This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa File: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (raw, json) Hash identifier: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo= Subject key identifier: 3C:CE:E3:B7:8D:4A:70:6D:05:B6:06:78:B7:66:88:8A:65:F8:D5:DE Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 13C4A02F8DEB1655B045BB4A0A3D52CE40A46C2D Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa Signing time: Wed 26 Nov 2025 08:00:00 +0000 ROA not before: Wed 26 Nov 2025 07:55:00 +0000 ROA not after: Wed 25 Nov 2026 08:00:00 +0000 asID: 55696 IP address blocks: 202.50.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c4:a0:2f:8d:eb:16:55:b0:45:bb:4a:0a:3d:52:ce:40:a4:6c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Nov 26 07:55:00 2025 GMT Not After : Nov 25 08:00:00 2026 GMT Subject: CN=3CCEE3B78D4A706D05B60678B766888A65F8D5DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:a9:24:11:28:f9:19:0f:c7:08:29:aa:54: 27:b9:b4:0f:1f:0e:df:1d:55:a1:02:75:a1:d8:92: bc:b5:b2:67:db:79:80:55:b1:f6:9a:b1:2d:f0:4e: 32:f3:cf:3f:d0:1c:97:c9:f2:59:a4:26:1d:1b:70: 10:23:62:11:50:b3:b5:96:bd:bb:40:e1:82:d8:ca: 01:d6:98:42:b8:fe:ea:60:af:19:fa:41:d5:5c:a3: c7:fc:9a:36:94:6d:16:2d:02:b1:b9:23:4c:e9:7d: 49:5a:cb:5a:21:89:53:9a:fb:af:f3:36:7a:b4:96: 68:48:7a:08:f2:1b:1a:aa:5f:6a:f9:78:0f:3f:87: d5:2b:14:82:92:5b:61:58:31:ae:c7:24:af:c8:44: c3:5c:e5:77:89:5a:8b:1c:05:10:3d:e9:bf:78:c2: ce:17:fe:c4:75:ed:2c:1b:e6:6d:83:52:63:cf:b7: e8:70:99:d6:30:66:6c:1c:b0:21:4d:9b:4d:5f:c3: 14:2f:49:cc:3e:90:47:29:d9:ae:6f:16:db:41:a4: e6:2d:19:4c:89:31:c9:10:ba:c0:5b:ef:c5:72:bd: a3:51:32:85:03:d1:ce:10:8a:2c:76:e4:5a:00:f4: 92:8b:ec:e2:13:9b:74:7b:6c:6f:11:6d:58:fe:14: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CE:E3:B7:8D:4A:70:6D:05:B6:06:78:B7:66:88:8A:65:F8:D5:DE X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230312e302f32342d3234203d3e203535363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.50.201.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:13:c3:4e:21:38:20:ae:49:d9:d1:6a:2a:39:60:a3:dc:35: 00:3e:b9:0c:7a:d7:f7:9c:6e:30:73:a7:ac:8b:a2:d2:6f:58: cc:45:4b:ac:b0:33:1b:a0:3a:9f:64:d1:d0:ed:27:67:55:9c: 8c:88:97:32:b7:63:f6:17:35:71:54:ca:60:82:d2:a0:ce:46: 0f:c0:ed:aa:c3:3c:2c:30:3d:08:ef:ad:79:95:26:7a:c5:61: 9b:a7:60:4e:3d:ad:0c:25:69:96:3e:b3:a3:97:a8:70:a9:8e: 21:00:21:1c:3e:f9:88:19:7b:35:94:33:f2:73:fb:35:7c:af: 8f:47:5c:5e:3f:cc:27:b1:6e:05:0e:e8:96:19:2f:9e:8e:2b: bb:08:8d:72:a6:eb:01:ca:a6:e3:bc:28:e1:bc:16:da:f3:ca: e1:f5:22:38:55:e7:43:fc:d6:98:74:6d:05:a1:55:75:ca:8f: 34:2b:06:05:75:f0:3b:f4:3f:4f:90:5e:70:ab:30:9d:0b:ca: 4e:43:9d:8e:23:95:cf:85:3b:c8:71:27:f4:e0:1c:bf:28:86: d3:16:7a:3d:3b:fc:9a:7c:38:2f:4c:69:d1:5a:27:1f:01:4d: 00:60:3b:e5:d1:05:71:b7:8e:aa:f7:f5:71:11:01:4b:e2:20: f4:2b:80:f4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUE8SgL43rFlWwRbtKCj1SzkCkbC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTExMjYwNzU1MDBaFw0yNjExMjUwODAwMDBaMDMxMTAvBgNV BAMTKDNDQ0VFM0I3OEQ0QTcwNkQwNUI2MDY3OEI3NjY4ODhBNjVGOEQ1REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSqkkESj5GQ/HCCmqVCe5tA8f Dt8dVaECdaHYkry1smfbeYBVsfaasS3wTjLzzz/QHJfJ8lmkJh0bcBAjYhFQs7WW vbtA4YLYygHWmEK4/upgrxn6QdVco8f8mjaUbRYtArG5I0zpfUlay1ohiVOa+6/z Nnq0lmhIegjyGxqqX2r5eA8/h9UrFIKSW2FYMa7HJK/IRMNc5XeJWoscBRA96b94 ws4X/sR17Swb5m2DUmPPt+hwmdYwZmwcsCFNm01fwxQvScw+kEcp2a5vFttBpOYt GUyJMckQusBb78VyvaNRMoUD0c4Qiix25FoA9JKL7OITm3R7bG8RbVj+FCxtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPM7jt41KcG0FtgZ4t2aIimX41d4wHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVlLTdhYTItNGJlNC1i ZjM1LWNkYmQxMWQ3OTUwNy8wLzMyMzAzMjJlMzUzMDJlMzIzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoyyTANBgkqhkiG 9w0BAQsFAAOCAQEAfRPDTiE4IK5J2dFqKjlgo9w1AD65DHrX95xuMHOnrIui0m9Y zEVLrLAzG6A6n2TR0O0nZ1WcjIiXMrdj9hc1cVTKYILSoM5GD8DtqsM8LDA9CO+t eZUmesVhm6dgTj2tDCVplj6zo5eocKmOIQAhHD75iBl7NZQz8nP7NXyvj0dcXj/M J7FuBQ7olhkvno4ruwiNcqbrAcqm47wo4bwW2vPK4fUiOFXnQ/zWmHRtBaFVdcqP NCsGBXXwO/Q/T5BecKswnQvKTkOdjiOVz4U7yHEn9OAcvyiG0xZ6PTv8mnw4L0xp 0VonHwFNAGA75dEFcbeOqvf1cREBS+Ig9CuA9A== -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:17 2025 by rpki-client