This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa File: 3230322e37322e3230372e302f32342d3234203d3e203538333839.roa (raw, json) Hash identifier: mMGZsm6q2Cz9y5dWG/zQD6+ULZz3IpMnOmvYJyKBkxU= Subject key identifier: 4E:01:CE:D7:98:66:0B:8C:E8:41:6A:AA:22:C7:12:6D:D9:A6:84:33 Certificate issuer: /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Certificate serial: 2ADF5B498E214E39533F12193098E6D22D3196A2 Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa Signing time: Mon 10 Nov 2025 02:39:41 +0000 ROA not before: Mon 10 Nov 2025 02:34:41 +0000 ROA not after: Mon 09 Nov 2026 02:39:41 +0000 asID: 58389 IP address blocks: 202.72.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 19:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:df:5b:49:8e:21:4e:39:53:3f:12:19:30:98:e6:d2:2d:31:96:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE Validity Not Before: Nov 10 02:34:41 2025 GMT Not After : Nov 9 02:39:41 2026 GMT Subject: CN=4E01CED798660B8CE8416AAA22C7126DD9A68433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7a:e3:63:13:38:cd:e8:68:b3:c4:91:5a:24: 01:6a:82:e3:b8:2e:63:79:8f:de:f5:99:47:a8:ed: bd:26:94:42:e0:61:5b:b5:13:f8:a5:17:44:31:7d: 08:b2:89:dd:d4:a3:fc:87:0e:72:0f:0b:54:36:8a: 8e:77:e8:31:2e:ba:0f:66:ca:b5:57:5b:25:b3:a4: 11:6d:18:17:f7:26:b4:5f:fb:2a:b5:ce:56:7d:b9: ef:ae:46:81:e2:04:04:6e:43:65:b0:b6:12:f9:ba: e8:85:bb:79:3e:f0:9e:c1:44:39:69:7a:c8:63:36: 2f:07:69:a3:d3:12:31:8d:12:a8:6a:e5:b4:67:4a: b4:4b:1a:04:be:69:2b:eb:0a:75:dc:52:2e:40:68: bd:82:30:ca:b6:3c:e1:6d:5e:16:d8:74:4b:4f:95: 41:35:6b:6a:0f:56:9f:33:b6:60:e1:0e:69:67:db: 3b:4f:b0:fb:19:7a:e8:5f:43:c1:82:e8:38:b5:f9: c4:37:16:62:a7:44:b9:39:cf:74:bc:a1:6c:7c:ef: d9:35:07:59:c7:aa:9b:92:8a:70:f7:f1:a4:7d:98: 2f:41:97:3d:8d:f2:05:14:1f:20:c2:b0:43:e2:40: bd:07:78:c7:36:18:3b:db:42:aa:97:78:82:b7:6e: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:01:CE:D7:98:66:0B:8C:E8:41:6A:AA:22:C7:12:6D:D9:A6:84:33 X509v3 Authority Key Identifier: keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230372e302f32342d3234203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.72.207.0/24 Signature Algorithm: sha256WithRSAEncryption ad:aa:28:26:f6:06:14:4a:83:39:ad:b3:e7:91:43:fa:8d:d2: 68:5a:ad:be:16:f0:1a:cb:d6:a7:a8:bc:80:85:b9:b5:dd:89: 3a:9d:fe:ef:c8:4e:77:51:59:c1:d0:ef:08:d0:71:e3:49:6c: dd:d5:e1:53:79:0b:34:cf:99:7c:3d:cb:51:f7:86:c1:f1:ff: ed:37:ea:4d:88:43:fd:e7:c1:07:4c:81:35:f5:e0:a1:aa:1c: 1c:fe:2d:80:fe:bc:94:9e:24:2f:7f:ab:56:02:b9:e7:80:56: c1:b5:a0:7f:93:e2:ca:c0:60:24:d8:f8:83:c9:6a:64:91:2a: 81:2f:8f:04:66:4e:dc:fe:05:c5:6b:19:5a:f0:3a:16:fa:83: e0:bf:13:65:d5:d5:cd:5f:21:c0:bf:e1:dd:70:d5:99:80:00: 59:03:96:26:0a:5a:eb:e8:0f:b0:46:91:7e:46:47:67:80:a9: 12:68:66:30:67:f4:44:ee:85:ce:f1:0e:fe:07:cc:eb:43:82: d5:5d:eb:f1:16:a8:dc:c4:d2:d9:45:77:31:9a:e0:11:e4:99: 63:1b:f8:2e:23:83:2c:b4:a1:ce:b1:87:10:12:0d:78:d7:7b: 80:f2:5f:36:b3:a0:38:5a:91:11:2f:a5:d1:56:a1:6c:24:a5: 2a:f6:5a:c1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKt9bSY4hTjlTPxIZMJjm0i0xlqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4 Rjc4ODFFRTAeFw0yNTExMTAwMjM0NDFaFw0yNjExMDkwMjM5NDFaMDMxMTAvBgNV BAMTKDRFMDFDRUQ3OTg2NjBCOENFODQxNkFBQTIyQzcxMjZERDlBNjg0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4euNjEzjN6GizxJFaJAFqguO4 LmN5j971mUeo7b0mlELgYVu1E/ilF0QxfQiyid3Uo/yHDnIPC1Q2io536DEuug9m yrVXWyWzpBFtGBf3JrRf+yq1zlZ9ue+uRoHiBARuQ2WwthL5uuiFu3k+8J7BRDlp eshjNi8HaaPTEjGNEqhq5bRnSrRLGgS+aSvrCnXcUi5AaL2CMMq2POFtXhbYdEtP lUE1a2oPVp8ztmDhDmln2ztPsPsZeuhfQ8GC6Di1+cQ3FmKnRLk5z3S8oWx879k1 B1nHqpuSinD38aR9mC9Blz2N8gUUHyDCsEPiQL0HeMc2GDvbQqqXeIK3brozAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTgHO15hmC4zoQWqqIscSbdmmhDMwHwYDVR0j BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0 MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4 ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04 NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIzzANBgkqhkiG 9w0BAQsFAAOCAQEAraooJvYGFEqDOa2z55FD+o3SaFqtvhbwGsvWp6i8gIW5td2J Op3+78hOd1FZwdDvCNBx40ls3dXhU3kLNM+ZfD3LUfeGwfH/7TfqTYhD/efBB0yB NfXgoaocHP4tgP68lJ4kL3+rVgK554BWwbWgf5PiysBgJNj4g8lqZJEqgS+PBGZO 3P4FxWsZWvA6FvqD4L8TZdXVzV8hwL/h3XDVmYAAWQOWJgpa6+gPsEaRfkZHZ4Cp EmhmMGf0RO6FzvEO/gfM60OC1V3r8Rao3MTS2UV3MZrgEeSZYxv4LiODLLShzrGH EBINeNd7gPJfNrOgOFqRES+l0VahbCSlKvZawQ== -----END CERTIFICATE-----Generated at Thu Dec 4 20:29:16 2025 by rpki-client