This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa File: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (raw, json) Hash identifier: rg9lpQpQ+ZgL/aBtSdpzREEnhOBkrouF51BUGtJjEn0= Subject key identifier: 16:D5:47:06:4E:99:7A:63:CA:0C:A7:9E:B9:09:06:97:51:9F:91:25 Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Certificate serial: 4F8F8C824E1286D451D2A782380BF86C356C845E Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa Signing time: Wed 14 Jan 2026 04:00:02 +0000 ROA not before: Wed 14 Jan 2026 03:55:02 +0000 ROA not after: Wed 13 Jan 2027 04:00:02 +0000 asID: 24207 IP address blocks: 203.153.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8f:8c:82:4e:12:86:d4:51:d2:a7:82:38:0b:f8:6c:35:6c:84:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F Validity Not Before: Jan 14 03:55:02 2026 GMT Not After : Jan 13 04:00:02 2027 GMT Subject: CN=16D547064E997A63CA0CA79EB9090697519F9125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:c0:a4:17:5c:f7:61:d7:47:a3:ca:77:fa: 20:3d:39:3a:02:c0:0f:8d:a2:cd:f1:c3:44:af:05: 35:37:3f:f9:71:66:5a:9a:0e:2c:b0:8d:49:55:fe: 8b:b8:e6:30:40:d0:32:f1:ef:6f:0a:51:3c:44:81: 34:f5:52:82:83:75:98:ae:1d:75:8d:9f:bb:3c:c3: 53:3d:71:49:29:5b:2a:c3:b3:b3:a1:e6:bd:1b:29: a4:d6:a8:a7:a1:dc:26:88:3d:e7:c0:b7:53:f3:88: f7:39:17:29:b1:0e:74:a3:0d:2f:86:81:ab:c5:22: f3:e7:8e:fe:de:ce:d1:32:3e:66:0f:e3:94:f7:0a: a0:48:d1:54:89:9a:ea:36:fa:87:52:3a:ce:7f:52: 66:7f:0a:34:56:2c:c9:3a:2d:10:0a:eb:cf:e7:4a: 43:0d:d0:35:ba:c1:af:76:35:ae:c2:37:80:91:e5: 99:dc:4a:f7:16:c7:c4:6b:5a:c0:0f:3d:9f:4f:5f: fb:d9:34:ac:13:c1:9a:79:83:86:f6:8d:f1:ad:25: 5a:ba:9c:de:48:84:77:5c:d2:6a:66:ca:0b:24:b5: 05:f7:3e:d7:93:b9:f3:e9:fc:37:fb:14:d7:ae:81: fb:b5:65:9a:93:1c:94:c8:c0:3b:4f:15:45:84:86: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D5:47:06:4E:99:7A:63:CA:0C:A7:9E:B9:09:06:97:51:9F:91:25 X509v3 Authority Key Identifier: keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3230332e3135332e39362e302f32302d3234203d3e203234323037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.153.96.0/20 Signature Algorithm: sha256WithRSAEncryption bf:49:6b:92:ff:78:e4:6b:d8:86:81:4a:44:11:1e:ec:bd:dc: 82:16:27:8d:79:f9:bb:cf:22:90:3e:95:9b:ac:2c:d2:3f:40: 65:f1:45:4d:77:2f:a8:9d:79:a0:11:63:62:2d:4c:24:29:33: f3:a4:72:0c:39:d8:8a:b0:2a:0b:8a:67:57:a7:57:ce:a5:97: 23:a3:51:c8:e9:49:7b:d6:58:50:2e:27:fc:bb:74:11:fe:67: c3:77:c9:be:29:9d:b0:18:f2:48:14:fc:e4:1d:7e:a1:52:63: 73:8e:94:32:40:a8:d8:05:da:94:b3:d2:20:49:09:69:5b:e4: ad:57:61:92:b4:e5:48:76:40:0a:0c:e2:26:14:b2:fd:9c:ea: 50:6f:22:1c:da:65:34:b5:1c:a7:cb:42:79:1c:1e:d9:56:f2: 04:27:41:18:c0:50:00:cb:64:5d:79:9b:1c:e1:6b:84:c3:17: 91:5e:67:79:3f:d1:bd:3e:39:7a:5f:d9:28:0b:20:f7:9b:43: a8:51:b3:1c:93:48:27:b0:2f:fb:e3:ae:76:b7:b6:37:f7:e5: 38:02:8c:de:1d:05:78:f4:40:92:33:8a:ca:b8:b7:9c:87:40: 2e:9a:d4:a7:61:5f:19:25:7f:ef:95:2a:f0:97:b4:34:1f:30: 89:f6:f2:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUT4+Mgk4ShtRR0qeCOAv4bDVshF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVC RjBBRkIwRjAeFw0yNjAxMTQwMzU1MDJaFw0yNzAxMTMwNDAwMDJaMDMxMTAvBgNV BAMTKDE2RDU0NzA2NEU5OTdBNjNDQTBDQTc5RUI5MDkwNjk3NTE5RjkxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZMCkF1z3YddHo8p3+iA9OToC wA+Nos3xw0SvBTU3P/lxZlqaDiywjUlV/ou45jBA0DLx728KUTxEgTT1UoKDdZiu HXWNn7s8w1M9cUkpWyrDs7Oh5r0bKaTWqKeh3CaIPefAt1PziPc5FymxDnSjDS+G gavFIvPnjv7eztEyPmYP45T3CqBI0VSJmuo2+odSOs5/UmZ/CjRWLMk6LRAK68/n SkMN0DW6wa92Na7CN4CR5ZncSvcWx8RrWsAPPZ9PX/vZNKwTwZp5g4b2jfGtJVq6 nN5IhHdc0mpmygsktQX3PteTufPp/Df7FNeugfu1ZZqTHJTIwDtPFUWEhqv1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUFtVHBk6ZemPKDKeeuQkGl1GfkSUwHwYDVR0j BBgwFoAUPHkP5KuCosFQF9JlcUsSRb8K+w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzdlODA4MS02M2FmLTQ5ZTctOTY0Ni03NmMyNWE1ZTk3Y2EvMC8zQzc5MEZFNEFC ODJBMkMxNTAxN0QyNjU3MTRCMTI0NUJGMEFGQjBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M3OTBGRTRBQjgyQTJDMTUwMTdEMjY1NzE0QjEyNDVCRjBB RkIwRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjN2U4MDgxLTYzYWYtNDllNy05 NjQ2LTc2YzI1YTVlOTdjYS8wLzMyMzAzMzJlMzEzNTMzMmUzOTM2MmUzMDJmMzIz MDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMuZYDANBgkqhkiG 9w0BAQsFAAOCAQEAv0lrkv945GvYhoFKRBEe7L3cghYnjXn5u88ikD6Vm6ws0j9A ZfFFTXcvqJ15oBFjYi1MJCkz86RyDDnYirAqC4pnV6dXzqWXI6NRyOlJe9ZYUC4n /Lt0Ef5nw3fJvimdsBjySBT85B1+oVJjc46UMkCo2AXalLPSIEkJaVvkrVdhkrTl SHZACgziJhSy/ZzqUG8iHNplNLUcp8tCeRwe2VbyBCdBGMBQAMtkXXmbHOFrhMMX kV5neT/RvT45el/ZKAsg95tDqFGzHJNIJ7Av++Oudre2N/flOAKM3h0FePRAkjOK yri3nIdALprUp2FfGSV/75Uq8Je0NB8wifbyzg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:04:22 2026 by rpki-client