This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa File: 3230322e3138302e312e302f32342d3234203d3e2037353837.roa (raw, json) Hash identifier: NbHhFmy5+M9dcxTboMeZja93XE4Bi3M8QPJR5OVXXh0= Subject key identifier: DC:7A:80:AA:23:06:24:57:04:F4:A5:DB:43:B5:6D:66:74:DC:9D:94 Certificate issuer: /CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Certificate serial: 4915E2E49E154DFCB80FC830175ECE025597200C Authority key identifier: 42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa Signing time: Fri 23 Jan 2026 23:37:04 +0000 ROA not before: Fri 23 Jan 2026 23:32:04 +0000 ROA not after: Fri 22 Jan 2027 23:37:04 +0000 asID: 7587 IP address blocks: 202.180.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 23:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:15:e2:e4:9e:15:4d:fc:b8:0f:c8:30:17:5e:ce:02:55:97:20:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42042E672B688C3072FD4743B3E7DD81EC7CA306 Validity Not Before: Jan 23 23:32:04 2026 GMT Not After : Jan 22 23:37:04 2027 GMT Subject: CN=DC7A80AA2306245704F4A5DB43B56D6674DC9D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:d6:9d:a1:ed:fc:23:5f:ea:a0:6d:e6:f5: 30:5d:cc:27:24:05:76:b9:89:cf:8c:a5:cc:76:97: 70:51:37:6c:1b:f1:53:df:49:92:a4:e2:15:05:55: 16:78:b7:c1:47:a7:72:32:35:aa:c2:ba:e2:00:08: e7:33:ad:ce:24:c9:bd:76:bf:34:57:25:31:0e:e4: c6:85:f6:8d:12:cd:b4:3d:d8:a0:ac:a4:d7:fc:05: 09:00:bd:44:b3:23:63:2f:b1:a7:d3:6c:2a:66:60: 9e:f1:61:58:b3:8a:c1:dc:03:34:40:c2:23:9a:5d: b4:c8:38:02:44:57:be:5b:e8:94:33:28:33:6b:7f: bf:9e:a0:92:eb:e7:da:69:55:ef:66:62:a2:53:ed: 52:40:39:b4:9f:1a:fa:c3:78:99:fe:88:67:d4:8a: 6e:ef:27:41:88:3b:77:a6:90:20:35:3b:aa:d9:42: 9a:1e:b0:10:30:30:2b:f8:a3:ff:7a:69:ef:b8:20: 7f:33:51:7d:f3:d3:83:5a:66:d9:c6:50:62:ab:08: c0:b4:f0:3d:3c:8a:9a:f2:f3:56:91:21:94:11:a4: 60:c5:a3:23:71:97:d6:06:85:89:83:1c:e8:b3:67: fa:60:98:a6:74:50:c8:1b:ce:94:53:3c:a2:d4:3c: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7A:80:AA:23:06:24:57:04:F4:A5:DB:43:B5:6D:66:74:DC:9D:94 X509v3 Authority Key Identifier: keyid:42:04:2E:67:2B:68:8C:30:72:FD:47:43:B3:E7:DD:81:EC:7C:A3:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/42042E672B688C3072FD4743B3E7DD81EC7CA306.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42042E672B688C3072FD4743B3E7DD81EC7CA306.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a12f228c-df20-4728-9f96-8faa1340017a/0/3230322e3138302e312e302f32342d3234203d3e2037353837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.1.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:37:9f:55:be:a4:8b:2e:de:15:51:22:86:b9:d7:9a:9b:36: b4:c7:67:9a:71:f8:be:97:0d:79:ae:4a:e3:e4:95:43:31:5d: 77:67:dd:e6:c8:e6:08:42:2c:cf:41:fd:af:a4:c9:1d:3c:36: 76:5b:d1:c6:da:64:cf:f3:dc:15:e1:ad:f3:89:a7:81:a1:ff: f6:9f:d5:cc:bd:a8:5f:cc:21:d0:fa:99:13:f8:b2:6a:0d:63: 7b:65:9d:fd:1c:ac:79:a6:33:90:6a:6c:c2:bd:6a:4a:a0:09: bc:62:d9:27:5a:d7:6f:3c:d9:d6:91:3d:56:58:a1:ca:b1:c0: 9c:dc:3e:c1:79:c7:12:82:69:2d:2d:02:f0:11:b8:3c:62:96: 0e:58:84:89:ae:fa:e3:7f:3b:79:dd:ef:cb:1f:8b:4b:b6:52: cb:65:f6:37:d3:ed:16:51:39:d7:30:0b:40:4c:5b:8a:f5:c3: 2f:dd:02:a2:af:87:ce:1c:fd:e2:e8:b8:35:c0:38:af:c6:6c: 72:27:f9:73:fd:8b:fc:ac:38:c8:33:ad:5d:95:16:1a:70:d4: f0:d7:a0:9e:88:7b:4a:d8:79:38:8f:29:58:23:be:62:45:dd: 8a:e2:38:c3:d8:7d:f1:7d:13:b3:27:1d:6a:2b:4f:3a:7e:3e: 47:7a:8f:5d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSRXi5J4VTfy4D8gwF17OAlWXIAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFF QzdDQTMwNjAeFw0yNjAxMjMyMzMyMDRaFw0yNzAxMjIyMzM3MDRaMDMxMTAvBgNV BAMTKERDN0E4MEFBMjMwNjI0NTcwNEY0QTVEQjQzQjU2RDY2NzREQzlEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfHtadoe38I1/qoG3m9TBdzCck BXa5ic+Mpcx2l3BRN2wb8VPfSZKk4hUFVRZ4t8FHp3IyNarCuuIACOczrc4kyb12 vzRXJTEO5MaF9o0SzbQ92KCspNf8BQkAvUSzI2MvsafTbCpmYJ7xYVizisHcAzRA wiOaXbTIOAJEV75b6JQzKDNrf7+eoJLr59ppVe9mYqJT7VJAObSfGvrDeJn+iGfU im7vJ0GIO3emkCA1O6rZQpoesBAwMCv4o/96ae+4IH8zUX3z04NaZtnGUGKrCMC0 8D08ipry81aRIZQRpGDFoyNxl9YGhYmDHOizZ/pgmKZ0UMgbzpRTPKLUPGYFAgMB AAGjggItMIICKTAdBgNVHQ4EFgQU3HqAqiMGJFcE9KXbQ7VtZnTcnZQwHwYDVR0j BBgwFoAUQgQuZytojDBy/UdDs+fdgex8owYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTJmMjI4Yy1kZjIwLTQ3MjgtOWY5Ni04ZmFhMTM0MDAxN2EvMC80MjA0MkU2NzJC Njg4QzMwNzJGRDQ3NDNCM0U3REQ4MUVDN0NBMzA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIwNDJFNjcyQjY4OEMzMDcyRkQ0NzQzQjNFN0REODFFQzdD QTMwNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyZjIyOGMtZGYyMC00NzI4LTlm OTYtOGZhYTEzNDAwMTdhLzAvMzIzMDMyMmUzMTM4MzAyZTMxMmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzczNTM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKtAEwDQYJKoZIhvcNAQEL BQADggEBAD43n1W+pIsu3hVRIoa515qbNrTHZ5px+L6XDXmuSuPklUMxXXdn3ebI 5ghCLM9B/a+kyR08NnZb0cbaZM/z3BXhrfOJp4Gh//af1cy9qF/MIdD6mRP4smoN Y3tlnf0crHmmM5BqbMK9akqgCbxi2Sda12882daRPVZYocqxwJzcPsF5xxKCaS0t AvARuDxilg5YhImu+uN/O3nd78sfi0u2Ustl9jfT7RZROdcwC0BMW4r1wy/dAqKv h84c/eLouDXAOK/GbHIn+XP9i/ysOMgzrV2VFhpw1PDXoJ6Ie0rYeTiPKVgjvmJF 3YriOMPYffF9E7MnHWorTzp+Pkd6j10= -----END CERTIFICATE-----Generated at Mon Feb 2 12:59:39 2026 by rpki-client