This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa File: 3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa (raw, json) Hash identifier: fPmSL642+oG1uO78aOuIfX6wifRMvvy1HlZdKHPBb2M= Subject key identifier: FB:8E:6C:2F:F8:BF:61:C2:EE:58:2F:C6:0A:F0:EA:B7:E3:66:D4:61 Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 388CDA16F2E68A13EC2B1727853687AAAFDCFACC Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa Signing time: Wed 10 Dec 2025 04:02:32 +0000 ROA not before: Wed 10 Dec 2025 03:57:32 +0000 ROA not after: Wed 09 Dec 2026 04:02:32 +0000 asID: 133798 IP address blocks: 203.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8c:da:16:f2:e6:8a:13:ec:2b:17:27:85:36:87:aa:af:dc:fa:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Dec 10 03:57:32 2025 GMT Not After : Dec 9 04:02:32 2026 GMT Subject: CN=FB8E6C2FF8BF61C2EE582FC60AF0EAB7E366D461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:33:e4:e4:43:33:cf:12:a8:29:42:88:2a: d8:6e:27:72:b7:49:2e:05:14:0d:80:f0:57:47:a9: 1d:cf:5b:71:3a:fd:3c:45:62:fb:3f:1f:27:71:2f: 42:3e:55:28:4a:1c:05:8f:03:00:7b:ab:bd:63:a6: 9e:72:1f:13:4c:bc:33:5a:62:41:f6:89:92:a8:75: 33:c6:95:35:32:3e:77:61:f6:e7:ae:4a:e0:36:85: f9:58:1c:d7:fe:b7:8d:b4:31:c8:19:39:a5:39:0c: 1c:b7:00:07:0c:8b:31:d3:fa:1b:ac:81:f3:6a:ba: e5:ae:11:06:7d:0f:5d:02:ba:65:35:70:4f:c6:1e: d1:0b:e0:e4:87:26:67:ff:ef:00:62:5b:ec:e0:10: 0b:59:ad:77:b7:8e:29:93:dc:29:a3:55:50:53:b1: f5:2a:42:6c:9e:26:23:88:1c:95:2f:14:c6:eb:53: 33:54:bf:ec:aa:21:65:6c:02:2f:f1:8f:95:f1:0e: 5a:6b:3c:86:e7:99:0d:56:e1:47:22:c0:e4:45:6c: 23:e2:c2:86:63:7a:31:5c:8e:58:10:0f:2a:3c:39: b5:c7:f7:58:5e:4d:08:31:6e:7e:fa:90:2e:95:ee: e4:87:04:36:df:b0:5b:5b:f7:32:61:38:fd:6d:4b: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8E:6C:2F:F8:BF:61:C2:EE:58:2F:C6:0A:F0:EA:B7:E3:66:D4:61 X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32342d3234203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.128.248.0/24 Signature Algorithm: sha256WithRSAEncryption b5:73:a1:6f:b0:57:c3:ca:e3:33:69:9a:bc:d8:ba:e0:7b:39: a3:51:15:f1:fa:15:74:1a:60:68:25:8e:85:8f:3d:55:d9:a5: 32:46:46:da:53:49:b1:1f:20:ff:e7:ec:19:d0:90:14:32:d9: 8f:ec:9b:1b:80:25:5e:a5:c5:e8:29:1b:f0:98:20:af:a4:e6: c9:54:b1:6c:dc:c8:2c:24:2a:3c:e2:c7:f6:b2:4d:bf:e3:51: a0:d7:48:fd:3b:39:34:1d:a5:8d:4f:6d:d7:e2:e0:7f:7f:30: 0c:45:d5:7e:83:8e:41:ba:4a:bd:75:38:db:93:65:ff:74:f3: 3f:02:96:1b:5d:8e:fa:4a:e6:92:c5:9d:60:eb:8d:cb:44:a6: 08:1a:dc:fe:38:17:24:50:97:91:2b:20:25:71:23:b6:1b:fb: f4:78:b0:b5:30:e0:c7:51:35:fa:51:2e:63:09:58:4c:9c:04: 68:0c:aa:dc:90:8e:53:cc:dc:5c:de:39:8d:de:d1:27:f4:05: 8f:27:a1:29:ad:c7:35:6e:99:5b:aa:2f:43:cd:18:45:44:34: e9:b3:3e:13:0e:a9:8c:40:1d:34:40:3a:51:3f:60:c4:7a:99: b7:0c:5e:8a:1a:cb:9b:85:70:ae:96:28:cd:19:e4:09:10:3f: e7:81:a6:94 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOIzaFvLmihPsKxcnhTaHqq/c+swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTEyMTAwMzU3MzJaFw0yNjEyMDkwNDAyMzJaMDMxMTAvBgNV BAMTKEZCOEU2QzJGRjhCRjYxQzJFRTU4MkZDNjBBRjBFQUI3RTM2NkQ0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GTPk5EMzzxKoKUKIKthuJ3K3 SS4FFA2A8FdHqR3PW3E6/TxFYvs/HydxL0I+VShKHAWPAwB7q71jpp5yHxNMvDNa YkH2iZKodTPGlTUyPndh9ueuSuA2hflYHNf+t420McgZOaU5DBy3AAcMizHT+hus gfNquuWuEQZ9D10CumU1cE/GHtEL4OSHJmf/7wBiW+zgEAtZrXe3jimT3CmjVVBT sfUqQmyeJiOIHJUvFMbrUzNUv+yqIWVsAi/xj5XxDlprPIbnmQ1W4UciwORFbCPi woZjejFcjlgQDyo8ObXH91heTQgxbn76kC6V7uSHBDbfsFtb9zJhOP1tS19jAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU+45sL/i/YcLuWC/GCvDqt+Nm1GEwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLgPgwDQYJ KoZIhvcNAQELBQADggEBALVzoW+wV8PK4zNpmrzYuuB7OaNRFfH6FXQaYGgljoWP PVXZpTJGRtpTSbEfIP/n7BnQkBQy2Y/smxuAJV6lxegpG/CYIK+k5slUsWzcyCwk Kjzix/ayTb/jUaDXSP07OTQdpY1Pbdfi4H9/MAxF1X6DjkG6Sr11ONuTZf908z8C lhtdjvpK5pLFnWDrjctEpgga3P44FyRQl5ErICVxI7Yb+/R4sLUw4MdRNfpRLmMJ WEycBGgMqtyQjlPM3FzeOY3e0Sf0BY8noSmtxzVumVuqL0PNGEVENOmzPhMOqYxA HTRAOlE/YMR6mbcMXooay5uFcK6WKM0Z5AkQP+eBppQ= -----END CERTIFICATE-----Generated at Thu Dec 25 03:04:06 2025 by rpki-client