This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
File: 3230322e35322e3134302e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier: OsKe0Kd5H+cGfVTzKHXPxDzQtoqEpS1qzPCWtVfHK8o=
Subject key identifier: 58:11:13:83:A4:21:BF:79:33:EA:2F:E2:96:4E:A1:9E:35:21:F3:40
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 065A22AF098DAD7261E0A072C471615F87A259AA
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
Signing time: Wed 03 Sep 2025 09:01:07 +0000
ROA not before: Wed 03 Sep 2025 08:56:07 +0000
ROA not after: Wed 02 Sep 2026 09:01:07 +0000
asID: 46061
IP address blocks: 202.52.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5a:22:af:09:8d:ad:72:61:e0:a0:72:c4:71:61:5f:87:a2:59:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Sep 3 08:56:07 2025 GMT
Not After : Sep 2 09:01:07 2026 GMT
Subject: CN=58111383A421BF7933EA2FE2964EA19E3521F340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:fa:b6:32:52:f3:2b:51:91:c8:6e:ad:05:
d5:ac:9a:3e:0b:c7:2b:35:f7:30:be:d4:95:f4:16:
a6:53:df:40:f4:de:6f:2b:48:d3:6d:3e:76:da:9a:
76:ec:46:16:d6:a0:b5:aa:94:f7:e1:14:93:e6:f8:
4d:62:83:68:15:d1:42:46:39:12:10:0b:a6:34:4c:
81:92:85:d9:c0:a3:82:6e:3e:0c:73:06:eb:84:0c:
1d:c1:de:4a:6a:65:f9:0f:63:d4:0e:15:d5:09:33:
eb:53:f7:0f:6e:fc:25:20:1a:5f:ba:32:e6:63:6b:
be:47:02:d4:d4:c0:67:2c:58:f5:7c:a3:c6:c2:5c:
dc:6b:51:cd:f5:f2:8f:56:02:93:7e:f2:18:d6:93:
5e:85:ba:8e:f9:2f:80:12:63:96:32:77:2a:50:8b:
5d:91:43:4c:4e:a6:a3:6c:20:5d:06:0d:92:01:9f:
eb:cb:a5:21:06:32:dd:7f:fc:77:24:d7:8f:95:0f:
19:59:01:45:d1:e5:44:1c:a3:2b:ff:38:e7:a9:7a:
a7:1a:9c:d2:3c:60:1e:28:c4:e2:81:73:51:b3:41:
ce:3f:e6:27:dd:49:59:ab:b8:d3:dd:fd:c7:26:c9:
b3:1a:a4:69:0a:c2:64:f8:22:5b:c6:fb:33:67:f7:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:11:13:83:A4:21:BF:79:33:EA:2F:E2:96:4E:A1:9E:35:21:F3:40
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32332d3233203d3e203436303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.140.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:37:37:b8:77:a6:06:bf:3e:c9:99:c1:5d:dc:49:8d:0e:42:
61:9c:9f:c1:fb:8e:63:9d:39:c4:8f:8b:89:83:d4:c2:a1:c4:
9a:a2:e4:db:74:08:d7:a5:f1:fb:be:e3:a8:20:df:5e:ef:7a:
83:d0:f8:7e:34:56:8d:dc:89:d7:05:aa:42:d6:14:b5:56:49:
59:06:78:01:e3:ac:cd:bd:15:98:1b:97:c1:3f:d7:b5:87:33:
a2:11:6c:db:18:f6:0f:2b:5a:54:02:48:86:b3:a1:7d:a3:e0:
95:77:11:4c:d9:6c:ad:87:32:64:fa:50:0c:ac:4c:d8:fd:4b:
b3:c2:f3:83:f6:f9:ab:c8:11:dd:a3:8c:b8:30:7d:32:cb:2b:
ec:d2:48:3f:39:7b:10:39:2f:ee:5b:9d:32:2c:cf:b5:3d:a4:
96:fd:fe:fa:25:9c:f0:c7:37:0f:a5:50:b4:5c:38:e0:8f:52:
bd:46:c5:0f:ba:56:35:a2:b3:45:c7:0d:ae:42:4b:cd:e2:fd:
b3:1c:00:01:0f:93:34:f4:12:67:8b:9d:1c:d7:58:9c:ad:be:
34:6b:2b:7b:d8:ba:a1:c4:2c:09:b5:2e:1d:8b:20:ae:f0:7d:
e6:bb:05:eb:1c:38:fd:ea:c9:c9:c6:99:d1:cd:1a:fc:7f:6e:
f4:43:1a:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBloirwmNrXJh4KByxHFhX4eiWaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3
RjY4QTY0NzAeFw0yNTA5MDMwODU2MDdaFw0yNjA5MDIwOTAxMDdaMDMxMTAvBgNV
BAMTKDU4MTExMzgzQTQyMUJGNzkzM0VBMkZFMjk2NEVBMTlFMzUyMUYzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/fq2MlLzK1GRyG6tBdWsmj4L
xys19zC+1JX0FqZT30D03m8rSNNtPnbamnbsRhbWoLWqlPfhFJPm+E1ig2gV0UJG
ORIQC6Y0TIGShdnAo4JuPgxzBuuEDB3B3kpqZfkPY9QOFdUJM+tT9w9u/CUgGl+6
MuZja75HAtTUwGcsWPV8o8bCXNxrUc318o9WApN+8hjWk16Fuo75L4ASY5YydypQ
i12RQ0xOpqNsIF0GDZIBn+vLpSEGMt1//Hck14+VDxlZAUXR5UQcoyv/OOepeqca
nNI8YB4oxOKBc1GzQc4/5ifdSVmruNPd/ccmybMapGkKwmT4IlvG+zNn9/LtAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWBETg6Qhv3kz6i/ilk6hnjUh80AwHwYDVR0j
BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw
OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4
QTY0Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i
OWY4LWQ2ZTc3YjI5YmNjNi8wLzMyMzAzMjJlMzUzMjJlMzEzNDMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzQzNjMwMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAco0jDANBgkqhkiG
9w0BAQsFAAOCAQEATDc3uHemBr8+yZnBXdxJjQ5CYZyfwfuOY505xI+LiYPUwqHE
mqLk23QI16Xx+77jqCDfXu96g9D4fjRWjdyJ1wWqQtYUtVZJWQZ4AeOszb0VmBuX
wT/XtYczohFs2xj2DytaVAJIhrOhfaPglXcRTNlsrYcyZPpQDKxM2P1Ls8Lzg/b5
q8gR3aOMuDB9Mssr7NJIPzl7EDkv7ludMizPtT2klv3++iWc8Mc3D6VQtFw44I9S
vUbFD7pWNaKzRccNrkJLzeL9sxwAAQ+TNPQSZ4udHNdYnK2+NGsre9i6ocQsCbUu
HYsgrvB95rsF6xw4/erJycaZ0c0a/H9u9EMaFw==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:17 2025 by rpki-client