This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa File: 3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa (raw, json) Hash identifier: 1xGJ7Y9+wtKG60b+Nh0uIMBhRuIEyt2WbpPoMcvYL7o= Subject key identifier: 0B:B5:77:A9:FB:7E:3A:1D:49:17:07:50:6F:11:DB:E7:DF:81:BA:D6 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 566AF739E37964847B796787F3B4FDB350C98EBA Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa Signing time: Mon 02 Feb 2026 03:42:26 +0000 ROA not before: Mon 02 Feb 2026 03:37:26 +0000 ROA not after: Mon 01 Feb 2027 03:42:26 +0000 asID: 141114 IP address blocks: 202.90.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6a:f7:39:e3:79:64:84:7b:79:67:87:f3:b4:fd:b3:50:c9:8e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Feb 2 03:37:26 2026 GMT Not After : Feb 1 03:42:26 2027 GMT Subject: CN=0BB577A9FB7E3A1D491707506F11DBE7DF81BAD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:f0:e0:9b:7b:eb:35:0c:7f:51:ba:50:ea: 8e:4f:bd:f0:6b:18:7d:58:45:88:ff:e4:80:12:7f: fb:74:78:83:81:1c:48:17:b1:20:fb:3b:a4:82:bb: b4:c2:5e:82:cc:e8:51:13:0b:5d:0e:5a:22:d1:9c: 4d:cd:ce:06:85:31:65:a5:19:a5:91:ca:59:fe:c9: cc:c6:34:4b:39:31:11:7f:19:46:e7:ba:38:6e:65: 38:ed:28:8e:5c:6c:64:e5:d8:35:e0:cb:14:33:9c: e5:e2:da:df:29:50:64:b7:83:4a:c4:3a:9b:84:ca: 88:ba:b3:5f:2d:80:fa:76:96:71:65:cd:12:6c:07: 18:83:d7:fb:8c:1c:3b:e5:5f:d2:da:00:5a:18:a7: 60:28:cf:52:99:d0:ac:90:76:1d:d2:7a:10:62:06: 75:7a:ab:09:e9:ea:20:12:50:1c:51:86:5c:ee:da: a7:99:3f:84:3a:10:c5:97:2a:76:d2:3e:d8:7c:22: 65:5f:c3:e0:5a:19:05:77:d5:f0:a6:73:fa:db:d9: b1:3d:46:92:64:88:72:48:d3:74:48:52:e8:99:57: 95:72:a0:dc:a2:f4:d3:56:31:a1:65:35:25:1e:1e: 0c:9c:34:09:1f:d5:c1:07:4c:dd:d1:04:4b:3f:27: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:77:A9:FB:7E:3A:1D:49:17:07:50:6F:11:DB:E7:DF:81:BA:D6 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139352e302f32342d3234203d3e20313431313134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.195.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:41:ba:0e:c6:c7:df:8c:b8:e9:bf:a7:97:ea:13:1f:6b:e2: 4c:e5:4a:74:97:f5:e0:e2:f6:8a:68:03:f7:73:13:d3:f3:2f: 10:9b:bf:e0:a6:45:29:92:7e:91:14:1a:c3:a5:4c:8e:8e:57: ac:f5:b0:fc:4d:2d:31:1d:fe:ab:c3:6b:52:e7:8e:58:a2:66: ae:19:fe:ed:68:0c:b0:4e:05:3d:70:f0:a8:a6:aa:b2:d9:c4: 11:f5:8d:48:0a:e1:db:3e:46:24:24:68:04:c4:f4:2b:2d:08: 73:3c:ca:1e:03:3e:4f:3f:ea:8d:bc:97:2c:f4:e0:46:12:c5: 72:e8:70:d3:de:9a:24:0b:d2:22:bb:da:74:65:a7:2d:02:17: bd:a8:4a:d2:dd:c2:e6:99:35:e1:98:95:d7:5f:ca:6e:9d:41: eb:96:aa:bc:35:b8:3c:b3:21:39:77:5f:f9:f4:c9:db:08:70: b7:54:df:a2:ce:55:4b:cb:6e:be:28:08:61:7e:99:c3:54:c2: 4d:22:e7:f9:8b:b7:14:d5:e6:43:51:eb:d3:fb:8d:13:52:1b: 57:ac:66:ba:c8:42:3e:21:8f:fc:fd:16:8f:29:d7:41:bf:2e: 17:84:74:a1:d0:61:42:18:9a:37:a5:de:84:23:32:f6:17:15: 0a:2b:21:3f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVmr3OeN5ZIR7eWeH87T9s1DJjrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNjAyMDIwMzM3MjZaFw0yNzAyMDEwMzQyMjZaMDMxMTAvBgNV BAMTKDBCQjU3N0E5RkI3RTNBMUQ0OTE3MDc1MDZGMTFEQkU3REY4MUJBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80PDgm3vrNQx/UbpQ6o5PvfBr GH1YRYj/5IASf/t0eIOBHEgXsSD7O6SCu7TCXoLM6FETC10OWiLRnE3NzgaFMWWl GaWRyln+yczGNEs5MRF/GUbnujhuZTjtKI5cbGTl2DXgyxQznOXi2t8pUGS3g0rE OpuEyoi6s18tgPp2lnFlzRJsBxiD1/uMHDvlX9LaAFoYp2Aoz1KZ0KyQdh3SehBi BnV6qwnp6iASUBxRhlzu2qeZP4Q6EMWXKnbSPth8ImVfw+BaGQV31fCmc/rb2bE9 RpJkiHJI03RIUuiZV5VyoNyi9NNWMaFlNSUeHgycNAkf1cEHTN3RBEs/J1pZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUC7V3qft+Oh1JFwdQbxHb59+ButYwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjZjAwZjhhLTVjYmQtNDYwZi1i ZmM2LWJkODk0MmI2NTM3Yy8wLzMyMzAzMjJlMzkzMDJlMzEzOTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAylrDMA0GCSqG SIb3DQEBCwUAA4IBAQB/QboOxsffjLjpv6eX6hMfa+JM5Up0l/Xg4vaKaAP3cxPT 8y8Qm7/gpkUpkn6RFBrDpUyOjles9bD8TS0xHf6rw2tS545YomauGf7taAywTgU9 cPCopqqy2cQR9Y1ICuHbPkYkJGgExPQrLQhzPMoeAz5PP+qNvJcs9OBGEsVy6HDT 3pokC9Iiu9p0ZactAhe9qErS3cLmmTXhmJXXX8punUHrlqq8Nbg8syE5d1/59Mnb CHC3VN+izlVLy26+KAhhfpnDVMJNIuf5i7cU1eZDUevT+40TUhtXrGa6yEI+IY/8 /RaPKddBvy4XhHSh0GFCGJo3pd6EIzL2FxUKKyE/ -----END CERTIFICATE-----Generated at Mon Feb 2 12:42:37 2026 by rpki-client