This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa
File: 323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa (raw, json)
Hash identifier: /MzkpIvO+yJRIuUE7RrJH9MKdqO6vJCFLNiCFBSLu6w=
Subject key identifier: 76:97:E2:7C:AD:25:1B:39:D0:DF:69:0B:8A:76:1F:B4:74:6F:A3:BE
Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial: 1400043FFAD9D9355C4BDEE432147EB37594D4D0
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa
Signing time: Tue 23 Dec 2025 10:03:05 +0000
ROA not before: Tue 23 Dec 2025 09:58:05 +0000
ROA not after: Tue 22 Dec 2026 10:03:05 +0000
asID: 134637
IP address blocks: 2403:e380:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 20:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:00:04:3f:fa:d9:d9:35:5c:4b:de:e4:32:14:7e:b3:75:94:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
Validity
Not Before: Dec 23 09:58:05 2025 GMT
Not After : Dec 22 10:03:05 2026 GMT
Subject: CN=7697E27CAD251B39D0DF690B8A761FB4746FA3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:1d:c1:db:cc:66:3d:3b:fd:cd:87:84:3d:
19:89:13:69:e2:2c:d1:06:1c:7d:da:40:66:18:c2:
d2:43:d4:55:5b:9a:7d:89:7f:29:71:b8:ab:9f:80:
52:9e:68:76:c0:33:bb:5b:3d:e5:32:12:18:99:ce:
58:b2:04:08:8c:8f:60:6f:2a:bd:75:e7:32:17:f7:
34:6f:d8:8e:08:51:7b:5b:83:f3:3f:45:ee:44:0f:
0d:43:80:b5:27:cd:74:74:c8:b7:fd:ca:a5:a5:73:
62:d6:82:39:9c:4c:ec:08:0a:f5:ec:2a:23:97:b9:
40:2d:60:a1:94:2c:a7:97:e7:98:5f:06:ae:36:69:
60:b1:2d:bc:b9:19:b7:bd:54:6c:3c:54:39:5a:e5:
a3:86:6c:1f:dc:6e:08:71:3e:53:f8:c1:12:fa:79:
cf:e1:cd:5a:4f:f8:63:1f:9f:e1:5c:e6:c0:f8:1b:
07:46:e6:98:a9:f6:b2:b7:1d:20:a6:4a:3a:29:85:
bc:8d:8c:3b:ff:db:bf:7b:b4:5f:d5:1e:f0:b7:68:
a2:f2:06:f5:da:6a:2f:e8:01:ec:31:e1:b4:4e:ac:
56:0d:23:8b:85:8a:1f:a5:9a:91:e9:18:91:6c:76:
b2:60:5f:fc:1f:30:d1:27:b7:af:d2:64:93:27:e9:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:97:E2:7C:AD:25:1B:39:D0:DF:69:0B:8A:76:1F:B4:74:6F:A3:BE
X509v3 Authority Key Identifier:
keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030313a3a2f34382d3438203d3e20313334363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e380:1001::/48
Signature Algorithm: sha256WithRSAEncryption
56:b5:ae:8b:8c:d3:9b:ae:fa:5d:76:73:e7:f6:02:57:23:aa:
c6:d1:69:66:e2:37:64:d2:f1:00:97:dc:4b:39:2c:3e:6e:ff:
d6:56:61:c5:e6:d3:f8:03:5c:ce:d4:95:d7:c5:68:34:4b:b0:
85:75:89:d6:98:9e:2c:ff:46:5e:92:0b:95:17:46:b0:d2:a2:
8c:9b:43:04:c2:41:1c:66:70:ba:58:06:ee:b7:06:32:06:6a:
84:9e:ba:8f:8c:af:78:d4:bd:19:8e:d1:6c:13:b1:2c:5f:25:
f2:9e:21:93:27:1c:45:8a:a5:98:dc:c5:67:e7:97:dc:0b:4d:
b0:a8:45:a3:40:ac:38:05:a0:f1:ac:4f:84:98:8f:61:00:46:
7f:3e:04:92:ce:ca:54:b2:52:ac:46:12:5e:86:90:d8:3b:82:
7f:cf:0f:64:f2:5d:62:e6:95:18:eb:aa:6b:af:2b:6f:2a:3e:
30:b2:3d:89:06:d7:3a:a0:43:6c:96:c0:4e:63:69:4d:fa:e0:
26:bf:1a:7d:c2:fb:29:48:e9:31:2f:38:76:31:b5:c1:55:fd:
26:8c:03:d9:35:8f:6f:d0:71:de:6a:2f:53:38:d7:a8:1e:99:
02:4d:05:d9:00:84:0c:8a:62:2e:de:0d:60:e7:cc:b5:08:0f:
6c:42:07:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 01:43:24 2025 by rpki-client