This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa File: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (raw, json) Hash identifier: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM= Subject key identifier: C9:D7:E3:7E:A6:17:62:C9:90:49:F0:7E:37:3D:46:BB:88:2E:95:70 Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 666226ADB250D4B0AC5B8AA3D5E72B77A1D61CA8 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa Signing time: Wed 26 Nov 2025 07:00:00 +0000 ROA not before: Wed 26 Nov 2025 06:55:00 +0000 ROA not after: Wed 25 Nov 2026 07:00:00 +0000 asID: 55696 IP address blocks: 202.50.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:62:26:ad:b2:50:d4:b0:ac:5b:8a:a3:d5:e7:2b:77:a1:d6:1c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Nov 26 06:55:00 2025 GMT Not After : Nov 25 07:00:00 2026 GMT Subject: CN=C9D7E37EA61762C99049F07E373D46BB882E9570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:51:d7:47:4f:96:1c:bc:6c:b4:e4:21:ef: 6a:cc:12:b9:95:65:82:53:31:13:3b:02:50:4a:5a: 03:67:29:17:eb:37:f8:f2:b7:66:0d:ac:90:77:4f: 5b:41:22:2d:d9:86:bc:c5:1a:b9:9c:51:72:c0:67: 56:fc:9b:94:fe:9f:92:e6:fa:00:07:34:8b:99:e5: af:0b:92:0f:7b:0d:ff:66:be:05:4b:54:39:21:95: f0:8b:8a:b7:22:19:23:cc:dd:db:a3:31:2a:4e:0e: 4d:11:df:32:09:6e:df:ba:3d:ea:6f:0a:a5:a4:0e: c3:9b:19:dc:ef:f7:da:68:88:09:62:ba:d3:59:ee: 20:9d:40:9f:ea:9c:ce:4c:3f:5b:57:c4:bd:5c:92: dc:4f:bb:40:6a:7a:5a:35:96:9c:b0:63:03:20:b6: e1:fe:0b:eb:cf:4f:e0:8c:b6:6f:d8:66:cf:6a:10: 16:82:a2:c8:86:0b:79:de:fa:4d:8b:7d:93:66:03: b0:45:b9:31:34:5a:94:e1:cb:4c:3e:b4:99:66:33: a7:7d:b8:a3:4f:ac:f3:5f:25:e3:e8:1b:b6:26:af: 8b:f3:a8:74:b4:53:05:27:0d:76:37:ea:93:2a:13: 2b:d7:24:db:76:58:17:fb:4f:36:83:0c:e0:8b:da: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D7:E3:7E:A6:17:62:C9:90:49:F0:7E:37:3D:46:BB:88:2E:95:70 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/3230322e35302e3230332e302f32342d3234203d3e203535363936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.50.203.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:47:4d:a0:33:97:16:55:2b:f6:95:ef:91:db:62:75:df:a3: 9d:9b:95:39:7b:1a:5f:0f:28:21:af:ef:24:af:bc:3d:97:fc: 74:5a:06:86:83:8b:7e:4c:84:66:ed:11:a8:e5:26:cc:5c:8c: 91:d8:c2:13:a0:51:f1:f1:03:9c:c1:25:7f:52:3b:7b:63:6a: fc:06:df:b8:bd:58:9b:f2:e3:6a:ea:ce:b5:17:0e:25:18:39: fe:d0:92:10:b7:44:99:fb:de:92:6d:39:07:c1:20:9d:ac:f0: 89:64:fe:3f:52:69:ce:d9:bb:a2:30:bb:e6:26:73:ec:6f:0d: 68:fb:d1:8f:3e:91:3b:1e:ad:49:ec:9d:69:e5:c5:df:13:20: 5a:33:e8:ec:9d:99:6f:a5:9d:bc:70:88:08:fb:12:15:92:de: 85:f6:0e:8f:03:d6:e8:c8:df:1a:86:72:54:27:ad:8e:91:33: 0c:80:24:79:a3:a2:de:10:b1:4c:7b:fa:fa:93:56:1c:5a:98: 90:da:6a:02:2b:80:6a:c2:ff:6c:25:d7:c6:69:12:e6:3c:30: e1:c0:c5:1c:7f:75:0a:4b:4c:76:e9:42:21:bd:44:3f:40:21: 6c:81:44:85:6e:f2:9f:df:10:4e:53:04:e9:61:51:48:99:1b: d2:c5:c6:cb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUZmImrbJQ1LCsW4qj1ecrd6HWHKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTExMjYwNjU1MDBaFw0yNjExMjUwNzAwMDBaMDMxMTAvBgNV BAMTKEM5RDdFMzdFQTYxNzYyQzk5MDQ5RjA3RTM3M0Q0NkJCODgyRTk1NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnFHXR0+WHLxstOQh72rMErmV ZYJTMRM7AlBKWgNnKRfrN/jyt2YNrJB3T1tBIi3ZhrzFGrmcUXLAZ1b8m5T+n5Lm +gAHNIuZ5a8Lkg97Df9mvgVLVDkhlfCLirciGSPM3dujMSpODk0R3zIJbt+6Pepv CqWkDsObGdzv99poiAliutNZ7iCdQJ/qnM5MP1tXxL1cktxPu0Bqelo1lpywYwMg tuH+C+vPT+CMtm/YZs9qEBaCosiGC3ne+k2LfZNmA7BFuTE0WpThy0w+tJlmM6d9 uKNPrPNfJePoG7Ymr4vzqHS0UwUnDXY36pMqEyvXJNt2WBf7TzaDDOCL2pW1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUydfjfqYXYsmQSfB+Nz1Gu4gulXAwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyODgwZGVlLTdhYTItNGJlNC1i ZjM1LWNkYmQxMWQ3OTUwNy8wLzMyMzAzMjJlMzUzMDJlMzIzMDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMoyyzANBgkqhkiG 9w0BAQsFAAOCAQEAekdNoDOXFlUr9pXvkdtidd+jnZuVOXsaXw8oIa/vJK+8PZf8 dFoGhoOLfkyEZu0RqOUmzFyMkdjCE6BR8fEDnMElf1I7e2Nq/AbfuL1Ym/LjaurO tRcOJRg5/tCSELdEmfvekm05B8EgnazwiWT+P1Jpztm7ojC75iZz7G8NaPvRjz6R Ox6tSeydaeXF3xMgWjPo7J2Zb6WdvHCICPsSFZLehfYOjwPW6MjfGoZyVCetjpEz DIAkeaOi3hCxTHv6+pNWHFqYkNpqAiuAasL/bCXXxmkS5jww4cDFHH91CktMdulC Ib1EP0AhbIFEhW7yn98QTlME6WFRSJkb0sXGyw== -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:57 2025 by rpki-client