This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa File: 3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (raw, json) Hash identifier: kDBhP+FyfiW8U5t0Hs9MXmhAuLZWtu0OwR+kZ+JvroA= Subject key identifier: D8:F8:BD:01:C0:DC:F7:4D:AE:E0:FA:15:E2:B4:5C:AC:A5:5C:4D:2A Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 63C91310584ECF436626926F88F3D029749274E4 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa Signing time: Mon 02 Jun 2025 02:03:53 +0000 ROA not before: Mon 02 Jun 2025 01:58:53 +0000 ROA not after: Mon 01 Jun 2026 02:03:53 +0000 asID: 24202 IP address blocks: 202.87.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c9:13:10:58:4e:cf:43:66:26:92:6f:88:f3:d0:29:74:92:74:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Jun 2 01:58:53 2025 GMT Not After : Jun 1 02:03:53 2026 GMT Subject: CN=D8F8BD01C0DCF74DAEE0FA15E2B45CACA55C4D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f7:2e:e8:a9:b3:02:3b:a1:89:bf:c1:89:c3: 7d:8c:86:30:26:84:39:58:a3:a6:66:1e:03:64:a0: bf:1a:5a:f5:cc:1f:a0:fb:32:91:91:cb:89:ad:b6: 7e:dd:14:0e:65:1a:49:54:2e:52:28:67:ea:21:a7: 32:e9:8b:86:f1:29:48:ff:01:44:1f:4b:97:1c:26: d9:11:07:91:45:f5:f9:72:79:51:80:07:a0:ff:49: e6:d8:5e:58:e0:9f:57:ff:f8:d9:f9:3c:0b:2c:b7: d3:99:48:90:81:90:8b:86:78:b1:a8:22:57:17:6e: 98:9f:7a:73:d0:ce:90:72:f6:d5:08:02:0a:8c:73: 67:6e:5a:13:ef:df:04:45:ed:95:7f:28:af:de:b4: ef:3e:55:3d:65:18:86:be:6d:e6:02:7f:67:dc:56: 72:e3:54:d8:0a:93:f2:f4:31:c7:db:b7:39:a8:f9: 57:f5:e7:13:2a:70:73:e6:fb:9a:01:9b:12:91:3e: 6f:77:70:74:fa:41:20:1d:d3:4a:4c:a5:69:48:06: c7:9e:33:9c:7d:5b:b8:29:ce:b5:c7:6b:65:f7:00: f8:aa:f6:47:13:97:5d:25:07:89:97:42:63:a7:75: 32:1b:11:68:24:29:05:45:5c:a7:60:94:2c:32:11: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:BD:01:C0:DC:F7:4D:AE:E0:FA:15:E2:B4:5C:AC:A5:5C:4D:2A X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 Signature Algorithm: sha256WithRSAEncryption 91:45:21:26:2c:ae:4f:06:79:ab:6a:2d:c3:01:c8:ac:54:3b: 85:4a:9b:22:ef:b6:26:17:da:7b:a6:b5:4f:f5:e3:8b:55:bf: 48:0c:95:81:ec:e7:9f:23:09:db:a5:5c:5a:6c:cc:0a:c5:f8: f0:85:b5:ff:40:d6:a3:13:00:a1:27:40:82:b3:35:13:cb:a5: 94:6b:54:09:7d:0a:f0:b7:02:dd:79:bb:73:c7:bc:85:08:08: 93:b8:fc:59:6e:03:c8:2b:30:38:7b:2e:3a:b0:55:3d:aa:2a: c2:5b:fa:97:e4:df:78:a4:a1:37:3e:89:35:c7:85:eb:56:59: 12:82:a1:d5:4d:f6:8c:16:a5:15:0b:e1:57:0d:35:56:98:15: 1d:72:95:59:cc:05:38:97:b7:a2:e1:f9:eb:45:72:1f:c2:81: 86:fe:3b:9e:67:bf:fc:31:8d:d5:e8:49:66:bf:4f:a6:80:f5: 8f:2d:83:ab:35:72:ea:f4:fb:0c:37:c1:d8:ed:89:6e:3f:58: 71:ef:d8:39:ed:f8:56:ec:92:6f:5e:0a:1f:92:d6:6b:d4:c2: 3e:84:56:aa:22:20:e9:8e:84:66:a4:97:9d:7c:a6:ae:7e:d5: ac:03:39:1e:5d:6f:e7:7e:69:70:37:20:6f:72:3d:3b:cc:ea: 65:31:c2:7f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUY8kTEFhOz0NmJpJviPPQKXSSdOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTA2MDIwMTU4NTNaFw0yNjA2MDEwMjAzNTNaMDMxMTAvBgNV BAMTKEQ4RjhCRDAxQzBEQ0Y3NERBRUUwRkExNUUyQjQ1Q0FDQTU1QzREMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN9y7oqbMCO6GJv8GJw32MhjAm hDlYo6ZmHgNkoL8aWvXMH6D7MpGRy4mttn7dFA5lGklULlIoZ+ohpzLpi4bxKUj/ AUQfS5ccJtkRB5FF9flyeVGAB6D/SebYXljgn1f/+Nn5PAsst9OZSJCBkIuGeLGo IlcXbpifenPQzpBy9tUIAgqMc2duWhPv3wRF7ZV/KK/etO8+VT1lGIa+beYCf2fc VnLjVNgKk/L0Mcfbtzmo+Vf15xMqcHPm+5oBmxKRPm93cHT6QSAd00pMpWlIBsee M5x9W7gpzrXHa2X3APiq9kcTl10lB4mXQmOndTIbEWgkKQVFXKdglCwyEd0JAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU2Pi9AcDc902u4PoV4rRcrKVcTSowHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzAzMjJlMzgzNzJlMzIzNDMwMmUzMDJmMzIz MTJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8pX8DANBgkqhkiG 9w0BAQsFAAOCAQEAkUUhJiyuTwZ5q2otwwHIrFQ7hUqbIu+2Jhfae6a1T/Xji1W/ SAyVgeznnyMJ26VcWmzMCsX48IW1/0DWoxMAoSdAgrM1E8ullGtUCX0K8LcC3Xm7 c8e8hQgIk7j8WW4DyCswOHsuOrBVPaoqwlv6l+TfeKShNz6JNceF61ZZEoKh1U32 jBalFQvhVw01VpgVHXKVWcwFOJe3ouH560VyH8KBhv47nme//DGN1ehJZr9PpoD1 jy2DqzVy6vT7DDfB2O2Jbj9Yce/YOe34VuySb14KH5LWa9TCPoRWqiIg6Y6EZqSX nXymrn7VrAM5Hl1v535pcDcgb3I9O8zqZTHCfw== -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:40 2025 by rpki-client