This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa File: 3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa (raw, json) Hash identifier: 9ueNsf48SUY+xtp4ywCcHlMUOqR56TvW5HOOZ8L51Fc= Subject key identifier: 1E:A4:EB:E4:BC:53:31:33:CF:96:28:29:E3:3F:00:8B:56:B1:24:DC Certificate issuer: /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Certificate serial: 648CD977AF39A3D6322CB0A469CC571012EA2519 Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa Signing time: Tue 23 Dec 2025 08:01:37 +0000 ROA not before: Tue 23 Dec 2025 07:56:37 +0000 ROA not after: Tue 22 Dec 2026 08:01:37 +0000 asID: 139365 IP address blocks: 202.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8c:d9:77:af:39:a3:d6:32:2c:b0:a4:69:cc:57:10:12:ea:25:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325 Validity Not Before: Dec 23 07:56:37 2025 GMT Not After : Dec 22 08:01:37 2026 GMT Subject: CN=1EA4EBE4BC533133CF962829E33F008B56B124DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:dd:32:85:02:98:9f:16:16:f9:b6:f7:89: 14:97:23:50:81:7d:ef:cc:2f:8c:8c:18:7d:8f:d0: 44:ce:80:d8:e3:2e:a5:f8:31:a9:bd:a8:8d:a9:41: 2e:0f:e8:ae:04:25:a8:7c:84:e5:19:54:08:5e:30: 27:3a:86:42:6d:b9:dd:bf:b3:68:46:63:4d:69:8c: 7e:43:2f:aa:d5:07:fb:c1:32:c8:0a:9b:ce:76:6e: 74:c9:6e:13:f8:b9:85:a3:04:79:0f:03:2e:db:ec: 2f:d8:d9:0a:91:b4:e5:a4:84:f7:03:f0:1f:0a:f0: 31:e0:0e:75:f9:4d:91:dd:41:a3:d7:4f:71:58:71: d3:a1:6b:d6:7c:b0:65:c5:4b:b4:e9:51:c4:09:22: 08:bb:08:46:9f:96:39:a1:ab:b4:19:96:b4:bc:ca: 54:ee:e3:a4:8f:82:d8:2b:42:11:6a:41:10:bb:c8: a7:5a:4b:af:e1:5a:51:d5:46:80:51:d4:b3:b9:4e: ee:41:92:84:06:7d:c2:67:4d:bd:9b:d4:69:a7:02: 4e:fa:32:ec:fd:a0:ea:26:be:c4:aa:82:ed:50:32: a3:94:3d:56:d7:f2:f7:d7:be:f5:69:a0:fc:51:ab: e1:2e:0b:42:87:7e:3f:31:88:c9:2b:68:ed:82:8c: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A4:EB:E4:BC:53:31:33:CF:96:28:29:E3:3F:00:8B:56:B1:24:DC X509v3 Authority Key Identifier: keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e20313339333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.169.253.0/24 Signature Algorithm: sha256WithRSAEncryption 12:46:e6:b0:1c:50:f6:c5:65:a7:20:5d:e9:e2:e3:5f:85:06: 35:6b:70:66:a9:a6:da:de:7e:f4:33:10:21:21:b5:dc:29:38: 2f:0e:d1:d9:f0:33:44:e5:56:4f:14:5a:6f:31:68:5a:04:a4: de:20:79:f6:49:0b:4a:3e:14:4b:11:88:e5:8a:d2:ca:ec:9b: 75:01:5a:f3:f0:ff:16:85:71:1d:12:f0:0c:58:0c:81:e0:4f: 22:df:3b:00:fb:03:4f:9f:b4:3e:a0:66:27:27:eb:61:cc:f5: 28:a7:c9:d0:62:dd:1b:c3:05:10:b6:00:5d:a4:9f:99:01:99: 69:4e:79:f5:06:13:48:d4:aa:c5:6c:41:02:b1:32:77:2f:8c: 80:f0:5d:92:38:6e:5d:5e:00:0b:b2:ce:fe:3e:6f:84:a7:a9: 91:c8:ba:4a:0b:3a:c1:c4:cc:36:74:ad:e1:ca:87:53:df:af: 68:7a:07:58:6a:85:7a:ad:47:0b:ef:2a:1e:17:42:27:4b:58: db:67:e9:a8:3f:1e:2b:0d:b8:dd:12:40:50:ee:6e:1d:5f:5f: 70:7c:8f:58:19:69:d2:af:4c:47:18:b7:c4:58:f2:f5:90:b7: eb:86:62:14:6b:f5:6a:ca:05:0e:72:cd:b0:65:e0:c3:ae:1c: 8d:8a:88:21 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZIzZd685o9YyLLCkacxXEBLqJRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFC MUNFMDMyNTAeFw0yNTEyMjMwNzU2MzdaFw0yNjEyMjIwODAxMzdaMDMxMTAvBgNV BAMTKDFFQTRFQkU0QkM1MzMxMzNDRjk2MjgyOUUzM0YwMDhCNTZCMTI0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2N0yhQKYnxYW+bb3iRSXI1CB fe/ML4yMGH2P0ETOgNjjLqX4Mam9qI2pQS4P6K4EJah8hOUZVAheMCc6hkJtud2/ s2hGY01pjH5DL6rVB/vBMsgKm852bnTJbhP4uYWjBHkPAy7b7C/Y2QqRtOWkhPcD 8B8K8DHgDnX5TZHdQaPXT3FYcdOha9Z8sGXFS7TpUcQJIgi7CEafljmhq7QZlrS8 ylTu46SPgtgrQhFqQRC7yKdaS6/hWlHVRoBR1LO5Tu5BkoQGfcJnTb2b1GmnAk76 Muz9oOomvsSqgu1QMqOUPVbX8vfXvvVpoPxRq+EuC0KHfj8xiMkraO2CjE3jAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHqTr5LxTMTPPligp4z8Ai1axJNwwHwYDVR0j BBgwFoAUNCBhuX/5flGAUR84sKDcurHOAyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2I5YTRiOS00YWUzLTQ2N2EtYjkxOS00MTBlMTQyYjY3OWYvMC8zNDIwNjFCOTdG Rjk3RTUxODA1MTFGMzhCMEEwRENCQUIxQ0UwMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQyMDYxQjk3RkY5N0U1MTgwNTExRjM4QjBBMERDQkFCMUNF MDMyNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjYjlhNGI5LTRhZTMtNDY3YS1i OTE5LTQxMGUxNDJiNjc5Zi8wLzMyMzAzMjJlMzEzNjM5MmUzMjM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKqf0wDQYJ KoZIhvcNAQELBQADggEBABJG5rAcUPbFZacgXeni41+FBjVrcGapptrefvQzECEh tdwpOC8O0dnwM0TlVk8UWm8xaFoEpN4gefZJC0o+FEsRiOWK0srsm3UBWvPw/xaF cR0S8AxYDIHgTyLfOwD7A0+ftD6gZicn62HM9SinydBi3RvDBRC2AF2kn5kBmWlO efUGE0jUqsVsQQKxMncvjIDwXZI4bl1eAAuyzv4+b4SnqZHIukoLOsHEzDZ0reHK h1Pfr2h6B1hqhXqtRwvvKh4XQidLWNtn6ag/HisNuN0SQFDubh1fX3B8j1gZadKv TEcYt8RY8vWQt+uGYhRr9WrKBQ5yzbBl4MOuHI2KiCE= -----END CERTIFICATE-----Generated at Wed Dec 24 19:31:51 2025 by rpki-client