This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: cnF2P9b7E2pqwVqJJaEPPF1YhyoGEvmpUirEA7GwXxk= Subject key identifier: E9:79:69:03:B7:AA:EA:B5:4C:7C:AD:F9:D9:14:60:E6:F7:F0:DB:FF Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 1591DC3D29266FE687EB86178A729C3B89B28173 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:01 +0000 ROA not before: Fri 12 Dec 2025 12:55:01 +0000 ROA not after: Fri 11 Dec 2026 13:00:01 +0000 asID: 140423 IP address blocks: 2406:20c0:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:91:dc:3d:29:26:6f:e6:87:eb:86:17:8a:72:9c:3b:89:b2:81:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:01 2025 GMT Not After : Dec 11 13:00:01 2026 GMT Subject: CN=E9796903B7AAEAB54C7CADF9D91460E6F7F0DBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:61:7c:9d:86:ab:d6:c5:f8:8c:da:a3:9f: 34:87:94:b3:ab:6b:22:98:18:53:37:57:c2:e5:a4: 5f:fc:9a:cc:c6:53:e5:87:64:f7:1d:18:3b:c6:d3: 46:fe:9b:ae:96:7f:72:4e:80:a4:07:99:76:54:07: 12:8c:10:0c:b6:d1:d5:21:05:e4:0d:bb:7f:df:0f: c8:ce:bb:92:83:ab:15:53:a3:91:dc:7c:98:9e:91: ef:69:20:3e:53:fa:bd:93:85:a3:df:39:86:c0:c9: 9d:0a:d3:10:89:df:5e:0f:ed:3b:53:c6:09:06:4c: 2e:73:c9:fc:96:a5:0b:82:31:dd:84:c3:70:38:68: 20:3c:79:cd:b1:3f:f5:16:6e:2f:26:3d:f5:26:53: ec:c2:55:9e:7d:2b:2c:69:df:d9:29:19:05:bb:8f: d4:4b:d3:54:35:54:05:6e:e9:79:1c:ce:5c:a0:51: ec:40:c5:2f:b3:4f:e2:60:a1:41:cf:b8:b9:61:03: ca:2e:98:4c:ea:10:59:bb:f7:61:ba:dd:ad:ee:d0: df:a2:ec:ca:17:17:a1:b0:db:87:3d:93:18:0f:c5: 72:2c:1c:aa:a4:e5:d3:a4:f1:ad:fe:f7:1f:6b:42: 84:21:3d:e7:00:70:8d:41:9a:f8:b8:8e:0e:8d:a6: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:79:69:03:B7:AA:EA:B5:4C:7C:AD:F9:D9:14:60:E6:F7:F0:DB:FF X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a333030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 54:6e:ca:40:1b:ff:c8:72:91:14:f1:ef:7f:82:d0:31:78:76: a8:c2:49:4c:0f:64:2c:58:5a:4a:77:35:c6:09:73:b9:bc:4c: 1d:db:6d:74:79:c7:3c:6b:b5:1b:45:c8:84:76:41:ca:a4:40: 51:35:e2:eb:07:5b:be:e1:65:ad:25:dd:ca:81:86:cf:f4:16: 7a:24:68:4a:3a:91:e8:88:aa:49:b3:9e:5f:aa:a6:38:b1:54: de:41:5d:b4:76:ca:71:34:11:ef:05:ce:e4:0b:12:c2:f7:94: 1d:9d:83:36:03:94:66:ec:ec:02:51:2f:e0:eb:85:74:40:ea: 4d:ea:18:60:25:95:f4:2c:88:08:dd:81:48:47:cb:17:c6:d2: 23:5b:aa:df:e2:94:bf:fc:f4:aa:60:c0:65:58:a9:0e:88:8c: d1:dd:3b:f4:83:46:fa:5e:cd:c0:0f:71:42:29:29:3e:e4:81: 61:63:66:fa:dd:f1:85:9a:77:50:3b:14:83:12:cd:fc:d2:60: 0c:c5:44:72:f1:ad:bb:3d:84:81:48:f2:cc:29:7c:86:9b:7c: 8f:ad:65:fb:27:22:41:bf:06:27:a4:03:c9:bc:bd:0c:94:97: b4:91:df:3c:59:fa:91:ee:0d:67:b0:f6:37:51:f6:d0:dd:b2: 7b:f3:76:fe -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUFZHcPSkmb+aH64YXinKcO4mygXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDFaFw0yNjEyMTExMzAwMDFaMDMxMTAvBgNV BAMTKEU5Nzk2OTAzQjdBQUVBQjU0QzdDQURGOUQ5MTQ2MEU2RjdGMERCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBNGF8nYar1sX4jNqjnzSHlLOr ayKYGFM3V8LlpF/8mszGU+WHZPcdGDvG00b+m66Wf3JOgKQHmXZUBxKMEAy20dUh BeQNu3/fD8jOu5KDqxVTo5HcfJieke9pID5T+r2ThaPfOYbAyZ0K0xCJ314P7TtT xgkGTC5zyfyWpQuCMd2Ew3A4aCA8ec2xP/UWbi8mPfUmU+zCVZ59Kyxp39kpGQW7 j9RL01Q1VAVu6XkczlygUexAxS+zT+JgoUHPuLlhA8oumEzqEFm792G63a3u0N+i 7MoXF6Gw24c9kxgPxXIsHKqk5dOk8a3+9x9rQoQhPecAcI1Bmvi4jg6NplwXAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU6XlpA7eq6rVMfK352RRg5vfw2/8wHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzMzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAMDANBgkqhkiG9w0BAQsFAAOCAQEAVG7KQBv/yHKRFPHvf4LQMXh2qMJJTA9k LFhaSnc1xglzubxMHdttdHnHPGu1G0XIhHZByqRAUTXi6wdbvuFlrSXdyoGGz/QW eiRoSjqR6IiqSbOeX6qmOLFU3kFdtHbKcTQR7wXO5AsSwveUHZ2DNgOUZuzsAlEv 4OuFdEDqTeoYYCWV9CyICN2BSEfLF8bSI1uq3+KUv/z0qmDAZVipDoiM0d079ING +l7NwA9xQikpPuSBYWNm+t3xhZp3UDsUgxLN/NJgDMVEcvGtuz2EgUjyzCl8hpt8 j61l+yciQb8GJ6QDyby9DJSXtJHfPFn6ke4NZ7D2N1H20N2ye/N2/g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:19:47 2025 by rpki-client