This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: CbHTNGnSLVyLwrjgi9pcq8A8dCLDG/7E2BIixrSuYx8= Subject key identifier: 5F:D9:27:9A:74:C8:14:D6:01:2C:88:40:65:B5:B6:19:F4:3B:0F:43 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 6D5C3B5BD8F5EA696E448AC20AEAFD98D727C5A3 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:00 +0000 ROA not before: Fri 12 Dec 2025 12:55:00 +0000 ROA not after: Fri 11 Dec 2026 13:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:a000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5c:3b:5b:d8:f5:ea:69:6e:44:8a:c2:0a:ea:fd:98:d7:27:c5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:00 2025 GMT Not After : Dec 11 13:00:00 2026 GMT Subject: CN=5FD9279A74C814D6012C884065B5B619F43B0F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:d7:38:ff:44:74:a1:53:fc:4d:c5:2f:a3: 1a:c3:2e:8e:a2:66:cb:61:51:7e:bc:89:7a:41:5a: 3b:98:33:85:1f:37:74:74:a7:e9:e8:a6:7c:dd:2e: 4e:34:92:ed:82:e0:55:b0:e6:9b:96:d5:36:86:a1: 45:9c:28:82:b4:26:65:8e:6b:d3:db:ad:6e:c3:a2: 0d:9c:cd:2c:7f:76:31:ad:3d:91:71:7e:4a:a8:ed: 64:df:87:dd:01:be:e4:90:82:6e:c0:b3:98:8f:7e: 14:77:18:6d:1e:fe:08:6b:07:72:fe:39:43:d8:4f: 87:33:b8:89:d2:30:74:65:b3:c6:dd:d1:56:6f:85: 98:43:e1:d8:24:e9:c4:22:02:1c:1f:e3:42:4c:ad: 0e:79:3a:9b:4e:50:41:35:06:7c:ad:cc:e3:dc:6f: 44:59:eb:92:65:f7:64:cb:b5:80:df:a4:5a:be:61: b0:8b:fb:a2:99:74:38:1c:0c:e3:80:43:b4:97:67: d5:76:a4:3c:86:fd:5c:5f:ba:12:e6:d7:58:72:38: 0c:3e:52:b7:4f:73:99:10:3e:47:66:5f:22:55:09: e1:1b:88:2a:fc:b9:08:42:18:1c:8d:e5:bb:82:bc: e4:37:4b:48:e2:f8:b1:65:a3:23:c5:de:61:84:83: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:27:9A:74:C8:14:D6:01:2C:88:40:65:B5:B6:19:F4:3B:0F:43 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a613030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:a000::/36 Signature Algorithm: sha256WithRSAEncryption 10:f5:5e:a6:d6:4c:7f:18:23:22:ce:b5:4d:25:9b:e9:a7:ba: 8c:79:fd:4d:82:38:12:ce:bc:cf:a7:88:95:6d:c0:58:4c:4c: 30:df:54:ed:1c:59:92:cf:41:55:59:57:64:3f:20:b1:eb:d6: 46:1b:14:43:fc:2d:6e:99:28:0b:5b:3d:53:e0:36:f9:2e:24: 8b:15:6f:ee:19:22:c1:aa:05:c7:82:71:12:4c:9d:4a:ec:d2: 8e:10:e0:8d:79:ee:0a:08:c4:d4:3e:d8:c4:e1:aa:35:9f:29: 17:f2:87:80:14:60:48:46:29:f8:81:37:62:9a:a0:f2:78:16: 87:67:a9:6e:5b:18:e7:32:f9:f2:52:4d:cd:e9:35:6d:e8:ee: 98:46:af:15:12:57:78:41:14:b5:16:3b:66:75:95:07:87:6b: 69:9d:60:64:6c:fa:46:5a:dc:7a:e9:1c:9d:eb:eb:d2:d8:0b: f8:a0:36:85:e3:3a:7e:46:c3:ff:d7:0c:56:96:1b:1c:4f:3e: 73:f7:e3:76:fe:64:d3:5f:4d:82:12:e4:17:92:c2:94:60:6e: d9:a8:e1:f6:c0:6f:e4:f4:02:5b:c8:2f:c1:0f:35:df:da:7f: 64:c1:83:69:0d:3a:48:44:44:27:f2:f9:9e:8a:45:f3:88:6d: f1:cf:e8:98 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUbVw7W9j16mluRIrCCur9mNcnxaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDBaFw0yNjEyMTExMzAwMDBaMDMxMTAvBgNV BAMTKDVGRDkyNzlBNzRDODE0RDYwMTJDODg0MDY1QjVCNjE5RjQzQjBGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCastc4/0R0oVP8TcUvoxrDLo6i ZsthUX68iXpBWjuYM4UfN3R0p+nopnzdLk40ku2C4FWw5puW1TaGoUWcKIK0JmWO a9PbrW7Dog2czSx/djGtPZFxfkqo7WTfh90BvuSQgm7As5iPfhR3GG0e/ghrB3L+ OUPYT4czuInSMHRls8bd0VZvhZhD4dgk6cQiAhwf40JMrQ55OptOUEE1BnytzOPc b0RZ65Jl92TLtYDfpFq+YbCL+6KZdDgcDOOAQ7SXZ9V2pDyG/VxfuhLm11hyOAw+ UrdPc5kQPkdmXyJVCeEbiCr8uQhCGByN5buCvOQ3S0ji+LFloyPF3mGEgxjdAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUX9knmnTIFNYBLIhAZbW2GfQ7D0MwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjEzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAoDANBgkqhkiG9w0BAQsFAAOCAQEAEPVeptZMfxgjIs61TSWb6ae6jHn9TYI4 Es68z6eIlW3AWExMMN9U7RxZks9BVVlXZD8gsevWRhsUQ/wtbpkoC1s9U+A2+S4k ixVv7hkiwaoFx4JxEkydSuzSjhDgjXnuCgjE1D7YxOGqNZ8pF/KHgBRgSEYp+IE3 Ypqg8ngWh2epblsY5zL58lJNzek1bejumEavFRJXeEEUtRY7ZnWVB4draZ1gZGz6 Rlrceukcnevr0tgL+KA2heM6fkbD/9cMVpYbHE8+c/fjdv5k019NghLkF5LClGBu 2ajh9sBv5PQCW8gvwQ8139p/ZMGDaQ06SEREJ/L5nopF84ht8c/omA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:21 2025 by rpki-client