This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa File: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (raw, json) Hash identifier: zMpVgEWzPdDK17NtW9oxpCMK4fkWK+NftKAxjrfh35o= Subject key identifier: 56:F1:1B:95:29:2D:DA:9A:5B:BB:E2:B7:2C:A9:CA:6B:67:0E:29:66 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 20568C5D2ECE4C4C5F5C8C47AD362E1710A4FE8F Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa Signing time: Mon 24 Nov 2025 09:02:11 +0000 ROA not before: Mon 24 Nov 2025 08:57:11 +0000 ROA not after: Mon 23 Nov 2026 09:02:11 +0000 asID: 24200 IP address blocks: 202.133.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:56:8c:5d:2e:ce:4c:4c:5f:5c:8c:47:ad:36:2e:17:10:a4:fe:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Nov 24 08:57:11 2025 GMT Not After : Nov 23 09:02:11 2026 GMT Subject: CN=56F11B95292DDA9A5BBBE2B72CA9CA6B670E2966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:5a:14:d0:0f:e8:13:64:3f:06:69:42:b7: 28:6e:20:e5:d4:0e:2d:5e:0f:fc:17:22:04:8e:54: a2:2a:ea:26:e8:de:eb:50:c5:65:75:6b:79:9c:ae: c9:e9:c8:97:ea:33:90:ae:b5:59:86:1a:33:28:71: f3:b1:a0:da:58:fd:eb:59:4f:42:5c:2a:5b:25:76: bf:39:41:3e:ab:84:fb:81:48:1a:25:6d:b0:8f:20: e8:a1:4b:bf:b8:2e:8e:a9:c0:50:60:52:02:c9:b3: b3:99:d0:13:47:51:9f:9c:e1:a6:6b:5f:da:c8:e6: c0:27:90:88:d3:3e:fc:bc:04:16:1b:cd:a4:b2:ef: 1b:20:c2:4a:4f:15:ab:be:6e:7e:82:d7:93:f7:7f: ee:24:ee:06:09:1d:3b:5f:68:4f:aa:1e:4e:d6:02: 69:ac:eb:20:11:59:3d:10:37:af:da:1d:34:92:30: 75:3f:8a:ef:24:ff:9d:d8:57:0e:54:4f:82:05:f5: 2d:3e:cb:a5:48:d4:57:67:61:d7:ba:7c:d1:5b:a7: 9b:e4:2c:b5:06:0a:e3:46:56:cd:4d:ed:b9:9f:55: dc:e4:7c:78:e3:89:6c:a6:53:62:db:23:a6:2e:c0: 46:5d:d5:1f:3d:d7:cf:84:8d:57:9c:63:66:a7:56: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:1B:95:29:2D:DA:9A:5B:BB:E2:B7:2C:A9:CA:6B:67:0E:29:66 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/3230322e3133332e342e302f32342d3234203d3e203234323030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.133.4.0/24 Signature Algorithm: sha256WithRSAEncryption d2:48:a3:6c:4c:f2:a0:36:98:1b:f6:28:f7:ef:6b:b2:eb:19: 21:a1:11:96:2e:14:8e:76:58:2e:91:91:6d:b1:6e:5a:08:35: 0d:9d:a6:a7:25:4e:28:60:18:e6:50:ef:c5:82:7a:65:d3:49: 6d:da:75:69:46:a0:31:4c:7d:f4:c2:8f:cc:f8:64:8f:0c:8c: b4:fb:d7:43:a0:36:98:1c:e1:31:61:44:50:ac:73:91:c1:19: 29:77:cc:19:78:9c:55:ff:95:e7:ca:0d:72:fa:01:70:6a:da: 65:bb:cc:71:bb:0d:11:af:0c:40:c1:ad:a1:7b:47:ce:d0:dd: 70:38:40:4c:01:ac:4a:ba:50:c6:3b:10:ea:8e:eb:e4:9b:d7: a5:39:6f:19:af:99:cb:09:9c:bd:0d:e5:f4:cf:2f:f6:b8:8a: 4a:3d:89:4d:2e:8e:bd:d4:48:94:fe:6a:fb:b4:f6:ae:84:a1: 8c:f4:fd:92:dc:61:8e:30:5e:08:7d:18:0c:58:8f:70:82:4c: df:00:b6:fd:5f:8d:92:0d:ad:08:be:05:f1:5c:ad:98:ca:3c: 81:64:d8:6c:5b:38:4a:c2:ba:4f:df:e6:de:70:d9:1a:28:4b: 84:be:f2:06:a2:60:c4:36:63:36:10:83:21:cc:6d:17:e4:ae: a7:89:30:9d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUIFaMXS7OTExfXIxHrTYuFxCk/o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNTExMjQwODU3MTFaFw0yNjExMjMwOTAyMTFaMDMxMTAvBgNV BAMTKDU2RjExQjk1MjkyRERBOUE1QkJCRTJCNzJDQTlDQTZCNjcwRTI5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdloU0A/oE2Q/BmlCtyhuIOXU Di1eD/wXIgSOVKIq6ibo3utQxWV1a3mcrsnpyJfqM5CutVmGGjMocfOxoNpY/etZ T0JcKlsldr85QT6rhPuBSBolbbCPIOihS7+4Lo6pwFBgUgLJs7OZ0BNHUZ+c4aZr X9rI5sAnkIjTPvy8BBYbzaSy7xsgwkpPFau+bn6C15P3f+4k7gYJHTtfaE+qHk7W Amms6yARWT0QN6/aHTSSMHU/iu8k/53YVw5UT4IF9S0+y6VI1FdnYde6fNFbp5vk LLUGCuNGVs1N7bmfVdzkfHjjiWymU2LbI6YuwEZd1R8918+EjVecY2anVsptAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUVvEblSkt2ppbu+K3LKnKa2cOKWYwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjY5ZWE0LWU4MmYtNDZjMy04 ZGQzLTJlOTg4MTU5YjIwMi8wLzMyMzAzMjJlMzEzMzMzMmUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKhQQwDQYJKoZIhvcN AQELBQADggEBANJIo2xM8qA2mBv2KPfva7LrGSGhEZYuFI52WC6RkW2xbloINQ2d pqclTihgGOZQ78WCemXTSW3adWlGoDFMffTCj8z4ZI8MjLT710OgNpgc4TFhRFCs c5HBGSl3zBl4nFX/lefKDXL6AXBq2mW7zHG7DRGvDEDBraF7R87Q3XA4QEwBrEq6 UMY7EOqO6+Sb16U5bxmvmcsJnL0N5fTPL/a4iko9iU0ujr3USJT+avu09q6EoYz0 /ZLcYY4wXgh9GAxYj3CCTN8Atv1fjZINrQi+BfFcrZjKPIFk2GxbOErCuk/f5t5w 2RooS4S+8gaiYMQ2YzYQgyHMbRfkrqeJMJ0= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:04 2025 by rpki-client