This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa File: 3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa (raw, json) Hash identifier: OTkQjXKqiAfQROFPr7ai7rDd8SHr0Zh0ylRXVJnZrMY= Subject key identifier: D7:EC:90:E7:B3:1E:62:D5:EC:9D:92:15:95:20:11:B6:14:AD:4C:9C Certificate issuer: /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Certificate serial: 3744F8B206320565A53AF2C3147BB7CA5E3A5496 Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa Signing time: Wed 10 Dec 2025 04:02:32 +0000 ROA not before: Wed 10 Dec 2025 03:57:32 +0000 ROA not after: Wed 09 Dec 2026 04:02:32 +0000 asID: 133798 IP address blocks: 203.128.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 15:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:44:f8:b2:06:32:05:65:a5:3a:f2:c3:14:7b:b7:ca:5e:3a:54:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39 Validity Not Before: Dec 10 03:57:32 2025 GMT Not After : Dec 9 04:02:32 2026 GMT Subject: CN=D7EC90E7B31E62D5EC9D9215952011B614AD4C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:1d:f0:b7:0c:ef:31:55:89:e2:d8:f7:8c: af:a4:9b:0d:89:12:5f:1b:12:89:33:6c:75:1b:f3: b5:3d:7b:a7:be:31:f6:56:da:12:3e:c5:0e:76:e0: 74:11:38:e5:26:46:c9:be:49:aa:0c:dc:ef:99:1f: 9e:24:9d:ef:fa:e2:07:66:1e:41:c7:c8:56:71:94: cf:1c:e8:83:44:be:95:6d:52:3d:35:ff:13:fd:10: 34:95:5c:d7:2b:4c:55:96:aa:99:e9:53:a7:98:10: d3:ae:bd:80:fe:53:4a:6d:27:36:70:f6:2d:29:be: f5:31:d1:19:55:59:67:46:57:28:3b:8e:c6:f1:99: 5f:17:e2:09:f0:09:66:95:79:7b:03:16:86:2f:ee: a3:54:bd:f9:99:7c:8b:4b:a8:6f:4e:df:f9:9c:ce: f9:13:af:78:4e:da:eb:cb:9e:27:4a:38:b1:c2:43: dc:6d:3f:f6:9c:b4:cf:44:1e:5c:ce:74:9f:6e:1e: 6c:f4:53:9a:8c:bf:86:0e:0f:81:8e:c6:a1:1d:54: 95:f5:ec:0c:57:7f:cc:b2:b3:b9:51:05:26:db:5d: 60:bc:f1:8c:c0:02:eb:af:f3:68:22:46:2d:56:d9: fe:bd:c3:f2:cb:c9:e5:c4:05:06:6a:47:6a:1c:dd: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EC:90:E7:B3:1E:62:D5:EC:9D:92:15:95:20:11:B6:14:AD:4C:9C X509v3 Authority Key Identifier: keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234392e302f32342d3234203d3e20313333373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.128.249.0/24 Signature Algorithm: sha256WithRSAEncryption b1:9a:8a:fc:b8:75:01:f1:da:2f:46:40:fe:11:ec:f7:69:9e: 84:a3:d7:ac:60:ef:39:f8:5e:32:62:f6:9e:be:89:1a:1f:a0: 07:f1:d2:88:15:d7:0c:55:f2:ef:4b:73:ed:5f:01:f1:f2:90: d2:b7:61:c9:85:6e:0e:e2:0a:64:df:bd:9d:5a:8c:5b:ab:3b: 6f:d1:8b:46:b0:bc:42:5e:2a:2a:0e:c4:c5:14:0e:1a:2d:5b: 77:33:39:e5:77:4b:65:bd:4f:2c:91:8d:a3:84:d2:b8:bf:5e: b1:8c:33:fb:68:ff:6c:15:6b:bc:7d:bb:ca:97:2a:19:08:3a: 0e:62:cf:c6:ee:88:e2:94:b2:88:39:4a:75:b4:17:b6:5c:97: 6e:cd:7f:c5:88:7d:c4:88:65:d6:87:70:1b:e5:dc:11:ac:cc: 7a:32:1e:ca:03:03:06:f6:b5:8d:eb:9b:57:92:64:a8:df:8b: 35:46:7a:b9:3a:cb:31:26:a6:fe:9a:c7:bf:21:bf:e9:bf:00: 63:bd:43:f3:54:c0:26:50:d8:9e:4a:1a:f7:bd:fb:5a:09:9c: c4:34:d0:80:9a:b5:ff:46:35:d3:73:9c:41:26:a1:5b:aa:4e: fd:91:1a:37:a2:91:0e:1f:84:9d:f5:f7:96:21:dd:24:2e:0d: be:ca:4b:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUN0T4sgYyBWWlOvLDFHu3yl46VJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4 NEMxNkIzOTAeFw0yNTEyMTAwMzU3MzJaFw0yNjEyMDkwNDAyMzJaMDMxMTAvBgNV BAMTKEQ3RUM5MEU3QjMxRTYyRDVFQzlEOTIxNTk1MjAxMUI2MTRBRDRDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyB3wtwzvMVWJ4tj3jK+kmw2J El8bEokzbHUb87U9e6e+MfZW2hI+xQ524HQROOUmRsm+SaoM3O+ZH54kne/64gdm HkHHyFZxlM8c6INEvpVtUj01/xP9EDSVXNcrTFWWqpnpU6eYENOuvYD+U0ptJzZw 9i0pvvUx0RlVWWdGVyg7jsbxmV8X4gnwCWaVeXsDFoYv7qNUvfmZfItLqG9O3/mc zvkTr3hO2uvLnidKOLHCQ9xtP/actM9EHlzOdJ9uHmz0U5qMv4YOD4GOxqEdVJX1 7AxXf8yys7lRBSbbXWC88YzAAuuv82giRi1W2f69w/LLyeXEBQZqR2oc3QorAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1+yQ57MeYtXsnZIVlSARthStTJwwHwYDVR0j BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1 RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx NkIzOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADLgPkwDQYJ KoZIhvcNAQELBQADggEBALGaivy4dQHx2i9GQP4R7PdpnoSj16xg7zn4XjJi9p6+ iRofoAfx0ogV1wxV8u9Lc+1fAfHykNK3YcmFbg7iCmTfvZ1ajFurO2/Ri0awvEJe KioOxMUUDhotW3czOeV3S2W9TyyRjaOE0ri/XrGMM/to/2wVa7x9u8qXKhkIOg5i z8buiOKUsog5SnW0F7Zcl27Nf8WIfcSIZdaHcBvl3BGszHoyHsoDAwb2tY3rm1eS ZKjfizVGerk6yzEmpv6ax78hv+m/AGO9Q/NUwCZQ2J5KGve9+1oJnMQ00ICatf9G NdNznEEmoVuqTv2RGjeikQ4fhJ3195Yh3SQuDb7KS5Y= -----END CERTIFICATE-----Generated at Thu Dec 25 03:04:06 2025 by rpki-client