This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa File: 3230322e39302e3139382e302f32342d3234203d3e203338373739.roa (raw, json) Hash identifier: G/6w1w2C5B7le/ekwUqqgtghBE+GFG1DFKcs7zEE3d8= Subject key identifier: F1:59:53:57:D2:DB:BE:C6:96:73:CA:AF:33:22:94:4F:E0:B7:E4:2F Certificate issuer: /CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Certificate serial: 2CE35BD48C7F25E71B37541E29EA0CE6609F2433 Authority key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa Signing time: Mon 01 Dec 2025 16:00:01 +0000 ROA not before: Mon 01 Dec 2025 15:55:01 +0000 ROA not after: Mon 30 Nov 2026 16:00:01 +0000 asID: 38779 IP address blocks: 202.90.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e3:5b:d4:8c:7f:25:e7:1b:37:54:1e:29:ea:0c:e6:60:9f:24:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Validity Not Before: Dec 1 15:55:01 2025 GMT Not After : Nov 30 16:00:01 2026 GMT Subject: CN=F1595357D2DBBEC69673CAAF3322944FE0B7E42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:f0:bb:8b:bc:92:1d:0e:04:46:ce:21:ca: d6:bd:8d:88:9f:2e:fd:5b:69:cb:2a:fa:bb:20:8c: 6b:97:ca:ae:7d:65:0c:61:d0:ef:df:e8:a5:e6:3b: 10:b5:10:88:df:92:eb:c2:2b:25:ef:e6:e1:8a:32: 40:99:cb:c3:49:22:ba:35:64:d2:18:84:0a:ce:78: e0:33:19:7b:80:75:a3:ae:fa:5e:10:7e:93:c6:e6: c4:3e:fd:0c:12:ce:09:ca:90:50:48:5d:a3:ef:ae: 6f:5c:c2:37:c3:56:38:2b:48:4f:db:7f:16:ae:b0: 03:85:4e:80:ce:6a:c4:60:23:ff:9c:40:21:f1:ba: 65:53:b5:9e:c7:bf:66:4d:70:02:c2:01:d1:ee:4d: 5b:fc:ae:b9:23:a6:71:c9:fd:74:6d:48:7e:b1:f8: 9d:44:b1:65:c9:5d:f9:2b:20:fc:ad:15:50:27:89: 63:72:1c:f4:83:24:4b:ee:82:af:55:87:ed:e6:14: bf:8c:ce:b2:d5:cb:8e:0c:cd:3c:5a:ea:81:3d:b6: 0b:bc:e2:eb:77:46:5c:18:ba:8f:eb:8e:5f:75:0b: 9f:b6:b1:42:3d:6d:94:cc:1f:1b:af:3b:13:c5:d8: 95:02:78:b2:16:ae:47:33:8f:9f:0b:18:44:4c:7e: c9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:59:53:57:D2:DB:BE:C6:96:73:CA:AF:33:22:94:4F:E0:B7:E4:2F X509v3 Authority Key Identifier: keyid:9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/3230322e39302e3139382e302f32342d3234203d3e203338373739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.198.0/24 Signature Algorithm: sha256WithRSAEncryption 09:af:a1:ff:57:3f:24:0f:66:f6:07:f8:53:b1:93:c5:03:21: 79:84:5b:f7:24:f7:e0:26:65:da:6b:d1:fe:ae:81:83:f4:eb: e9:70:2f:01:53:70:c2:e5:c7:10:c5:e5:d3:34:d8:e3:05:74: c9:2e:fd:52:e1:b5:81:1f:64:21:4e:38:fb:23:38:02:53:b4: 47:e7:ec:9c:ec:3d:e6:00:fa:79:fc:54:1d:5c:79:60:ee:79: 36:52:d5:3d:34:2b:ff:b0:ef:3d:8f:f2:ee:d8:05:be:5e:01: 25:c3:46:2d:ea:64:50:06:2f:15:61:c0:10:a6:d5:e2:b9:14: 37:e6:79:85:93:1f:e0:9b:df:62:ce:25:d7:d9:74:3d:5f:35: 58:d1:07:fb:d2:d0:97:00:ad:cf:0e:0c:0b:11:19:10:73:5e: f4:7e:89:f5:51:a2:61:f7:36:83:ac:0f:76:b9:4e:30:88:06: 24:ad:63:1a:5c:c5:df:20:c5:b3:a5:33:ef:0e:28:89:54:01: 41:b9:09:a0:05:e2:f3:7f:51:1a:f6:f3:d5:45:e0:7e:68:e3: 04:a8:34:87:ce:41:ef:af:7b:02:09:db:40:77:9b:0f:50:f9: e4:a5:4e:e3:19:bd:c3:bb:05:bf:6b:15:15:39:45:8c:65:57: a5:0f:66:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULONb1Ix/JecbN1QeKeoM5mCfJDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3 NEMwNEM0MDAeFw0yNTEyMDExNTU1MDFaFw0yNjExMzAxNjAwMDFaMDMxMTAvBgNV BAMTKEYxNTk1MzU3RDJEQkJFQzY5NjczQ0FBRjMzMjI5NDRGRTBCN0U0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6vC7i7ySHQ4ERs4hyta9jYif Lv1bacsq+rsgjGuXyq59ZQxh0O/f6KXmOxC1EIjfkuvCKyXv5uGKMkCZy8NJIro1 ZNIYhArOeOAzGXuAdaOu+l4QfpPG5sQ+/QwSzgnKkFBIXaPvrm9cwjfDVjgrSE/b fxausAOFToDOasRgI/+cQCHxumVTtZ7Hv2ZNcALCAdHuTVv8rrkjpnHJ/XRtSH6x +J1EsWXJXfkrIPytFVAniWNyHPSDJEvugq9Vh+3mFL+MzrLVy44MzTxa6oE9tgu8 4ut3RlwYuo/rjl91C5+2sUI9bZTMHxuvOxPF2JUCeLIWrkczj58LGERMfsklAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8VlTV9LbvsaWc8qvMyKUT+C35C8wHwYDVR0j BBgwFoAUnBGij+zie2XH5kdZBsbMuXTATEAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMC85QzExQTI4RkVD RTI3QjY1QzdFNjQ3NTkwNkM2Q0NCOTc0QzA0QzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUMxMUEyOEZFQ0UyN0I2NUM3RTY0NzU5MDZDNkNDQjk3NEMw NEM0MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0ZTFmMzcwLWYzMWYtNDdlZC04 YTQxLWIyOGJjOGRhZjQzNS8wLzMyMzAzMjJlMzkzMDJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpaxjANBgkqhkiG 9w0BAQsFAAOCAQEACa+h/1c/JA9m9gf4U7GTxQMheYRb9yT34CZl2mvR/q6Bg/Tr 6XAvAVNwwuXHEMXl0zTY4wV0yS79UuG1gR9kIU44+yM4AlO0R+fsnOw95gD6efxU HVx5YO55NlLVPTQr/7DvPY/y7tgFvl4BJcNGLepkUAYvFWHAEKbV4rkUN+Z5hZMf 4JvfYs4l19l0PV81WNEH+9LQlwCtzw4MCxEZEHNe9H6J9VGiYfc2g6wPdrlOMIgG JK1jGlzF3yDFs6Uz7w4oiVQBQbkJoAXi839RGvbz1UXgfmjjBKg0h85B7697Agnb QHebD1D55KVO4xm9w7sFv2sVFTlFjGVXpQ9mMw== -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:37 2025 by rpki-client