This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa File: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (raw, json) Hash identifier: XcDiOJhAR1vd2U+Ewn3aHsLFKLuGOijteolk93wlaIY= Subject key identifier: 30:EB:3F:B7:2B:F3:20:0C:DD:61:E2:D8:99:41:48:53:0D:5E:A1:83 Certificate issuer: /CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Certificate serial: 44FC2F4EB5D4CE9A5A32DEB84E25096F0A74B194 Authority key identifier: C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa Signing time: Sat 20 Dec 2025 11:02:39 +0000 ROA not before: Sat 20 Dec 2025 10:57:39 +0000 ROA not after: Sat 19 Dec 2026 11:02:39 +0000 asID: 152084 IP address blocks: 203.14.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 12:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fc:2f:4e:b5:d4:ce:9a:5a:32:de:b8:4e:25:09:6f:0a:74:b1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C35ED85B36F5D519D2CD1D474BE51C13F49A7E47 Validity Not Before: Dec 20 10:57:39 2025 GMT Not After : Dec 19 11:02:39 2026 GMT Subject: CN=30EB3FB72BF3200CDD61E2D8994148530D5EA183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:b9:1e:cc:20:76:e7:65:30:dc:52:1b:6a: c0:e4:b0:ae:c7:9c:f0:90:4c:f9:45:81:fd:06:06: ab:c7:ea:16:0e:5b:a5:eb:69:fe:c7:a7:fd:e3:75: f0:e5:e5:f2:1f:8b:16:61:79:de:f5:d9:d3:7c:cf: cc:76:a4:6e:7d:94:fa:11:36:7b:19:72:c0:f1:d6: c8:90:b1:15:77:76:6e:46:e5:2c:f7:cb:37:06:bc: 31:9a:2d:f1:41:b5:a2:8e:cb:97:2e:ba:36:17:c6: 94:54:9d:ba:87:87:26:d8:38:b8:eb:6b:3b:23:a4: db:b2:08:8c:55:fc:f2:1d:64:0f:4b:11:bb:98:1e: 21:0b:66:bc:19:9c:ba:7d:e1:79:b0:04:68:80:03: 49:4b:24:d6:b7:e8:0e:53:f4:71:af:c0:ee:62:7c: fc:45:bf:84:ae:03:fc:9a:a6:01:92:fc:96:86:02: 0c:ab:8d:3a:ad:7b:08:4a:c5:a3:88:6c:e3:ad:7f: 04:7e:36:c8:bd:0d:ee:2b:63:87:81:2c:ac:d7:b6: 3c:b1:6e:92:1c:5e:64:97:9a:04:9b:a9:d7:c2:33: ba:a8:2a:96:84:a3:b2:89:73:6f:bc:03:46:06:43: 44:63:47:88:21:cf:ae:db:5c:58:b1:44:0c:c2:db: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EB:3F:B7:2B:F3:20:0C:DD:61:E2:D8:99:41:48:53:0D:5E:A1:83 X509v3 Authority Key Identifier: keyid:C3:5E:D8:5B:36:F5:D5:19:D2:CD:1D:47:4B:E5:1C:13:F4:9A:7E:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C35ED85B36F5D519D2CD1D474BE51C13F49A7E47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/3230332e31342e31382e302f32342d3234203d3e20313532303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.14.18.0/24 Signature Algorithm: sha256WithRSAEncryption 73:54:16:05:d2:b0:2e:5d:09:c9:74:89:38:02:c5:3f:4d:b4: a4:02:c9:f6:9f:2a:66:14:6c:6f:bf:0b:68:ba:92:fe:cf:bf: 27:2e:0c:a9:f6:a1:dc:15:ca:9c:38:24:7b:08:88:3c:ef:b9: 7a:fb:c5:2a:f7:62:32:43:61:f0:fb:7e:41:af:2c:41:a7:35: 79:84:13:e0:d0:8c:dd:e2:ea:64:2c:22:fc:c2:ef:71:3c:f4: fb:7c:24:41:3c:b4:29:af:f3:3c:68:8d:b8:b1:91:bd:ed:3b: 62:f4:fd:8b:2a:e1:41:59:1c:7e:41:7e:96:c3:7a:64:6b:75: 7e:de:fc:d4:cb:ef:70:89:f0:9b:61:49:1f:77:27:96:12:e5: 8c:07:67:af:b4:19:07:70:83:70:06:85:7b:20:b6:3c:b5:fd: 79:4b:e3:a8:67:50:73:88:a6:fd:5b:c4:c6:10:24:09:bd:e2: 36:bc:7f:a1:3f:0d:4f:03:1d:ce:4f:33:a3:90:3d:e1:f4:9a: d8:7d:a6:7e:79:3e:8a:27:92:9f:c7:c5:a6:90:9b:61:32:d6: 56:90:ec:fe:73:7d:c3:86:77:3a:bf:f9:a6:e3:d9:42:28:17: d8:d4:fb:5f:99:50:5a:44:db:57:dd:79:ff:93:7e:0b:a7:ae: ce:63:33:1a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURPwvTrXUzppaMt64TiUJbwp0sZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNG NDlBN0U0NzAeFw0yNTEyMjAxMDU3MzlaFw0yNjEyMTkxMTAyMzlaMDMxMTAvBgNV BAMTKDMwRUIzRkI3MkJGMzIwMENERDYxRTJEODk5NDE0ODUzMEQ1RUExODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHLkezCB252Uw3FIbasDksK7H nPCQTPlFgf0GBqvH6hYOW6Xraf7Hp/3jdfDl5fIfixZhed712dN8z8x2pG59lPoR NnsZcsDx1siQsRV3dm5G5Sz3yzcGvDGaLfFBtaKOy5cuujYXxpRUnbqHhybYOLjr azsjpNuyCIxV/PIdZA9LEbuYHiELZrwZnLp94XmwBGiAA0lLJNa36A5T9HGvwO5i fPxFv4SuA/yapgGS/JaGAgyrjTqtewhKxaOIbOOtfwR+Nsi9De4rY4eBLKzXtjyx bpIcXmSXmgSbqdfCM7qoKpaEo7KJc2+8A0YGQ0RjR4ghz67bXFixRAzC2ynPAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMOs/tyvzIAzdYeLYmUFIUw1eoYMwHwYDVR0j BBgwFoAUw17YWzb11RnSzR1HS+UcE/SafkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTM2NjZlMS0xZTQxLTQyZWQtYWJiYy1hOGMwODdmM2YzMzkvMC9DMzVFRDg1QjM2 RjVENTE5RDJDRDFENDc0QkU1MUMxM0Y0OUE3RTQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM1RUQ4NUIzNkY1RDUxOUQyQ0QxRDQ3NEJFNTFDMTNGNDlB N0U0Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1MzY2NmUxLTFlNDEtNDJlZC1h YmJjLWE4YzA4N2YzZjMzOS8wLzMyMzAzMzJlMzEzNDJlMzEzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsOEjANBgkqhkiG 9w0BAQsFAAOCAQEAc1QWBdKwLl0JyXSJOALFP020pALJ9p8qZhRsb78LaLqS/s+/ Jy4Mqfah3BXKnDgkewiIPO+5evvFKvdiMkNh8Pt+Qa8sQac1eYQT4NCM3eLqZCwi /MLvcTz0+3wkQTy0Ka/zPGiNuLGRve07YvT9iyrhQVkcfkF+lsN6ZGt1ft781Mvv cInwm2FJH3cnlhLljAdnr7QZB3CDcAaFeyC2PLX9eUvjqGdQc4im/VvExhAkCb3i Nrx/oT8NTwMdzk8zo5A94fSa2H2mfnk+iieSn8fFppCbYTLWVpDs/nN9w4Z3Or/5 puPZQigX2NT7X5lQWkTbV915/5N+C6euzmMzGg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:34 2025 by rpki-client