This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: D4UheCj+6BumXlNImypw77cjqYua0xeMpBeTdeeD80w= Subject key identifier: 89:68:DA:B9:35:F7:3D:CE:93:D2:37:5E:F4:39:9A:01:E8:AD:26:D7 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 38B87B46FC32F9EE82FCC0D707A212F254120D00 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:00 +0000 ROA not before: Fri 12 Dec 2025 11:55:00 +0000 ROA not after: Fri 11 Dec 2026 12:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:b000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b8:7b:46:fc:32:f9:ee:82:fc:c0:d7:07:a2:12:f2:54:12:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:00 2025 GMT Not After : Dec 11 12:00:00 2026 GMT Subject: CN=8968DAB935F73DCE93D2375EF4399A01E8AD26D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:48:57:24:d0:c9:d5:82:dd:1e:19:6c:62: 1d:53:92:d4:b3:97:16:cb:be:fa:06:3c:ec:d2:d4: b1:c3:7f:79:1b:d7:e7:3c:82:fe:64:5f:7d:57:0a: fd:10:f3:d8:a2:55:f0:f8:17:93:dc:b8:23:2b:fb: da:01:51:95:1d:c8:ce:1e:9e:f5:a8:cb:d9:f2:cb: 0b:26:f3:b6:6b:ca:1d:09:81:00:b0:f7:08:cf:3e: 86:f8:c4:b9:f7:14:74:52:b0:b6:70:1a:55:50:53: c6:87:df:d1:bc:23:ca:74:21:00:73:13:a2:24:42: cc:c4:88:d7:7e:91:74:10:f4:f4:23:ce:c8:9f:ee: d7:fe:ef:87:b7:a2:cf:3a:21:8c:b8:9a:8e:4d:84: a6:1f:c1:16:9e:40:13:bf:f8:77:62:e6:6d:84:8f: ff:c8:ed:99:1c:c0:01:5b:41:29:e8:12:b5:84:4c: 95:72:ce:c7:af:d3:e1:88:d4:45:01:56:49:db:d0: 1f:18:38:ac:b1:48:eb:f4:60:41:09:7c:65:74:e7: 70:e1:d3:21:2d:a1:e3:ac:9c:03:cf:0b:b0:00:65: b2:9e:67:dd:21:16:65:59:ef:dd:1f:f5:0d:75:40: ec:16:d1:8f:9b:bb:2b:8d:02:ec:72:05:96:87:a2: 86:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:68:DA:B9:35:F7:3D:CE:93:D2:37:5E:F4:39:9A:01:E8:AD:26:D7 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a623030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption b1:79:30:77:f9:64:b4:9e:61:dd:1b:c9:da:ab:12:b6:8c:04: 48:96:0d:15:b9:14:71:74:74:93:05:e1:06:6b:0e:05:ca:e1: 49:e4:b8:1b:67:a4:43:ea:9f:f7:93:f8:c1:53:d9:12:0c:ba: 06:f7:1c:94:8d:6e:c3:ae:7e:59:10:2d:31:61:d5:f2:b0:14: e5:78:13:2c:35:26:11:42:86:bd:3c:e0:be:45:5c:91:2b:48: 51:4b:8f:01:61:9d:51:63:89:eb:bd:53:8e:da:c3:79:d7:4e: a8:a7:ec:87:11:9f:33:55:19:c7:5e:b7:00:bd:a9:09:81:76: ac:78:41:75:e9:6d:d7:e8:0b:c4:06:ba:52:88:e7:3f:e3:4c: 8b:0e:45:0b:c7:26:32:44:cb:02:73:a9:82:81:6c:e5:da:3f: 1c:b1:41:d2:20:4b:df:9e:73:55:41:e2:d0:ef:b2:30:28:b2: 67:ba:be:44:49:39:59:e3:11:ca:87:62:a5:78:8f:90:ed:05: 9c:1b:9c:69:39:66:49:f2:00:86:67:d1:dc:6f:e1:2c:ca:5b: a6:a6:78:28:d2:d1:50:51:8d:2b:cd:3c:ad:8e:53:6d:30:e0: 1e:51:f5:39:59:c0:31:e2:4b:24:8a:c8:b9:71:ee:77:a5:c9: af:4d:6f:39 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUOLh7Rvwy+e6C/MDXB6IS8lQSDQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDBaFw0yNjEyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDg5NjhEQUI5MzVGNzNEQ0U5M0QyMzc1RUY0Mzk5QTAxRThBRDI2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfUhXJNDJ1YLdHhlsYh1TktSz lxbLvvoGPOzS1LHDf3kb1+c8gv5kX31XCv0Q89iiVfD4F5PcuCMr+9oBUZUdyM4e nvWoy9nyywsm87Zryh0JgQCw9wjPPob4xLn3FHRSsLZwGlVQU8aH39G8I8p0IQBz E6IkQszEiNd+kXQQ9PQjzsif7tf+74e3os86IYy4mo5NhKYfwRaeQBO/+Hdi5m2E j//I7ZkcwAFbQSnoErWETJVyzsev0+GI1EUBVknb0B8YOKyxSOv0YEEJfGV053Dh 0yEtoeOsnAPPC7AAZbKeZ90hFmVZ790f9Q11QOwW0Y+buyuNAuxyBZaHooaRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUiWjauTX3Pc6T0jde9DmaAeitJtcwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjIzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAsDANBgkqhkiG9w0BAQsFAAOCAQEAsXkwd/lktJ5h3RvJ2qsStowESJYNFbkU cXR0kwXhBmsOBcrhSeS4G2ekQ+qf95P4wVPZEgy6BvcclI1uw65+WRAtMWHV8rAU 5XgTLDUmEUKGvTzgvkVckStIUUuPAWGdUWOJ671TjtrDeddOqKfshxGfM1UZx163 AL2pCYF2rHhBdelt1+gLxAa6UojnP+NMiw5FC8cmMkTLAnOpgoFs5do/HLFB0iBL 355zVUHi0O+yMCiyZ7q+REk5WeMRyodipXiPkO0FnBucaTlmSfIAhmfR3G/hLMpb pqZ4KNLRUFGNK808rY5TbTDgHlH1OVnAMeJLJIrIuXHud6XJr01vOQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:24 2025 by rpki-client