This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa File: 3230332e39392e3130312e302f32342d3234203d3e203536323431.roa (raw, json) Hash identifier: AsStHmYigYe9NrPok3Lb6q/Yseedvp68xic6RzO78sI= Subject key identifier: A3:02:83:75:73:F8:9D:54:E1:B5:D1:C6:02:CA:69:1A:6C:A9:FF:A1 Certificate issuer: /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Certificate serial: 317F4D7473C71403BC9A03EAC70BB6CA08E183C2 Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa Signing time: Fri 28 Nov 2025 13:00:00 +0000 ROA not before: Fri 28 Nov 2025 12:55:00 +0000 ROA not after: Fri 27 Nov 2026 13:00:00 +0000 asID: 56241 IP address blocks: 203.99.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7f:4d:74:73:c7:14:03:bc:9a:03:ea:c7:0b:b6:ca:08:e1:83:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658 Validity Not Before: Nov 28 12:55:00 2025 GMT Not After : Nov 27 13:00:00 2026 GMT Subject: CN=A302837573F89D54E1B5D1C602CA691A6CA9FFA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:cc:f1:a9:9b:b8:0c:2a:c5:50:67:dd:ee: 2e:68:1b:c8:9c:29:81:6e:f8:b8:2b:3d:35:8e:8f: ca:fd:36:30:b4:94:e5:c7:47:65:25:7d:25:91:f8: 13:29:1e:31:04:76:29:e0:40:87:a3:9e:88:f8:62: 98:2b:61:a8:1d:1e:69:a2:80:e9:c0:80:68:31:9f: 10:07:10:fc:d0:43:21:0a:46:94:b6:e6:de:3f:9c: 0d:87:32:49:46:52:92:cf:44:9e:db:a6:be:e0:ea: 89:27:2f:98:95:50:20:ea:f7:91:e2:66:40:f1:fe: 1c:33:3a:d9:ba:53:f3:fe:cf:9a:94:24:c0:fd:f5: a8:a9:02:e5:bc:b3:36:75:53:c0:29:a0:97:71:5c: 05:a1:58:69:62:0d:99:62:11:05:48:2d:e0:e4:ae: 47:97:44:c1:39:5d:1a:7d:7a:19:05:e0:37:0d:5b: b8:ed:b6:f7:3b:81:8b:7d:ab:61:41:ab:37:55:d5: 6f:c8:30:b2:95:88:e0:42:e2:56:e9:89:8d:88:82: da:1e:2c:4d:11:14:e0:d8:a2:f5:ef:12:6f:64:ae: 1c:23:d7:c7:e0:27:57:ce:19:bb:8e:28:94:6a:c5: d9:e6:31:cf:a6:e3:06:a0:a5:6f:5a:6a:cf:c4:de: a3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:02:83:75:73:F8:9D:54:E1:B5:D1:C6:02:CA:69:1A:6C:A9:FF:A1 X509v3 Authority Key Identifier: keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3230332e39392e3130312e302f32342d3234203d3e203536323431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.99.101.0/24 Signature Algorithm: sha256WithRSAEncryption a7:83:d5:ea:f5:8e:38:53:56:e1:64:95:70:e3:87:ab:6e:bc: 05:8a:69:ee:ed:32:b3:1a:72:95:20:e8:46:46:cc:96:36:15: d4:a1:b4:ed:5d:ce:3b:f0:02:f0:42:63:4d:f0:60:ab:d5:b3: d5:30:d3:50:86:02:88:58:70:d4:77:61:83:04:ea:3b:b2:ef: 7a:55:44:53:df:24:ac:bb:54:47:56:22:c7:72:e4:42:ed:77: 91:86:79:31:fb:99:dd:c7:0c:c0:7c:51:a7:a8:06:f2:ef:d0: 09:19:3a:75:77:58:07:d7:1b:df:09:93:03:48:f4:74:94:ea: 0e:b7:2f:dc:23:d5:d9:73:ba:84:94:e6:4f:a2:a4:0d:a5:b6: cf:f0:1a:6d:30:ab:76:58:8a:33:75:82:7b:72:55:1d:90:34: cd:6a:9b:aa:44:44:8a:6d:93:1d:02:4b:cd:09:cd:0c:c5:19: f2:4b:63:fc:37:a1:f4:2c:59:0b:ba:1a:ce:4a:35:bd:ec:70: 5e:7a:94:c5:ec:77:67:69:57:b8:2e:4d:c6:4c:fe:32:fa:56: ae:0b:f7:65:9b:a6:d7:ed:f1:44:13:51:17:2e:e4:cd:46:87: 64:95:85:9b:61:78:d0:81:da:ff:ce:60:b1:52:e1:7f:8a:1b: ae:06:9a:22 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMX9NdHPHFAO8mgPqxwu2ygjhg8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz RkJERjY1ODAeFw0yNTExMjgxMjU1MDBaFw0yNjExMjcxMzAwMDBaMDMxMTAvBgNV BAMTKEEzMDI4Mzc1NzNGODlENTRFMUI1RDFDNjAyQ0E2OTFBNkNBOUZGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfnczxqZu4DCrFUGfd7i5oG8ic KYFu+LgrPTWOj8r9NjC0lOXHR2UlfSWR+BMpHjEEdingQIejnoj4YpgrYagdHmmi gOnAgGgxnxAHEPzQQyEKRpS25t4/nA2HMklGUpLPRJ7bpr7g6oknL5iVUCDq95Hi ZkDx/hwzOtm6U/P+z5qUJMD99aipAuW8szZ1U8ApoJdxXAWhWGliDZliEQVILeDk rkeXRME5XRp9ehkF4DcNW7jttvc7gYt9q2FBqzdV1W/IMLKViOBC4lbpiY2Igtoe LE0RFODYovXvEm9krhwj18fgJ1fOGbuOKJRqxdnmMc+m4wagpW9aas/E3qN5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUowKDdXP4nVThtdHGAsppGmyp/6EwHwYDVR0j BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05 OWVmLTVlOTZkOGUzN2U1MC8wLzMyMzAzMzJlMzkzOTJlMzEzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMtjZTANBgkqhkiG 9w0BAQsFAAOCAQEAp4PV6vWOOFNW4WSVcOOHq268BYpp7u0ysxpylSDoRkbMljYV 1KG07V3OO/AC8EJjTfBgq9Wz1TDTUIYCiFhw1HdhgwTqO7LvelVEU98krLtUR1Yi x3LkQu13kYZ5MfuZ3ccMwHxRp6gG8u/QCRk6dXdYB9cb3wmTA0j0dJTqDrcv3CPV 2XO6hJTmT6KkDaW2z/AabTCrdliKM3WCe3JVHZA0zWqbqkREim2THQJLzQnNDMUZ 8ktj/Deh9CxZC7oazko1vexwXnqUxex3Z2lXuC5Nxkz+MvpWrgv3ZZum1+3xRBNR Fy7kzUaHZJWFm2F40IHa/85gsVLhf4obrgaaIg== -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:00 2025 by rpki-client