This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa File: AS46024.roa (raw, json) Hash identifier: RvDi/1OUXku9iMI9XICXFmVL8uaJ9Apq/2DjS740ogA= Subject key identifier: 94:53:9C:EC:77:8A:49:D4:06:03:3B:D3:EC:12:56:C2:27:76:30:40 Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Certificate serial: 4602FC8EC6B1FAE53D3EC3275CE056C5E2803A21 Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa Signing time: Wed 26 Nov 2025 04:16:18 +0000 ROA not before: Wed 26 Nov 2025 04:11:18 +0000 ROA not after: Wed 25 Nov 2026 04:16:18 +0000 asID: 46024 IP address blocks: 203.191.40.0/21 maxlen: 23 203.191.44.0/24 maxlen: 24 203.191.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:02:fc:8e:c6:b1:fa:e5:3d:3e:c3:27:5c:e0:56:c5:e2:80:3a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC Validity Not Before: Nov 26 04:11:18 2025 GMT Not After : Nov 25 04:16:18 2026 GMT Subject: CN=94539CEC778A49D406033BD3EC1256C227763040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:8d:70:18:e5:e5:4b:44:af:a5:70:df:a6: 7c:74:0b:f7:c0:48:3a:80:16:b6:ef:11:75:23:30: 30:5a:95:46:bb:3f:0e:f7:aa:eb:18:a4:5c:58:e3: d8:00:63:69:f8:de:dd:3d:79:73:6f:bf:29:5f:fb: d1:cd:cc:29:6c:c6:6a:ff:6a:56:81:55:cf:5a:f9: fe:8e:48:c1:4d:af:17:f1:fc:b1:f7:bd:cc:c6:75: 3d:d4:0f:7e:fc:c7:03:a1:c5:7c:fb:e7:5f:38:6c: b7:76:fd:bb:ad:a0:81:c2:6e:0b:5a:c5:21:5e:8c: a5:ca:d5:d3:9b:05:2b:29:71:0a:29:c2:30:e3:d0: 10:c3:67:2b:11:8e:ba:cc:25:17:c3:a1:9d:d7:4e: 9b:46:ec:75:dc:26:ae:12:ab:4d:31:10:1e:ae:9c: 8d:75:55:a0:e0:0f:91:39:c9:65:96:a4:19:4a:25: cf:f0:36:6d:5f:4d:1b:ad:36:6b:b4:6c:34:82:9c: f7:f6:3a:a4:18:f5:e4:e7:9b:dc:6f:01:10:05:9d: 1d:0e:d5:16:4c:bb:59:b0:eb:7f:5a:6c:e0:ca:b6: 7d:ce:c0:4a:b1:12:4b:50:58:bc:c3:14:e3:7d:46: 40:71:5e:b0:8d:c5:cf:0b:e7:4b:2c:db:e6:d6:ae: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:53:9C:EC:77:8A:49:D4:06:03:3B:D3:EC:12:56:C2:27:76:30:40 X509v3 Authority Key Identifier: keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS46024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.191.40.0/21 Signature Algorithm: sha256WithRSAEncryption b2:1f:a8:cf:37:9d:05:98:48:65:03:eb:55:55:05:78:c8:01: 66:24:0b:38:f2:84:4f:bc:0b:b6:a8:3d:71:a9:de:27:ba:a0: bc:77:9d:bb:d6:0b:68:26:f6:d6:c4:63:d7:94:f5:fe:cd:62: 06:01:18:89:7d:3a:6d:4e:ac:2e:de:30:fd:02:8b:85:ed:2e: e8:20:b5:37:d4:f4:c6:cf:84:a4:69:b7:ea:9b:20:79:62:2d: 8d:48:2b:77:60:5c:4b:54:54:4b:db:3e:a2:1a:ff:b5:a4:6c: 82:ef:87:0e:6d:09:e2:33:eb:55:71:c0:3a:51:04:25:90:d7: 23:ea:2f:de:e6:33:a1:aa:bd:d2:40:e3:97:3f:c3:20:5d:2d: af:7d:e2:ee:a5:e0:60:1d:8c:4b:60:ee:e7:6b:8b:3f:1b:d5: fd:84:bd:7a:6a:94:d7:5f:2c:cc:90:a5:8c:70:4e:cb:48:12: 60:e9:d0:2f:d7:36:8e:74:7e:e5:b7:89:40:85:51:ff:e7:82: f7:d0:66:fd:08:51:e2:d1:80:77:bb:2a:17:7b:44:f9:05:2f: b0:1c:2a:8b:20:30:31:1e:b6:c6:db:dd:c3:a3:52:0c:96:2e: 35:24:7c:d0:86:aa:1e:80:cb:0b:4a:fd:8a:71:71:72:8e:8b: 83:17:75:96 -----BEGIN CERTIFICATE----- MIIE9DCCA9ygAwIBAgIURgL8jsax+uU9PsMnXOBWxeKAOiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG OEZDMDZFQzAeFw0yNTExMjYwNDExMThaFw0yNjExMjUwNDE2MThaMDMxMTAvBgNV BAMTKDk0NTM5Q0VDNzc4QTQ5RDQwNjAzM0JEM0VDMTI1NkMyMjc3NjMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIY1wGOXlS0SvpXDfpnx0C/fA SDqAFrbvEXUjMDBalUa7Pw73qusYpFxY49gAY2n43t09eXNvvylf+9HNzClsxmr/ alaBVc9a+f6OSMFNrxfx/LH3vczGdT3UD378xwOhxXz75184bLd2/butoIHCbgta xSFejKXK1dObBSspcQopwjDj0BDDZysRjrrMJRfDoZ3XTptG7HXcJq4Sq00xEB6u nI11VaDgD5E5yWWWpBlKJc/wNm1fTRutNmu0bDSCnPf2OqQY9eTnm9xvARAFnR0O 1RZMu1mw639abODKtn3OwEqxEktQWLzDFON9RkBxXrCNxc8L50ss2+bWrhRjAgMB AAGjggH+MIIB+jAdBgNVHQ4EFgQUlFOc7HeKSdQGAzvT7BJWwid2MEAwHwYDVR0j BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2 QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD MDZFQy5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby9lODczNDlmYi00NjVlLTRlOGItYTk3NC05 MGU5MzliY2IwZmIvMC9BUzQ2MDI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDy78oMA0GCSqGSIb3DQEB CwUAA4IBAQCyH6jPN50FmEhlA+tVVQV4yAFmJAs48oRPvAu2qD1xqd4nuqC8d527 1gtoJvbWxGPXlPX+zWIGARiJfTptTqwu3jD9AouF7S7oILU31PTGz4SkabfqmyB5 Yi2NSCt3YFxLVFRL2z6iGv+1pGyC74cObQniM+tVccA6UQQlkNcj6i/e5jOhqr3S QOOXP8MgXS2vfeLupeBgHYxLYO7na4s/G9X9hL16apTXXyzMkKWMcE7LSBJg6dAv 1zaOdH7lt4lAhVH/54L30Gb9CFHi0YB3uyoXe0T5BS+wHCqLIDAxHrbG293Do1IM li41JHzQhqoegMsLSv2KcXFyjouDF3WW -----END CERTIFICATE-----Generated at Wed Dec 3 17:12:36 2025 by rpki-client