This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa File: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (raw, json) Hash identifier: LWSN+OOVgP5g9xcwwR15CS7HhslaezIfEbjBNEwvwaI= Subject key identifier: 4F:EE:AF:07:06:20:F2:56:23:D0:5D:E7:B9:CF:9C:B5:2F:21:B8:75 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 65BBC2708516DF370C33F48E60FBDEB17FB4B614 Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa Signing time: Mon 24 Nov 2025 09:02:11 +0000 ROA not before: Mon 24 Nov 2025 08:57:11 +0000 ROA not after: Mon 23 Nov 2026 09:02:11 +0000 asID: 24200 IP address blocks: 202.133.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:bb:c2:70:85:16:df:37:0c:33:f4:8e:60:fb:de:b1:7f:b4:b6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Nov 24 08:57:11 2025 GMT Not After : Nov 23 09:02:11 2026 GMT Subject: CN=4FEEAF070620F25623D05DE7B9CF9CB52F21B875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c0:2b:49:14:ba:76:1a:40:95:53:06:17:a6: b2:0d:af:d0:84:85:45:e9:85:bf:e1:f2:98:b7:bd: 3a:1e:a1:96:78:4b:43:17:62:a7:cd:4e:d7:f8:b9: 32:9f:4d:bc:56:9c:73:77:94:6d:48:c5:60:f2:31: 51:97:f1:e0:f7:7f:be:81:95:bd:36:33:34:4a:2a: f7:3f:e3:b9:f9:7f:f2:80:7c:00:32:b3:17:67:bb: 96:6e:fc:d2:12:77:31:c1:aa:3a:22:5f:81:05:8b: 7a:33:c0:18:e7:e9:af:3a:eb:5d:25:4d:fd:5c:d9: 9c:ab:eb:05:6a:91:96:74:37:3e:81:f8:59:a7:8a: 1e:ce:39:06:21:c3:15:cc:a5:72:e0:e2:b0:7c:e7: 8b:dc:ff:5b:0f:96:b1:6e:73:0d:17:0a:a1:de:03: c6:32:47:c4:e8:ae:55:88:3e:4d:a2:d6:29:61:8f: d8:c9:71:d7:10:e2:c3:cd:b8:a8:d2:13:36:2c:1d: 31:7b:82:b0:fd:fd:e6:fd:d7:fb:12:89:2f:52:e5: c6:cc:47:3b:c8:03:e1:71:eb:fc:04:dd:58:64:fe: e6:ab:bd:bb:9b:a5:21:ff:09:3f:d8:74:f8:bf:e8: 02:6b:10:98:f6:b1:15:d1:9f:e0:15:6c:dc:89:12: 20:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EE:AF:07:06:20:F2:56:23:D0:5D:E7:B9:CF:9C:B5:2F:21:B8:75 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e302e302f32342d3234203d3e203234323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.133.0.0/24 Signature Algorithm: sha256WithRSAEncryption 75:e5:d3:12:b7:af:45:b6:f5:5f:4b:bd:71:9e:41:12:9f:ae: 80:33:9d:b5:66:f5:64:ae:26:b8:1e:ea:8a:13:83:99:61:f6: 52:54:15:14:5e:0e:b1:a6:fc:1c:be:ec:cd:3d:7b:10:28:b9: 90:cd:d8:7c:0d:ff:b5:14:e6:2e:cb:c2:a9:10:65:5c:5f:8c: 6e:75:41:3b:1e:4f:ce:bc:c8:17:b1:2f:4f:d8:fc:be:5f:77: 67:38:26:49:b5:90:ac:a9:23:c9:b2:d2:fe:4f:bf:0b:97:58: 89:78:fd:93:9a:77:77:03:cd:a5:46:08:6c:d1:54:4b:59:85: fa:d2:22:07:5c:41:24:d6:37:04:9c:b1:fb:98:7a:5e:99:5c: 35:8f:2c:a9:51:01:90:55:f4:d2:97:bf:92:86:cd:78:31:13: b8:67:ce:3c:e7:6e:3b:49:10:7e:b3:8e:54:11:49:df:ac:64: 3e:a6:cf:6a:39:72:b4:eb:1a:48:77:40:cd:59:60:46:86:fa: e1:91:e3:ff:91:e9:1a:96:66:ed:5b:61:ca:d3:5c:26:25:86: 83:de:ae:f2:72:76:1f:bb:9a:5b:61:02:7b:dd:a1:f2:1e:01: 63:4a:d3:d6:cd:8c:1a:cc:9e:ab:5c:a8:df:84:57:cc:a9:39: aa:cc:c4:a3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZbvCcIUW3zcMM/SOYPvesX+0thQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNTExMjQwODU3MTFaFw0yNjExMjMwOTAyMTFaMDMxMTAvBgNV BAMTKDRGRUVBRjA3MDYyMEYyNTYyM0QwNURFN0I5Q0Y5Q0I1MkYyMUI4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkwCtJFLp2GkCVUwYXprINr9CE hUXphb/h8pi3vToeoZZ4S0MXYqfNTtf4uTKfTbxWnHN3lG1IxWDyMVGX8eD3f76B lb02MzRKKvc/47n5f/KAfAAysxdnu5Zu/NISdzHBqjoiX4EFi3ozwBjn6a86610l Tf1c2Zyr6wVqkZZ0Nz6B+Fmnih7OOQYhwxXMpXLg4rB854vc/1sPlrFucw0XCqHe A8YyR8TorlWIPk2i1ilhj9jJcdcQ4sPNuKjSEzYsHTF7grD9/eb91/sSiS9S5cbM RzvIA+Fx6/wE3Vhk/uarvbubpSH/CT/YdPi/6AJrEJj2sRXRn+AVbNyJEiC3AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUT+6vBwYg8lYj0F3nuc+ctS8huHUwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjY5ZWE0LWU4MmYtNDZjMy04 ZGQzLTJlOTg4MTU5YjIwMi8wLzMyMzAzMjJlMzEzMzMzMmUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKhQAwDQYJKoZIhvcN AQELBQADggEBAHXl0xK3r0W29V9LvXGeQRKfroAznbVm9WSuJrge6ooTg5lh9lJU FRReDrGm/By+7M09exAouZDN2HwN/7UU5i7LwqkQZVxfjG51QTseT868yBexL0/Y /L5fd2c4Jkm1kKypI8my0v5PvwuXWIl4/ZOad3cDzaVGCGzRVEtZhfrSIgdcQSTW NwScsfuYel6ZXDWPLKlRAZBV9NKXv5KGzXgxE7hnzjznbjtJEH6zjlQRSd+sZD6m z2o5crTrGkh3QM1ZYEaG+uGR4/+R6RqWZu1bYcrTXCYlhoPervJydh+7mlthAnvd ofIeAWNK09bNjBrMnqtcqN+EV8ypOarMxKM= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:40 2025 by rpki-client