This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
File: 3230322e31302e36332e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier: zwjRbhAd37vYOMqQTMDgbFZLcXrfLuBXrkpquQN03WE=
Subject key identifier: B5:44:B3:C4:ED:F3:7F:10:A1:8C:2E:A1:3E:E0:A4:35:11:4C:24:3F
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 0F132D9D9A127797B5954B72F559DEE2B2CBBD68
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
Signing time: Fri 16 Jan 2026 03:00:02 +0000
ROA not before: Fri 16 Jan 2026 02:55:02 +0000
ROA not after: Fri 15 Jan 2027 03:00:02 +0000
asID: 55653
IP address blocks: 202.10.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:39:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:13:2d:9d:9a:12:77:97:b5:95:4b:72:f5:59:de:e2:b2:cb:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Jan 16 02:55:02 2026 GMT
Not After : Jan 15 03:00:02 2027 GMT
Subject: CN=B544B3C4EDF37F10A18C2EA13EE0A435114C243F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:f4:78:12:2e:eb:92:57:f5:41:43:41:41:
48:16:a2:a8:28:f6:fe:f8:d5:46:f2:fe:47:39:54:
9e:08:41:70:02:65:d5:9e:25:ca:33:b7:e6:43:c5:
dc:36:fe:0f:33:75:c1:95:21:ae:0a:78:15:a3:5e:
6a:ff:2b:91:c6:6f:9e:df:11:ee:e6:fc:ed:5e:6f:
4e:69:d7:f2:47:3d:42:1c:9a:3a:28:8b:5c:34:6a:
d4:ca:69:77:f4:e2:d3:43:a3:d3:38:20:b2:86:e5:
53:dc:be:85:90:82:43:86:e8:f8:1a:54:cc:34:29:
d1:a8:64:17:96:f6:71:e6:2b:b7:2a:ee:e1:e9:24:
71:e4:01:6a:81:92:f4:a9:ea:99:38:c9:72:fc:54:
70:9e:56:1c:2c:16:e7:2d:23:88:d6:17:94:e8:37:
3b:a2:4e:bf:fd:1f:7f:8c:8d:34:88:78:0b:88:0e:
3f:07:ee:14:3b:3f:3d:3b:37:87:ed:f9:12:80:7b:
99:72:fc:d4:8d:72:11:fc:e4:03:9a:f5:fa:6a:fe:
47:4a:c2:03:98:7d:2a:62:f0:1c:d0:05:f9:3f:5a:
b2:5d:c4:3e:dc:03:7c:2d:55:49:6a:7e:7e:82:22:
78:67:47:d6:1e:96:92:59:e9:ce:9a:30:2d:c6:26:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:B3:C4:ED:F3:7F:10:A1:8C:2E:A1:3E:E0:A4:35:11:4C:24:3F
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.10.63.0/24
Signature Algorithm: sha256WithRSAEncryption
99:de:67:1c:1b:18:c6:be:0e:7c:e1:e2:8f:9c:78:6e:38:70:
50:79:3c:88:70:3c:82:b0:7e:f5:fd:be:c1:c5:bc:82:2a:4d:
91:00:f7:fa:e2:ec:32:28:51:b2:a9:1b:4e:da:2f:7e:e2:27:
dc:40:22:78:b6:00:63:26:83:cc:5a:91:9b:0c:57:e3:e4:17:
07:2e:37:4f:88:75:8a:82:2a:1b:7f:52:38:b8:b3:86:80:64:
86:95:41:66:b3:15:98:48:e1:85:cb:de:d4:b7:cb:61:df:cb:
46:58:49:2d:a0:ad:63:6f:d8:32:24:bf:d9:83:74:18:aa:9f:
3a:ab:61:69:95:a0:b6:3d:38:ab:9b:00:2d:19:a2:03:2a:dd:
c7:f4:2f:cb:d3:60:63:b6:68:b3:f0:1a:fb:33:ea:15:53:11:
07:3f:25:ba:dd:dd:48:3a:f8:61:b0:d0:28:9e:6d:86:96:b3:
f4:14:e4:be:f1:fd:58:99:a9:a4:44:c3:d1:f2:e5:ac:95:fa:
bc:f4:fb:41:c3:aa:04:e2:b2:4a:bc:28:06:5a:46:b1:f8:21:
19:52:ae:1d:20:f4:da:fd:88:a2:7f:af:9e:2a:94:37:8d:4a:
48:7f:27:b5:82:64:79:a3:d6:11:77:b0:e6:c9:89:9a:7c:32:
42:38:e6:ec
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUDxMtnZoSd5e1lUty9Vne4rLLvWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yNjAxMTYwMjU1MDJaFw0yNzAxMTUwMzAwMDJaMDMxMTAvBgNV
BAMTKEI1NDRCM0M0RURGMzdGMTBBMThDMkVBMTNFRTBBNDM1MTE0QzI0M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKfR4Ei7rklf1QUNBQUgWoqgo
9v741Uby/kc5VJ4IQXACZdWeJcozt+ZDxdw2/g8zdcGVIa4KeBWjXmr/K5HGb57f
Ee7m/O1eb05p1/JHPUIcmjooi1w0atTKaXf04tNDo9M4ILKG5VPcvoWQgkOG6Pga
VMw0KdGoZBeW9nHmK7cq7uHpJHHkAWqBkvSp6pk4yXL8VHCeVhwsFuctI4jWF5To
NzuiTr/9H3+MjTSIeAuIDj8H7hQ7Pz07N4ft+RKAe5ly/NSNchH85AOa9fpq/kdK
wgOYfSpi8BzQBfk/WrJdxD7cA3wtVUlqfn6CInhnR9YelpJZ6c6aMC3GJlO9AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUtUSzxO3zfxChjC6hPuCkNRFMJD8wHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMyMzAzMjJlMzEzMDJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzUzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCj8wDQYJKoZIhvcN
AQELBQADggEBAJneZxwbGMa+Dnzh4o+ceG44cFB5PIhwPIKwfvX9vsHFvIIqTZEA
9/ri7DIoUbKpG07aL37iJ9xAIni2AGMmg8xakZsMV+PkFwcuN0+IdYqCKht/Uji4
s4aAZIaVQWazFZhI4YXL3tS3y2Hfy0ZYSS2grWNv2DIkv9mDdBiqnzqrYWmVoLY9
OKubAC0ZogMq3cf0L8vTYGO2aLPwGvsz6hVTEQc/Jbrd3Ug6+GGw0CiebYaWs/QU
5L7x/ViZqaREw9Hy5ayV+rz0+0HDqgTiskq8KAZaRrH4IRlSrh0g9Nr9iKJ/r54q
lDeNSkh/J7WCZHmj1hF3sObJiZp8MkI45uw=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:54 2026 by rpki-client