This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa
File: 323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa (raw, json)
Hash identifier: s/T+u3GrpHQpQDGLIfB4y2ZCiVIu1xhOCpqXzOx++a0=
Subject key identifier: 04:BB:33:00:AB:2B:BE:AE:B6:22:3E:1E:1F:94:96:B3:3B:C4:16:FF
Certificate issuer: /CN=027DBEC91021154263BB0CF1565833705023D987
Certificate serial: 5D152377A7C4AA14D9EC6267913910C81FE0B14D
Authority key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa
Signing time: Tue 23 Dec 2025 09:00:00 +0000
ROA not before: Tue 23 Dec 2025 08:55:00 +0000
ROA not after: Tue 22 Dec 2026 09:00:00 +0000
asID: 134637
IP address blocks: 2403:e380:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 20:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:15:23:77:a7:c4:aa:14:d9:ec:62:67:91:39:10:c8:1f:e0:b1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027DBEC91021154263BB0CF1565833705023D987
Validity
Not Before: Dec 23 08:55:00 2025 GMT
Not After : Dec 22 09:00:00 2026 GMT
Subject: CN=04BB3300AB2BBEAEB6223E1E1F9496B33BC416FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:43:c9:bb:39:33:7d:59:c9:e4:f9:2d:62:
73:dc:1d:e7:db:35:da:a3:a8:3f:ac:c1:31:2a:5d:
ce:06:a2:c3:b4:c7:1e:96:4c:db:6c:19:72:c5:51:
d3:bd:20:78:9f:1c:85:49:51:d5:3b:68:72:66:eb:
21:82:6e:e0:c4:cc:1b:81:15:a1:2a:06:0a:f0:02:
34:f7:7e:0a:50:0c:a3:4c:68:67:d4:9a:c1:f5:1b:
52:fd:1f:00:4b:1f:95:0f:39:de:03:11:a2:db:cc:
0d:c1:82:39:ff:71:4f:be:88:b4:d8:06:d2:f2:e0:
bf:b8:86:27:32:06:ed:08:54:02:82:c7:81:62:a9:
ee:29:ad:fd:12:5d:94:59:6b:6f:d6:98:b2:9d:ee:
84:5c:ba:6d:52:45:00:9c:c1:da:99:8b:76:af:b3:
89:89:54:f9:e9:93:d4:2b:25:32:d1:41:97:2f:3d:
12:c8:97:00:db:d5:b3:06:26:d7:c3:ad:bb:a8:47:
56:b0:c4:cc:38:c7:52:e7:77:df:07:f8:de:8b:a1:
6e:23:88:f1:b1:ad:05:6b:c4:31:f8:83:df:be:c3:
86:ed:bc:42:6a:33:40:8b:34:a5:c2:cb:df:7e:c1:
63:c3:5f:f1:5b:db:68:64:d2:36:e8:d2:9f:23:ab:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:33:00:AB:2B:BE:AE:B6:22:3E:1E:1F:94:96:B3:3B:C4:16:FF
X509v3 Authority Key Identifier:
keyid:02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/323430333a653338303a313030323a3a2f34382d3438203d3e20313334363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:e380:1002::/48
Signature Algorithm: sha256WithRSAEncryption
41:35:b1:59:f5:32:9c:14:8b:f2:9a:e9:76:1b:7f:c6:77:4b:
b3:c3:4f:f5:1e:0f:d3:df:5c:e2:8f:d3:ca:c0:f4:86:99:13:
1c:d1:00:08:b9:17:9e:b0:7f:b5:14:b6:df:e6:12:37:44:0a:
50:93:49:5c:23:b7:22:2e:40:0c:e3:11:31:93:bb:1a:a7:c4:
d4:e7:a0:e8:f6:44:d6:31:34:01:0e:a9:6a:d5:d8:07:f9:00:
1b:b7:92:f5:09:23:7e:07:c5:d5:96:87:7f:82:33:2a:43:0a:
a1:74:fd:58:a8:2a:71:79:24:5b:05:3e:f6:12:a1:3b:22:d7:
8d:e4:db:df:a8:0c:ee:34:c6:a5:ac:e4:d6:22:57:53:73:06:
36:15:f9:9e:5b:6c:d2:01:67:15:6d:72:65:f9:79:14:d2:4d:
47:d8:66:f5:31:ea:b0:46:02:91:42:e3:cd:52:db:e4:28:10:
00:4b:a2:c9:70:06:f9:cb:a7:14:c0:41:47:93:e9:8c:15:9a:
06:c4:ff:37:5f:23:79:dd:dc:9c:f5:28:a5:0c:9f:67:ee:5a:
9d:ff:a0:35:b5:c3:97:e2:e1:2d:11:aa:19:f8:6c:a4:57:93:
0e:79:1a:7f:22:19:cb:7a:9d:fb:6d:8c:da:45:7a:32:b7:a5:
50:9f:c1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 05:12:56 2025 by rpki-client