This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: NBBC3gMm8DzP3+y5fQNp7hHnSdk72DGcRsLL1yHWoyo= Subject key identifier: 16:00:C6:AC:7A:EE:7E:18:14:F6:1D:34:EF:35:C6:44:B5:EA:20:FD Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 7C572FDDC9C84ED396FA3BF5F07C28AC3AEBF3E2 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:00 +0000 ROA not before: Fri 12 Dec 2025 11:55:00 +0000 ROA not after: Fri 11 Dec 2026 12:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:9000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:2f:dd:c9:c8:4e:d3:96:fa:3b:f5:f0:7c:28:ac:3a:eb:f3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:00 2025 GMT Not After : Dec 11 12:00:00 2026 GMT Subject: CN=1600C6AC7AEE7E1814F61D34EF35C644B5EA20FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:7b:87:55:0a:51:92:93:38:56:ca:85:16: dc:e3:70:a9:da:c9:e4:e1:4a:db:32:f7:30:72:f4: 78:4f:1b:00:7a:bd:92:c1:6c:18:34:2c:e3:b6:9a: f2:e4:3d:dc:62:6c:71:c6:39:88:c6:7b:c8:9b:78: 79:83:57:10:22:1c:f9:15:b5:32:16:d6:d9:ac:58: a3:73:89:9d:d5:f9:f4:55:f5:f0:1e:39:fa:14:66: 77:c2:5f:dd:6a:03:9d:60:ae:6a:ec:92:a3:40:63: f9:66:12:a4:04:cb:a2:eb:be:44:43:41:65:ae:29: 69:db:3d:98:17:b9:0a:88:e0:34:62:ca:10:93:be: bd:b2:37:7c:2f:ed:40:9a:01:c5:3f:5a:54:83:32: 34:ed:3e:3b:6e:97:49:a1:30:99:47:bd:23:c8:48: e5:0c:97:73:75:f9:ff:5f:cb:f6:49:82:f2:ae:99: a1:43:ac:ce:b7:17:0c:2a:9c:04:47:b5:d9:3a:3e: 41:47:19:a5:b5:01:71:9b:4c:88:92:34:dd:f6:fa: aa:c4:be:19:62:74:31:44:a7:40:d6:ca:6b:b0:50: d3:c3:50:d6:0f:36:5a:ac:61:fd:16:a7:74:af:43: 55:de:54:db:b3:8b:31:0a:fb:f8:38:ed:ac:df:55: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:00:C6:AC:7A:EE:7E:18:14:F6:1D:34:EF:35:C6:44:B5:EA:20:FD X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a393030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:9000::/36 Signature Algorithm: sha256WithRSAEncryption a7:af:f2:73:35:20:c8:2a:d8:51:54:f9:0a:76:df:08:f3:42: a0:a3:42:63:2a:f6:cc:80:8f:8a:7a:66:5d:19:33:07:d1:03: b5:11:e1:85:9f:ca:bf:d5:46:3d:50:87:a4:ce:8b:b2:bd:2f: f7:58:d5:10:ac:80:98:a9:56:e9:fc:8a:87:81:53:2c:13:5e: fd:33:0f:dd:5b:6d:17:fb:68:b3:5e:d8:b9:1e:11:e3:5f:ce: f1:91:87:84:08:75:e8:27:c5:b9:3e:85:36:50:ab:b0:57:e2: d3:0f:93:bc:b4:17:29:7b:d6:7e:40:db:a5:f3:78:26:7c:a6: 24:a2:55:d6:c5:28:41:5f:c1:80:d8:db:8e:bb:61:5d:65:85: a4:b1:c9:9e:84:86:34:40:7d:82:a3:1b:41:42:a6:ca:18:19: 99:e6:35:92:51:8f:de:8c:d6:ed:01:81:cf:b2:14:a2:89:38: 88:2f:a3:67:52:c8:1c:0f:66:41:d3:fc:dd:df:cc:3d:53:7d: b5:2c:fe:45:2d:c6:4f:c8:1c:ee:b3:d5:6b:d9:48:d4:19:b4: e0:40:6d:d3:6d:58:eb:a3:f0:c6:a9:c4:72:14:15:52:92:78: 98:ec:37:83:b0:cd:0b:f6:aa:c0:b7:dd:dd:15:5d:d0:9d:45: 69:58:13:8d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfFcv3cnITtOW+jv18HworDrr8+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDBaFw0yNjEyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDE2MDBDNkFDN0FFRTdFMTgxNEY2MUQzNEVGMzVDNjQ0QjVFQTIwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEs3uHVQpRkpM4VsqFFtzjcKna yeThStsy9zBy9HhPGwB6vZLBbBg0LOO2mvLkPdxibHHGOYjGe8ibeHmDVxAiHPkV tTIW1tmsWKNziZ3V+fRV9fAeOfoUZnfCX91qA51grmrskqNAY/lmEqQEy6LrvkRD QWWuKWnbPZgXuQqI4DRiyhCTvr2yN3wv7UCaAcU/WlSDMjTtPjtul0mhMJlHvSPI SOUMl3N1+f9fy/ZJgvKumaFDrM63FwwqnARHtdk6PkFHGaW1AXGbTIiSNN32+qrE vhlidDFEp0DWymuwUNPDUNYPNlqsYf0Wp3SvQ1XeVNuzizEK+/g47azfVXtRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUFgDGrHrufhgU9h007zXGRLXqIP0wHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzkzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAkDANBgkqhkiG9w0BAQsFAAOCAQEAp6/yczUgyCrYUVT5CnbfCPNCoKNCYyr2 zICPinpmXRkzB9EDtRHhhZ/Kv9VGPVCHpM6Lsr0v91jVEKyAmKlW6fyKh4FTLBNe /TMP3VttF/tos17YuR4R41/O8ZGHhAh16CfFuT6FNlCrsFfi0w+TvLQXKXvWfkDb pfN4JnymJKJV1sUoQV/BgNjbjrthXWWFpLHJnoSGNEB9gqMbQUKmyhgZmeY1klGP 3ozW7QGBz7IUook4iC+jZ1LIHA9mQdP83d/MPVN9tSz+RS3GT8gc7rPVa9lI1Bm0 4EBt021Y66PwxqnEchQVUpJ4mOw3g7DNC/aqwLfd3RVd0J1FaVgTjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:11 2025 by rpki-client