This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: 90L0IBK41RYqXPYTIEKjZ4rc490x+qDr8Q2QF/sUHJU= Subject key identifier: 73:35:C9:E7:9C:19:97:FE:44:9F:6A:B2:C2:6C:0C:7F:7F:8A:96:5F Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 49D8F0560DF98D19B1C94A8F8287E25339205D09 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:00 +0000 ROA not before: Fri 12 Dec 2025 11:55:00 +0000 ROA not after: Fri 11 Dec 2026 12:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d8:f0:56:0d:f9:8d:19:b1:c9:4a:8f:82:87:e2:53:39:20:5d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:00 2025 GMT Not After : Dec 11 12:00:00 2026 GMT Subject: CN=7335C9E79C1997FE449F6AB2C26C0C7F7F8A965F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ad:93:a0:11:4e:9a:ad:ef:7d:ca:56:e0:76: 1d:eb:d0:40:9f:9a:6a:2d:73:0f:34:46:20:65:74: d3:03:69:b7:1c:ed:f2:b8:f7:86:b1:b0:10:ba:ff: 70:27:58:94:65:3b:de:4f:76:ea:13:ea:70:aa:a8: 91:0a:02:24:ad:ec:7c:f4:89:f3:01:b9:94:56:cd: 6e:af:a3:77:de:cc:99:a4:45:d9:72:26:c4:96:1f: e1:4c:61:e0:01:ec:6a:5a:35:a1:81:72:a5:81:39: 19:01:93:83:a8:83:cb:42:89:53:ab:ae:26:02:9f: 5c:5b:29:1b:32:ad:64:de:af:f2:6a:8e:82:fb:af: ad:6b:c0:58:d2:7f:fe:18:7c:68:0b:c6:55:64:9f: b3:b0:b2:bf:9f:c4:1d:1f:1e:30:eb:3d:4b:0a:5d: 01:a3:0b:a8:9d:d0:d2:84:79:6c:73:b0:ad:26:ec: 69:34:9f:c9:e0:25:07:19:f4:4b:a7:bd:27:1f:70: 3a:eb:de:6d:09:45:e5:6c:20:9e:21:b0:7e:d5:bc: c1:f7:e2:d9:7b:4a:84:9b:c8:31:20:69:cd:85:02: a0:a3:bf:33:58:1b:de:67:2f:38:d5:61:02:f2:67: 99:b4:10:c3:38:c5:07:2b:5a:2f:6a:ad:0f:2e:e4: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:C9:E7:9C:19:97:FE:44:9F:6A:B2:C2:6C:0C:7F:7F:8A:96:5F X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0::/36 Signature Algorithm: sha256WithRSAEncryption 56:63:20:cd:c5:f0:bd:88:e1:f1:33:64:25:3a:b7:c3:30:4f: 03:5a:78:38:e4:56:19:fb:5a:69:3e:bb:91:5c:e8:de:18:11: 54:ce:0c:b0:61:9e:75:b1:37:fd:45:e8:3a:36:3c:b6:ba:89: 00:bf:d9:21:ae:1c:1d:2c:bf:db:3d:ca:10:d6:19:ff:2d:6d: 4e:b2:3a:81:66:6e:80:05:72:f8:27:29:80:85:64:f9:55:48: c7:5f:d9:5a:10:77:bc:24:92:cd:ae:74:85:fb:c6:b3:4b:d4: a2:e2:09:9b:f8:43:4c:31:06:d6:cc:cd:67:62:d3:6f:6a:d2: 17:5e:f3:e0:a7:65:5e:d9:b2:90:65:d4:c0:e6:45:7a:15:8c: ea:fc:ce:c7:15:b3:d9:d3:36:58:57:a1:e8:c9:41:07:b9:53: 35:2e:5a:3f:03:a5:e2:bc:4a:fc:51:5f:c2:b6:34:95:ac:06: 06:59:63:cd:17:16:d0:2b:9b:18:c4:df:eb:4d:ec:00:3b:2a: 45:e9:d4:e6:66:7b:ec:30:ec:17:1b:c4:f2:c3:e1:6a:ee:58: a7:18:e2:dd:0c:b3:cf:41:5c:c3:ef:4b:21:4f:5d:ea:2e:46: 5d:f4:56:41:69:34:b7:e5:1b:9f:36:eb:8f:91:29:4b:22:91: 1c:99:01:18 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSdjwVg35jRmxyUqPgofiUzkgXQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDBaFw0yNjEyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDczMzVDOUU3OUMxOTk3RkU0NDlGNkFCMkMyNkMwQzdGN0Y4QTk2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrZOgEU6are99ylbgdh3r0ECf mmotcw80RiBldNMDabcc7fK494axsBC6/3AnWJRlO95PduoT6nCqqJEKAiSt7Hz0 ifMBuZRWzW6vo3fezJmkRdlyJsSWH+FMYeAB7GpaNaGBcqWBORkBk4Oog8tCiVOr riYCn1xbKRsyrWTer/JqjoL7r61rwFjSf/4YfGgLxlVkn7Owsr+fxB0fHjDrPUsK XQGjC6id0NKEeWxzsK0m7Gk0n8ngJQcZ9EunvScfcDrr3m0JReVsIJ4hsH7VvMH3 4tl7SoSbyDEgac2FAqCjvzNYG95nLzjVYQLyZ5m0EMM4xQcrWi9qrQ8u5MbZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUczXJ55wZl/5En2qywmwMf3+Kll8wHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhM2EyZjMzMzYy ZDM0MzgyMDNkM2UyMDMxMzQzMDM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQGIMAAMA0GCSqG SIb3DQEBCwUAA4IBAQBWYyDNxfC9iOHxM2QlOrfDME8DWng45FYZ+1ppPruRXOje GBFUzgywYZ51sTf9Reg6Njy2uokAv9khrhwdLL/bPcoQ1hn/LW1OsjqBZm6ABXL4 JymAhWT5VUjHX9laEHe8JJLNrnSF+8azS9Si4gmb+ENMMQbWzM1nYtNvatIXXvPg p2Ve2bKQZdTA5kV6FYzq/M7HFbPZ0zZYV6HoyUEHuVM1Llo/A6XivEr8UV/CtjSV rAYGWWPNFxbQK5sYxN/rTewAOypF6dTmZnvsMOwXG8Tyw+Fq7linGOLdDLPPQVzD 70shT13qLkZd9FZBaTS35RufNuuPkSlLIpEcmQEY -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:51 2025 by rpki-client