This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa File: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (raw, json) Hash identifier: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI= Subject key identifier: B9:A5:A7:49:89:86:4E:82:F7:57:6B:82:56:E0:3B:D8:3E:7F:F5:A4 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 4A199DE8FEE25A931C42FB358B8F7E6477892A10 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa Signing time: Sun 09 Nov 2025 15:00:00 +0000 ROA not before: Sun 09 Nov 2025 14:55:00 +0000 ROA not after: Sun 08 Nov 2026 15:00:00 +0000 asID: 45724 IP address blocks: 202.8.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:19:9d:e8:fe:e2:5a:93:1c:42:fb:35:8b:8f:7e:64:77:89:2a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Nov 9 14:55:00 2025 GMT Not After : Nov 8 15:00:00 2026 GMT Subject: CN=B9A5A74989864E82F7576B8256E03BD83E7FF5A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:32:37:75:1a:02:a9:06:3e:70:29:2c:ae: 74:e6:ae:e6:32:ef:44:ad:66:54:11:78:2c:10:d4: c6:94:f6:41:12:2a:e3:23:24:45:cd:ea:d7:03:27: 03:6e:7d:c3:cc:d6:ab:dd:1d:6d:d4:4e:f9:7a:13: 43:38:ce:6f:50:28:b2:3b:0c:fd:06:61:18:db:01: 75:a8:fc:11:55:4a:b8:a3:3a:28:7f:6b:02:e3:0e: 54:39:ec:3f:26:46:b8:b9:fb:eb:6e:f8:a8:db:e8: a9:a7:07:8f:bd:d8:4a:8d:3a:8e:c7:56:06:4a:eb: ca:eb:7d:13:4e:8c:6a:af:9a:06:9f:9c:5a:b0:56: 49:19:41:5a:d2:c5:de:44:3e:de:70:61:66:f7:a7: e7:17:f5:ef:57:75:76:34:6a:72:0a:a6:bd:10:04: 92:b9:e1:f1:b6:a6:7a:50:b8:ed:4f:c1:5f:c2:43: 9c:c4:7f:9f:26:00:67:59:19:23:2b:a2:0d:f3:ab: b6:1b:a7:b8:72:c6:c1:12:39:6e:40:c1:98:09:91: 97:f8:57:e2:b8:b5:06:63:fe:ca:8f:d4:e5:7b:d5: 2b:c7:d6:dd:dd:c4:e8:19:37:cf:79:f0:25:d8:1e: c6:af:ac:c5:2f:89:96:34:1d:92:79:79:9f:24:1e: 7a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A5:A7:49:89:86:4E:82:F7:57:6B:82:56:E0:3B:D8:3E:7F:F5:A4 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/3230322e382e32382e302f32342d3234203d3e203435373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.8.28.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:8c:71:a3:07:90:3c:4c:6a:ab:06:9c:f8:11:d7:80:ab:a1: 61:de:23:8f:12:aa:af:f0:cc:bc:05:f4:9a:77:33:1c:58:6c: 33:32:5b:53:7f:2d:c1:1a:2b:ae:5b:86:12:67:7a:62:d9:e7: e2:37:a0:3a:15:57:40:14:c6:8f:57:e6:ad:77:4f:82:06:73: 92:9c:ed:f8:03:d6:7c:91:d9:ce:25:f1:d0:e7:94:f9:cc:83: 11:3c:f2:24:53:52:3b:40:6e:e7:04:1f:39:3b:71:0b:f0:0e: b1:9f:50:ca:3c:3b:fe:68:b0:ac:cf:35:2e:de:cc:04:ca:7b: a9:2d:d6:67:72:1b:12:8d:44:6d:cb:94:1b:3f:f5:57:1a:14: fb:8c:e1:d0:fe:4a:95:c7:65:16:f7:33:08:d7:11:cf:73:e7: 86:e2:6f:7d:4c:5e:7b:5a:83:80:d5:32:20:5f:27:94:5e:46: 72:b3:a2:2f:49:d3:a8:6c:1f:43:99:e5:1d:93:2c:ad:61:cd: 71:19:86:70:dd:ff:ae:e6:e0:80:ef:83:cb:7e:c4:4a:15:3c: 82:17:69:08:88:79:2b:c5:e3:2d:b4:cb:ba:6c:c6:cc:76:83: e4:7b:b4:f1:6a:cc:9f:24:86:2b:6c:4f:7f:a2:10:c2:05:66: 4d:2b:a4:c1 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUShmd6P7iWpMcQvs1i49+ZHeJKhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTExMDkxNDU1MDBaFw0yNjExMDgxNTAwMDBaMDMxMTAvBgNV BAMTKEI5QTVBNzQ5ODk4NjRFODJGNzU3NkI4MjU2RTAzQkQ4M0U3RkY1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SzI3dRoCqQY+cCksrnTmruYy 70StZlQReCwQ1MaU9kESKuMjJEXN6tcDJwNufcPM1qvdHW3UTvl6E0M4zm9QKLI7 DP0GYRjbAXWo/BFVSrijOih/awLjDlQ57D8mRri5++tu+Kjb6KmnB4+92EqNOo7H VgZK68rrfRNOjGqvmgafnFqwVkkZQVrSxd5EPt5wYWb3p+cX9e9XdXY0anIKpr0Q BJK54fG2pnpQuO1PwV/CQ5zEf58mAGdZGSMrog3zq7Ybp7hyxsESOW5AwZgJkZf4 V+K4tQZj/sqP1OV71SvH1t3dxOgZN8958CXYHsavrMUviZY0HZJ5eZ8kHnodAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUuaWnSYmGToL3V2uCVuA72D5/9aQwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzIzMDMyMmUzODJlMzIzODJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM0MzUzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCBwwDQYJKoZIhvcNAQEL BQADggEBAFqMcaMHkDxMaqsGnPgR14CroWHeI48Sqq/wzLwF9Jp3MxxYbDMyW1N/ LcEaK65bhhJnemLZ5+I3oDoVV0AUxo9X5q13T4IGc5Kc7fgD1nyR2c4l8dDnlPnM gxE88iRTUjtAbucEHzk7cQvwDrGfUMo8O/5osKzPNS7ezATKe6kt1mdyGxKNRG3L lBs/9VcaFPuM4dD+SpXHZRb3MwjXEc9z54bib31MXntag4DVMiBfJ5ReRnKzoi9J 06hsH0OZ5R2TLK1hzXEZhnDd/67m4IDvg8t+xEoVPIIXaQiIeSvF4y20y7psxsx2 g+R7tPFqzJ8khitsT3+iEMIFZk0rpME= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:55 2025 by rpki-client