This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: o8mhCmAB869OPl0fJty0ytAw99/bgZILLNUjM0ECd2Q= Subject key identifier: 35:1A:0F:F4:12:CE:68:22:76:50:96:DE:5C:D4:66:D1:FF:30:7D:00 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 3FF35C774C05869D33FFAA2092E7412E0E8E2CBA Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:00 +0000 ROA not before: Fri 12 Dec 2025 11:55:00 +0000 ROA not after: Fri 11 Dec 2026 12:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:5000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f3:5c:77:4c:05:86:9d:33:ff:aa:20:92:e7:41:2e:0e:8e:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:00 2025 GMT Not After : Dec 11 12:00:00 2026 GMT Subject: CN=351A0FF412CE6822765096DE5CD466D1FF307D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:13:80:03:0e:49:ef:1f:23:f9:19:cf:f1: 61:16:63:5d:94:58:d7:28:f2:f0:9d:31:f9:0e:cf: b5:08:5e:bb:22:f7:4b:70:ba:37:d2:a5:2a:2b:be: 6b:3e:e3:fe:1f:4a:f9:1c:60:8e:54:29:be:81:a0: 7d:c4:73:d9:39:d0:f5:48:34:02:35:53:82:3e:f9: 06:7b:07:c4:50:80:18:b6:7c:e9:31:8a:e9:d7:62: 56:d2:2f:42:61:3a:55:e0:d6:af:91:ae:ff:d1:4e: a1:a1:bb:64:13:87:92:e5:da:71:97:22:11:c3:26: f4:ba:74:79:f3:8e:ab:b3:31:74:24:83:07:30:66: c2:5c:cc:31:c8:95:0d:29:eb:ef:d9:30:0c:86:ba: 62:6a:09:bc:c8:7e:2c:23:ae:37:d4:e7:5b:33:89: bc:e0:de:f1:46:e6:4e:ad:e0:dd:9b:6f:e4:2c:f0: f9:9f:72:3e:0f:be:7b:d1:e2:f7:aa:22:9d:f6:4e: 20:93:fe:7c:e5:26:29:16:53:c7:7b:28:a8:b7:54: a0:a0:54:13:0a:1d:58:9f:11:cd:8b:95:88:af:36: 51:a5:35:cd:fd:2d:32:e9:a0:f5:97:8d:2d:6b:03: 2b:59:b3:d5:ed:99:9e:22:89:f2:4b:2e:b2:52:0e: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1A:0F:F4:12:CE:68:22:76:50:96:DE:5C:D4:66:D1:FF:30:7D:00 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a353030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:5000::/36 Signature Algorithm: sha256WithRSAEncryption 96:83:70:39:ef:84:ab:30:88:c7:db:25:13:17:af:54:d2:e6: 69:92:77:9a:3a:10:1a:41:a9:b8:8b:fd:49:2b:cb:1b:98:87: d3:f5:0d:41:d1:36:b0:a6:c3:04:1f:c8:6b:6a:bb:fb:95:4c: 22:64:8a:50:62:d3:dc:0b:83:ab:1d:e6:89:40:e0:7f:7b:ba: 9f:72:7c:11:ba:42:ea:00:61:30:48:46:0e:9c:7c:20:c0:7a: fc:4c:6d:68:5a:79:45:f0:85:82:da:ef:b6:4d:0f:37:e2:d8: c0:96:79:7d:39:c1:57:a6:9c:76:e7:62:6a:02:ca:20:70:f6: 5a:8f:de:3b:52:c1:c0:9d:00:f7:f8:01:28:07:15:1f:1b:66: 26:81:4d:46:a1:3b:c0:27:cf:89:4e:6f:29:9b:79:79:e8:07: 6f:11:c0:e6:4c:77:63:33:82:65:7b:6b:c4:d0:d2:56:8f:d2: 34:da:f0:7b:2a:d6:fc:bf:3f:a6:54:94:e3:ea:ce:06:18:34: d5:d1:6d:5a:42:89:b9:23:7f:25:52:5c:f5:61:b8:64:30:f8: a7:2d:5b:56:7d:81:b7:22:1e:fa:83:ad:cc:3a:fd:a7:cd:a6: f7:7b:cb:2d:b1:6f:dc:46:4b:8f:03:f7:8d:02:4b:12:90:a4: 57:52:5a:7c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUP/Ncd0wFhp0z/6ogkudBLg6OLLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDBaFw0yNjEyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDM1MUEwRkY0MTJDRTY4MjI3NjUwOTZERTVDRDQ2NkQxRkYzMDdEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCodxOAAw5J7x8j+RnP8WEWY12U WNco8vCdMfkOz7UIXrsi90twujfSpSorvms+4/4fSvkcYI5UKb6BoH3Ec9k50PVI NAI1U4I++QZ7B8RQgBi2fOkxiunXYlbSL0JhOlXg1q+Rrv/RTqGhu2QTh5Ll2nGX IhHDJvS6dHnzjquzMXQkgwcwZsJczDHIlQ0p6+/ZMAyGumJqCbzIfiwjrjfU51sz ibzg3vFG5k6t4N2bb+Qs8Pmfcj4PvnvR4veqIp32TiCT/nzlJikWU8d7KKi3VKCg VBMKHVifEc2LlYivNlGlNc39LTLpoPWXjS1rAytZs9XtmZ4iifJLLrJSDlkRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUNRoP9BLOaCJ2UJbeXNRm0f8wfQAwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzUzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAUDANBgkqhkiG9w0BAQsFAAOCAQEAloNwOe+EqzCIx9slExevVNLmaZJ3mjoQ GkGpuIv9SSvLG5iH0/UNQdE2sKbDBB/Ia2q7+5VMImSKUGLT3AuDqx3miUDgf3u6 n3J8EbpC6gBhMEhGDpx8IMB6/ExtaFp5RfCFgtrvtk0PN+LYwJZ5fTnBV6acdudi agLKIHD2Wo/eO1LBwJ0A9/gBKAcVHxtmJoFNRqE7wCfPiU5vKZt5eegHbxHA5kx3 YzOCZXtrxNDSVo/SNNrweyrW/L8/plSU4+rOBhg01dFtWkKJuSN/JVJc9WG4ZDD4 py1bVn2BtyIe+oOtzDr9p82m93vLLbFv3EZLjwP3jQJLEpCkV1JafA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:32 2025 by rpki-client