This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa File: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (raw, json) Hash identifier: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8= Subject key identifier: 82:91:5C:B9:7B:9B:8D:66:04:C7:9D:90:C7:F7:93:6E:D9:12:99:77 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 5F9B7D9C32719F45CBCC77BAEB30AA22C33F1645 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa Signing time: Fri 12 Dec 2025 04:00:01 +0000 ROA not before: Fri 12 Dec 2025 03:55:01 +0000 ROA not after: Fri 11 Dec 2026 04:00:01 +0000 asID: 9340 IP address blocks: 202.153.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9b:7d:9c:32:71:9f:45:cb:cc:77:ba:eb:30:aa:22:c3:3f:16:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Dec 12 03:55:01 2025 GMT Not After : Dec 11 04:00:01 2026 GMT Subject: CN=82915CB97B9B8D6604C79D90C7F7936ED9129977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e1:12:ff:7a:ed:2b:4e:90:3b:aa:1c:95:11: e6:3f:1a:2e:ca:ef:f7:f9:4f:d1:37:b8:01:ad:dc: bb:94:57:8b:1d:60:82:3d:a8:68:8d:22:d9:d4:63: e5:ff:82:2e:60:c4:87:34:70:77:82:81:da:c9:3f: d6:eb:6e:d0:71:df:39:6b:d8:d6:1b:a3:f0:0e:4b: fa:b1:c0:42:91:94:9f:09:60:6b:25:ca:40:0a:27: db:4a:10:93:74:e5:32:53:cf:cd:c3:20:04:87:46: 35:8e:16:30:a9:7f:ac:ff:5b:19:8a:c7:29:0a:a7: 48:6e:57:3e:f2:2e:ac:59:16:ba:f2:70:3e:e0:61: f3:63:ee:84:88:07:a5:c6:43:af:16:bf:0e:d7:78: 42:9d:ba:ef:06:00:64:e2:6c:9f:f5:1c:72:5c:cd: 6e:85:d5:8d:15:6f:4c:21:d0:7f:fa:98:37:91:9f: 3f:57:49:b8:03:83:4b:fb:5d:e1:1b:c9:3c:f9:d5: 28:3f:ff:8d:e0:c0:80:af:a6:73:06:e2:92:f4:08: 1a:aa:bf:c9:10:2b:97:fc:51:af:c3:fe:61:0c:4e: a9:cb:74:39:ff:92:6d:03:92:cc:a7:24:0a:d8:0b: 31:d3:e1:7f:7b:47:17:03:9f:30:df:d1:64:e7:5d: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:5C:B9:7B:9B:8D:66:04:C7:9D:90:C7:F7:93:6E:D9:12:99:77 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.153.224.0/19 Signature Algorithm: sha256WithRSAEncryption de:56:b8:da:d6:2a:c9:83:3b:ca:f3:5e:a7:d1:84:71:7a:d5: 03:b6:23:14:c2:02:0c:84:8a:68:47:0d:ac:68:4d:ff:27:f5: 4d:d4:7f:4a:1f:29:ed:d2:41:66:58:3a:d6:05:89:1f:b7:49: 7f:7f:0f:b1:99:c0:50:ca:36:53:cc:57:9a:f4:0c:88:71:e1: a4:33:fc:e0:d7:b8:7f:ba:99:57:8e:69:db:77:37:7a:97:6c: 9f:fc:62:52:a9:e0:da:1e:90:77:e8:83:e9:ea:ca:05:65:1e: 62:a9:64:a3:86:5a:20:29:dc:0b:18:c5:ee:02:e0:5e:bb:5d: ba:df:e1:e5:90:f2:ad:aa:7c:19:c0:f7:68:b6:64:c6:4e:5b: 34:31:83:5b:5d:c3:8b:66:02:b5:a9:fa:e3:9a:f4:d0:69:76: 9b:3e:25:8e:7d:55:19:df:39:8b:31:ec:cf:3f:76:47:87:d2: 9c:34:0a:95:8c:6b:30:a7:8a:fa:08:2c:cb:49:6b:b4:08:1f: 03:55:8f:cb:ab:4b:87:4c:71:92:db:93:05:c6:e9:03:04:ea: 17:3d:51:f3:bb:e8:38:f6:fa:00:a8:a8:66:02:e2:5b:85:a1: f0:a1:2c:52:8e:aa:4b:15:82:88:f1:d2:b5:a5:b8:d5:54:c6: 22:0c:1c:38 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUX5t9nDJxn0XLzHe66zCqIsM/FkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTEyMTIwMzU1MDFaFw0yNjEyMTEwNDAwMDFaMDMxMTAvBgNV BAMTKDgyOTE1Q0I5N0I5QjhENjYwNEM3OUQ5MEM3Rjc5MzZFRDkxMjk5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa4RL/eu0rTpA7qhyVEeY/Gi7K 7/f5T9E3uAGt3LuUV4sdYII9qGiNItnUY+X/gi5gxIc0cHeCgdrJP9brbtBx3zlr 2NYbo/AOS/qxwEKRlJ8JYGslykAKJ9tKEJN05TJTz83DIASHRjWOFjCpf6z/WxmK xykKp0huVz7yLqxZFrrycD7gYfNj7oSIB6XGQ68Wvw7XeEKduu8GAGTibJ/1HHJc zW6F1Y0Vb0wh0H/6mDeRnz9XSbgDg0v7XeEbyTz51Sg//43gwICvpnMG4pL0CBqq v8kQK5f8Ua/D/mEMTqnLdDn/km0DksynJArYCzHT4X97RxcDnzDf0WTnXRxhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgpFcuXubjWYEx52Qx/eTbtkSmXcwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YjFlNTdlLWEwZjEtNDY3Zi1h NDZmLTU1YTMxNTdiMGQ2NS8wLzMyMzAzMjJlMzEzNTMzMmUzMjMyMzQyZTMwMmYz MTM5MmQzMjM0MjAzZDNlMjAzOTMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcqZ4DANBgkqhkiG 9w0BAQsFAAOCAQEA3la42tYqyYM7yvNep9GEcXrVA7YjFMICDISKaEcNrGhN/yf1 TdR/Sh8p7dJBZlg61gWJH7dJf38PsZnAUMo2U8xXmvQMiHHhpDP84Ne4f7qZV45p 23c3epdsn/xiUqng2h6Qd+iD6erKBWUeYqlko4ZaICncCxjF7gLgXrtdut/h5ZDy rap8GcD3aLZkxk5bNDGDW13Di2YCtan645r00Gl2mz4ljn1VGd85izHszz92R4fS nDQKlYxrMKeK+ggsy0lrtAgfA1WPy6tLh0xxktuTBcbpAwTqFz1R87voOPb6AKio ZgLiW4Wh8KEsUo6qSxWCiPHStaW41VTGIgwcOA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:21 2025 by rpki-client