This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa File: 3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa (raw, json) Hash identifier: 8PwAQvSewzdVUf4Jq+quL23phhlsATOC3lb6zK0pxD0= Subject key identifier: F8:23:35:82:E3:F6:E7:28:20:DE:D4:9C:E2:13:99:EB:4C:9F:0D:B7 Certificate issuer: /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Certificate serial: 3F88BC74D1B7CDC4282D2B4B22F32F38CFEBC9CD Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa Signing time: Sun 04 Jan 2026 08:00:02 +0000 ROA not before: Sun 04 Jan 2026 07:55:02 +0000 ROA not after: Sun 03 Jan 2027 08:00:02 +0000 asID: 142375 IP address blocks: 203.145.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 00:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:88:bc:74:d1:b7:cd:c4:28:2d:2b:4b:22:f3:2f:38:cf:eb:c9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336 Validity Not Before: Jan 4 07:55:02 2026 GMT Not After : Jan 3 08:00:02 2027 GMT Subject: CN=F8233582E3F6E72820DED49CE21399EB4C9F0DB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fe:0c:e1:8b:23:0b:ac:3a:ff:2b:81:cb:6c: e1:d6:8c:15:20:b5:24:d1:2f:91:96:0f:4f:10:46: 9a:22:7e:d5:3c:80:cc:d6:a1:9f:21:6a:ba:e0:38: b2:41:92:b6:14:61:40:4a:a4:42:98:91:05:9e:8d: 19:cf:3f:af:6c:18:37:77:56:50:61:48:3b:e0:fd: e8:28:19:c5:2d:ec:99:c0:5e:eb:f4:7c:81:74:20: 96:18:85:d2:05:68:ac:a3:d7:87:df:c5:ac:8c:a5: 4b:e9:5c:f2:bc:95:67:57:72:25:7d:a3:5f:2f:44: 6e:a8:41:57:ad:56:4d:4b:82:9a:f2:51:05:66:ed: f5:27:f2:a2:92:19:69:78:31:42:1f:fb:fe:ea:df: d7:9b:a1:55:00:64:cb:d2:23:63:de:22:d6:28:2c: 56:46:00:1c:44:4c:e0:20:88:d9:1e:79:01:6f:6f: 14:52:cf:66:0f:15:a6:13:e7:22:07:09:3b:ac:f6: e3:d4:07:f2:e6:1c:14:11:56:ae:d7:d1:b4:e3:e7: 07:dd:8e:93:23:d9:c0:6e:fe:d5:d8:43:5b:6c:99: 8d:fc:ee:7e:73:83:1f:b1:36:7d:93:fa:44:6c:bd: 2e:dd:55:fa:85:fc:a7:c3:85:c0:ad:f8:79:ba:85: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:35:82:E3:F6:E7:28:20:DE:D4:9C:E2:13:99:EB:4C:9F:0D:B7 X509v3 Authority Key Identifier: keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35382e302f32342d3234203d3e20313432333735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.145.58.0/24 Signature Algorithm: sha256WithRSAEncryption 92:5b:c9:94:1b:a8:34:20:7f:84:ba:5f:4a:b5:0f:a5:a3:b2: 1a:68:cb:c3:05:a5:af:38:6d:49:6b:b2:2e:3d:89:20:5d:85: c5:ed:a1:a3:86:15:8b:5a:f1:dd:c7:40:3b:d6:52:61:3b:fd: 11:f7:9d:51:2a:c6:8a:eb:fc:07:44:e6:68:47:a7:fb:2b:7e: e7:b6:24:4e:be:d5:03:75:01:e1:c1:f6:77:78:94:39:09:54: db:5f:d3:3e:79:22:9e:33:06:2d:40:1d:34:c3:21:58:b1:21: 4d:81:df:9e:fb:df:85:22:99:89:c6:fe:f8:a4:52:96:03:db: 84:73:25:08:ba:e0:15:93:f7:94:14:1e:85:d8:08:fe:fd:35: 37:9d:17:78:70:49:a6:6a:64:34:70:37:03:8c:60:9e:40:cc: 0e:8d:fc:ac:3b:14:62:f5:30:3f:fd:fc:bf:67:dd:d1:44:43: dd:87:33:f3:0d:ba:c5:db:5e:47:1b:89:e9:65:5c:d3:a4:66: 4c:12:9b:28:84:35:37:23:7e:67:82:cf:91:9c:a2:2f:7d:d5: eb:83:98:68:2b:69:9d:69:98:3c:8d:e5:3f:26:fe:c2:e4:5c: 5b:be:7b:31:77:7d:1d:f8:5a:be:95:c2:2a:ba:e6:0b:af:79: 9e:1c:0c:01 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP4i8dNG3zcQoLStLIvMvOM/ryc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFC NTMwNjMzNjAeFw0yNjAxMDQwNzU1MDJaFw0yNzAxMDMwODAwMDJaMDMxMTAvBgNV BAMTKEY4MjMzNTgyRTNGNkU3MjgyMERFRDQ5Q0UyMTM5OUVCNEM5RjBEQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/gzhiyMLrDr/K4HLbOHWjBUg tSTRL5GWD08QRpoiftU8gMzWoZ8harrgOLJBkrYUYUBKpEKYkQWejRnPP69sGDd3 VlBhSDvg/egoGcUt7JnAXuv0fIF0IJYYhdIFaKyj14ffxayMpUvpXPK8lWdXciV9 o18vRG6oQVetVk1LgpryUQVm7fUn8qKSGWl4MUIf+/7q39eboVUAZMvSI2PeItYo LFZGABxETOAgiNkeeQFvbxRSz2YPFaYT5yIHCTus9uPUB/LmHBQRVq7X0bTj5wfd jpMj2cBu/tXYQ1tsmY387n5zgx+xNn2T+kRsvS7dVfqF/KfDhcCt+Hm6hUtfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+CM1guP25ygg3tSc4hOZ60yfDbcwHwYDVR0j BBgwFoAUwvlWsSaIS179jdrc6w4z4bUwYzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmFhM2JlYi01NzYxLTRjMzQtODhkMy0wMTVjY2M2NDAwMmYvMC9DMkY5NTZCMTI2 ODg0QjVFRkQ4RERBRENFQjBFMzNFMUI1MzA2MzM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJGOTU2QjEyNjg4NEI1RUZEOEREQURDRUIwRTMzRTFCNTMw NjMzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2YWEzYmViLTU3NjEtNGMzNC04 OGQzLTAxNWNjYzY0MDAyZi8wLzMyMzAzMzJlMzEzNDM1MmUzNTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy5E6MA0GCSqG SIb3DQEBCwUAA4IBAQCSW8mUG6g0IH+Eul9KtQ+lo7IaaMvDBaWvOG1Ja7IuPYkg XYXF7aGjhhWLWvHdx0A71lJhO/0R951RKsaK6/wHROZoR6f7K37ntiROvtUDdQHh wfZ3eJQ5CVTbX9M+eSKeMwYtQB00wyFYsSFNgd+e+9+FIpmJxv74pFKWA9uEcyUI uuAVk/eUFB6F2Aj+/TU3nRd4cEmmamQ0cDcDjGCeQMwOjfysOxRi9TA//fy/Z93R REPdhzPzDbrF215HG4npZVzTpGZMEpsohDU3I35ngs+RnKIvfdXrg5hoK2mdaZg8 jeU/Jv7C5Fxbvnsxd30d+Fq+lcIquuYLr3meHAwB -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:56 2026 by rpki-client