This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa File: 3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa (raw, json) Hash identifier: CenP/9c57ce40ti/PWlgyaTpPgKL8ZQZYzwOGmf/Qs4= Subject key identifier: A8:1F:06:25:32:B5:49:03:CB:86:BD:89:2F:39:45:FE:1E:86:30:3A Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Certificate serial: 09C98F1B569B99F53306A8ABBE86DDBACE100DDB Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa Signing time: Tue 23 Dec 2025 03:02:54 +0000 ROA not before: Tue 23 Dec 2025 02:57:54 +0000 ROA not after: Tue 22 Dec 2026 03:02:54 +0000 asID: 138886 IP address blocks: 202.154.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 18:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c9:8f:1b:56:9b:99:f5:33:06:a8:ab:be:86:dd:ba:ce:10:0d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6 Validity Not Before: Dec 23 02:57:54 2025 GMT Not After : Dec 22 03:02:54 2026 GMT Subject: CN=A81F062532B54903CB86BD892F3945FE1E86303A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:b9:0a:c0:6e:fd:e2:df:d9:0d:eb:bf:b2: 4c:65:d4:7a:2c:6f:09:1d:75:a6:c2:46:d6:d0:1c: 8f:ee:b3:ab:df:19:a7:6a:4a:f8:65:30:74:08:4d: 77:cd:f5:c1:60:7d:14:fe:e1:00:b7:6f:d8:8c:db: a9:70:57:be:b4:33:3a:db:86:3f:5c:c8:df:c6:48: ad:cb:e0:7b:82:ab:d3:3e:49:5a:cd:00:20:be:ba: 06:0f:20:1d:77:ec:99:c8:bc:f6:49:8f:da:85:c1: 65:9f:56:0a:ea:b2:3f:7f:f8:93:c2:70:45:30:b2: 0e:04:8c:63:b2:e8:27:8e:5e:55:81:20:61:1e:fa: e4:01:83:2e:ec:12:8e:d6:77:da:d4:e2:ed:b7:85: 8a:97:05:6b:e8:da:8e:2e:df:76:d6:f3:2f:f7:ca: e1:7c:dd:91:c8:70:94:3d:84:0d:fc:52:53:cd:59: 5c:90:ed:a7:8b:06:f7:6b:52:83:9c:ea:87:1e:a1: 1b:aa:54:55:c1:5b:92:8a:64:54:6f:4b:63:de:72: 4c:08:a5:75:72:f8:37:f8:0c:f8:cf:24:42:01:18: 8a:d1:d8:b2:26:4d:be:7f:f2:9f:24:55:88:32:1b: 32:4f:1e:1c:c2:9c:c3:9f:ce:b9:8b:4a:70:c3:0b: 36:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1F:06:25:32:B5:49:03:CB:86:BD:89:2F:39:45:FE:1E:86:30:3A X509v3 Authority Key Identifier: keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e34342e302f32332d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.154.44.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:50:7f:1e:66:9f:19:33:25:a5:6c:3b:43:a9:b5:ad:bf:5a: 9c:14:28:a9:54:25:ff:04:f2:9e:b7:20:8f:76:81:a1:88:07: b2:0b:d0:de:41:73:bd:fb:1e:69:10:cc:30:17:25:81:8b:21: 74:39:1d:85:c1:2e:4b:50:a5:14:ee:0a:ba:a1:18:c9:5f:c1: eb:23:16:33:76:a2:8e:59:2a:76:a9:af:6b:15:89:5b:37:a7: 46:f3:e3:4d:c9:3b:99:e7:4a:51:d6:ea:21:a5:71:8c:82:98: be:99:ed:06:77:d5:1b:4e:8a:e7:55:49:6f:23:0a:f2:de:66: e8:04:5e:67:d9:1a:87:5e:e8:7a:00:5c:c8:c1:90:6a:c9:1f: 34:fe:22:40:88:ca:0e:6a:4f:8e:1a:0f:cd:0c:43:00:a7:8d: 7d:13:c8:83:f0:d8:fe:4b:4f:6b:9e:24:13:37:99:ea:73:25: 6f:5b:64:83:23:84:27:25:8c:5b:9b:05:d4:5f:44:ef:be:6f: cd:80:fe:14:1f:14:0e:a7:14:14:9f:7e:7a:95:8b:0c:2f:b6: 1b:1c:73:7a:1e:73:05:38:8e:bf:bd:16:fe:08:e4:20:e5:92: 75:55:3d:5c:6f:14:d8:4f:57:71:a0:32:7c:25:1d:de:5f:49: c2:f0:af:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCcmPG1abmfUzBqirvobdus4QDdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5 QUU5MjdGNjAeFw0yNTEyMjMwMjU3NTRaFw0yNjEyMjIwMzAyNTRaMDMxMTAvBgNV BAMTKEE4MUYwNjI1MzJCNTQ5MDNDQjg2QkQ4OTJGMzk0NUZFMUU4NjMwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvrLkKwG794t/ZDeu/skxl1Hos bwkddabCRtbQHI/us6vfGadqSvhlMHQITXfN9cFgfRT+4QC3b9iM26lwV760Mzrb hj9cyN/GSK3L4HuCq9M+SVrNACC+ugYPIB137JnIvPZJj9qFwWWfVgrqsj9/+JPC cEUwsg4EjGOy6CeOXlWBIGEe+uQBgy7sEo7Wd9rU4u23hYqXBWvo2o4u33bW8y/3 yuF83ZHIcJQ9hA38UlPNWVyQ7aeLBvdrUoOc6oceoRuqVFXBW5KKZFRvS2PeckwI pXVy+Df4DPjPJEIBGIrR2LImTb5/8p8kVYgyGzJPHhzCnMOfzrmLSnDDCzanAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqB8GJTK1SQPLhr2JLzlF/h6GMDowHwYDVR0j BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5 MjdGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05 MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzNDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByposMA0GCSqG SIb3DQEBCwUAA4IBAQCLUH8eZp8ZMyWlbDtDqbWtv1qcFCipVCX/BPKetyCPdoGh iAeyC9DeQXO9+x5pEMwwFyWBiyF0OR2FwS5LUKUU7gq6oRjJX8HrIxYzdqKOWSp2 qa9rFYlbN6dG8+NNyTuZ50pR1uohpXGMgpi+me0Gd9UbTornVUlvIwry3mboBF5n 2RqHXuh6AFzIwZBqyR80/iJAiMoOak+OGg/NDEMAp419E8iD8Nj+S09rniQTN5nq cyVvW2SDI4QnJYxbmwXUX0Tvvm/NgP4UHxQOpxQUn356lYsML7YbHHN6HnMFOI6/ vRb+COQg5ZJ1VT1cbxTYT1dxoDJ8JR3eX0nC8K8A -----END CERTIFICATE-----Generated at Sat Dec 27 15:46:16 2025 by rpki-client