 1 10:00:02 2027 GMT Subject: CN=5989041D0BF023C8F67264DB8F7311C887C0DE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1b:fc:df:43:9b:53:ed:4e:85:3f:02:db:6e: f1:6f:26:87:2b:89:43:23:52:32:7c:76:a1:e4:ec: 64:c4:72:bc:de:75:62:a3:57:38:ba:a5:36:ee:02: 37:34:54:57:68:87:bd:e1:8a:2d:3d:49:fa:92:bb: cf:9b:4c:ac:e1:f4:9d:b2:ae:8b:78:9b:95:42:ec: b3:05:13:58:7e:aa:90:15:aa:22:a5:0c:80:3e:6a: 09:03:8b:ac:79:ca:f1:ba:b3:5c:aa:3b:69:d0:7e: d6:bb:f4:7e:34:7e:af:5f:fa:af:f0:6d:ef:3a:00: 9f:96:cc:da:dd:a2:b5:1b:ff:2a:db:76:ce:a2:e2: 18:ae:49:52:53:1b:cb:2d:dd:12:dd:52:50:bc:3b: 01:cd:54:94:7b:4c:f4:a7:70:a8:ce:89:f7:81:d4: 65:7a:66:c5:05:38:67:63:bf:44:cb:21:7c:96:86: cc:de:8b:c6:58:ba:40:95:e1:33:a1:c7:55:6c:b4: eb:fa:ec:12:d8:98:6e:94:c5:69:5f:de:76:23:5d: 46:d2:fd:f0:49:d6:62:e8:83:ac:33:76:33:02:ba: a7:aa:17:3c:b6:49:42:3c:d3:6f:eb:e0:7a:96:24: f8:26:85:38:cf:00:be:84:d4:1f:eb:e1:7e:e6:d7: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:89:04:1D:0B:F0:23:C8:F6:72:64:DB:8F:73:11:C8:87:C0:DE:2C X509v3 Authority Key Identifier: keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230322e39352e3132382e302f31392d3234203d3e2039383735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.95.128.0/19 Signature Algorithm: sha256WithRSAEncryption 5e:0d:96:b9:7f:15:3d:fd:64:e8:d4:b7:a0:ff:00:71:87:c5: 06:fd:d2:c5:a4:27:6a:00:4b:6d:1c:4f:ea:b1:19:13:31:d5: 75:c1:8b:a2:c2:eb:10:d0:fd:4b:7b:b8:26:de:c7:84:b4:5a: 39:5f:58:96:14:c0:1f:b1:d2:32:2d:4d:d8:41:e7:96:fb:b8: 2d:c4:a7:06:2a:00:96:9c:ad:aa:71:e5:ab:0c:e0:fb:5f:80: 87:bf:64:27:15:11:de:8d:c4:1b:6f:ed:a8:6f:45:e1:f1:bf: d7:27:bb:6a:ea:94:94:12:54:32:bd:37:73:6d:01:94:42:b3: 0e:96:1a:c7:c1:b2:03:82:2a:a1:1e:06:32:4a:4b:da:be:95: 5b:54:b0:ca:5d:1e:17:1b:49:85:9b:52:a6:b6:b4:54:90:2e: b3:7c:19:fd:23:92:4a:82:81:62:1a:8a:29:53:82:e7:32:0a: ea:d0:f7:44:50:1d:34:1f:a8:90:f6:7a:31:6c:ac:36:0d:1f: 34:5b:76:6a:1a:a0:90:f3:14:d1:00:dd:51:fa:a9:7d:c3:de: f7:a7:51:b3:a6:52:e8:e9:0c:b6:aa:1d:c1:46:bf:9d:55:5a: 64:20:61:73:19:02:46:cf:0c:fa:9e:1a:dd:8c:51:01:9f:1f: d3:8e:34:2d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQNqQnmzVMVlRn79u3IMjt2o+k90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZG MjhGODA2NjAeFw0yNjAxMDIwOTU1MDJaFw0yNzAxMDExMDAwMDJaMDMxMTAvBgNV BAMTKDU5ODkwNDFEMEJGMDIzQzhGNjcyNjREQjhGNzMxMUM4ODdDMERFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZG/zfQ5tT7U6FPwLbbvFvJocr iUMjUjJ8dqHk7GTEcrzedWKjVzi6pTbuAjc0VFdoh73hii09SfqSu8+bTKzh9J2y rot4m5VC7LMFE1h+qpAVqiKlDIA+agkDi6x5yvG6s1yqO2nQfta79H40fq9f+q/w be86AJ+WzNrdorUb/yrbds6i4hiuSVJTG8st3RLdUlC8OwHNVJR7TPSncKjOifeB 1GV6ZsUFOGdjv0TLIXyWhszei8ZYukCV4TOhx1VstOv67BLYmG6UxWlf3nYjXUbS /fBJ1mLog6wzdjMCuqeqFzy2SUI802/r4HqWJPgmhTjPAL6E1B/r4X7m1yELAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUWYkEHQvwI8j2cmTbj3MRyIfA3iwwHwYDVR0j BBgwFoAU8zEnsiUkVLSRxdyf45N8VvKPgGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMC9GMzMxMjdCMjI1 MjQ1NEI0OTFDNURDOUZFMzkzN0M1NkYyOEY4MDY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMzMTI3QjIyNTI0NTRCNDkxQzVEQzlGRTM5MzdDNTZGMjhG ODA2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2LTAwYTMtNDc3Ni1i ZjNmLTUyMTE5NDYxMDFjMy8wLzMyMzAzMjJlMzkzNTJlMzEzMjM4MmUzMDJmMzEz OTJkMzIzNDIwM2QzZTIwMzkzODM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKX4AwDQYJKoZIhvcN AQELBQADggEBAF4Nlrl/FT39ZOjUt6D/AHGHxQb90sWkJ2oAS20cT+qxGRMx1XXB i6LC6xDQ/Ut7uCbex4S0WjlfWJYUwB+x0jItTdhB55b7uC3EpwYqAJacrapx5asM 4PtfgIe/ZCcVEd6NxBtv7ahvReHxv9cnu2rqlJQSVDK9N3NtAZRCsw6WGsfBsgOC KqEeBjJKS9q+lVtUsMpdHhcbSYWbUqa2tFSQLrN8Gf0jkkqCgWIaiilTgucyCurQ 90RQHTQfqJD2ejFsrDYNHzRbdmoaoJDzFNEA3VH6qX3D3venUbOmUujpDLaqHcFG v51VWmQgYXMZAkbPDPqeGt2MUQGfH9OONC0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:51 2026 by rpki-client