This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: Ks+d2AdogRBjNZ9pZA56IElrYxGYDP/UtHg6lnLyonU= Subject key identifier: 57:67:A7:32:D0:18:51:29:F8:5E:FD:2F:C8:6A:78:05:53:99:E1:D8 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 0B201B2EDD6220B2E722834891611266643BF4A4 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:01 +0000 ROA not before: Fri 12 Dec 2025 12:55:01 +0000 ROA not after: Fri 11 Dec 2026 13:00:01 +0000 asID: 140423 IP address blocks: 2406:20c0:c000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:1b:2e:dd:62:20:b2:e7:22:83:48:91:61:12:66:64:3b:f4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:01 2025 GMT Not After : Dec 11 13:00:01 2026 GMT Subject: CN=5767A732D0185129F85EFD2FC86A78055399E1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6a:23:5f:2c:da:4c:be:da:1a:fb:9c:ef:23: 3d:21:87:fd:36:90:bf:17:f9:0a:81:45:f2:f0:95: c5:34:8f:e2:de:8c:17:26:53:e9:68:3e:ac:a0:3c: cf:d1:ca:fa:29:e3:be:bf:8e:ed:d1:4b:31:2d:a9: c8:a8:06:c6:b0:8d:2b:6b:55:bb:ec:0f:81:04:7e: 0a:7e:f7:81:9f:1f:6b:51:bd:e1:bb:c8:48:8c:00: 62:e2:cd:3b:86:af:e6:a3:05:e6:51:45:a2:74:e4: 1b:50:b8:42:ff:96:21:03:24:d4:9a:ed:17:d0:2c: f8:4d:b8:d8:ec:58:74:cf:00:53:85:01:db:8e:dd: 35:44:47:6a:88:b6:f4:87:04:db:dd:02:a9:96:b2: 3d:f6:f8:c4:e6:11:2d:2b:97:08:93:9e:63:69:a7: 53:2b:c8:36:4d:d0:33:b1:d4:04:a5:06:de:3a:b6: cd:f0:50:2e:26:89:00:44:b9:cb:6b:08:95:91:0e: 37:c3:2f:0f:7a:c0:ab:59:f6:43:03:7a:89:9c:d0: 2c:e4:be:a2:4a:9e:01:ba:6c:ba:df:df:a3:7e:0a: 8d:af:b0:ef:97:e8:a6:b2:70:4a:6e:0e:a0:70:9f: 31:cb:2d:07:16:36:39:65:cd:56:ee:a1:7c:ad:56: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:67:A7:32:D0:18:51:29:F8:5E:FD:2F:C8:6A:78:05:53:99:E1:D8 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:c000::/36 Signature Algorithm: sha256WithRSAEncryption 15:42:50:d0:b3:f5:66:03:b7:50:9e:91:c1:16:18:4b:bf:af: 2d:5c:25:85:48:34:ed:6f:85:0f:e7:c4:10:49:73:30:9f:6e: a8:6d:cb:e2:2c:03:22:30:08:e5:3d:ba:1e:48:8d:a0:8f:45: 4d:80:bd:44:f5:6e:53:fa:5f:0d:f8:70:06:ef:6e:ec:d6:b5: 3f:6d:44:6f:42:07:d5:ff:37:39:a1:aa:8e:fe:8e:c6:4e:aa: ed:63:23:8f:47:a4:c1:90:f7:bd:3c:14:9e:17:e4:9f:f3:b9: ad:03:66:9d:be:31:d2:a8:f0:be:00:6c:39:b3:cd:57:1a:76: f9:f1:af:6f:ea:44:5a:6e:f5:39:20:0a:f0:08:94:e9:69:45: d4:93:03:36:24:c9:2e:23:6f:23:84:1b:8c:9c:c7:55:1c:35: 5e:55:b5:6c:2a:44:66:b3:d1:40:8b:58:73:cd:db:85:fd:7f: 0a:58:c0:1c:33:69:21:43:58:dc:82:54:a5:10:97:b0:bc:91: 9c:78:e8:fe:18:da:f8:6b:8d:bd:be:70:83:fe:69:ff:9e:9b: c6:4a:fd:7c:ed:2c:ad:1c:86:1e:09:a1:46:c0:33:83:1e:6d: f0:b4:5d:b9:52:4a:fe:54:cb:0a:e0:93:55:0c:0e:4e:1f:d6: 06:95:8e:6c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCyAbLt1iILLnIoNIkWESZmQ79KQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDFaFw0yNjEyMTExMzAwMDFaMDMxMTAvBgNV BAMTKDU3NjdBNzMyRDAxODUxMjlGODVFRkQyRkM4NkE3ODA1NTM5OUUxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/aiNfLNpMvtoa+5zvIz0hh/02 kL8X+QqBRfLwlcU0j+LejBcmU+loPqygPM/Ryvop476/ju3RSzEtqcioBsawjStr VbvsD4EEfgp+94GfH2tRveG7yEiMAGLizTuGr+ajBeZRRaJ05BtQuEL/liEDJNSa 7RfQLPhNuNjsWHTPAFOFAduO3TVER2qItvSHBNvdAqmWsj32+MTmES0rlwiTnmNp p1MryDZN0DOx1ASlBt46ts3wUC4miQBEuctrCJWRDjfDLw96wKtZ9kMDeomc0Czk vqJKngG6bLrf36N+Co2vsO+X6KaycEpuDqBwnzHLLQcWNjllzVbuoXytVmaPAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUV2enMtAYUSn4Xv0vyGp4BVOZ4dgwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjMzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAwDANBgkqhkiG9w0BAQsFAAOCAQEAFUJQ0LP1ZgO3UJ6RwRYYS7+vLVwlhUg0 7W+FD+fEEElzMJ9uqG3L4iwDIjAI5T26HkiNoI9FTYC9RPVuU/pfDfhwBu9u7Na1 P21Eb0IH1f83OaGqjv6Oxk6q7WMjj0ekwZD3vTwUnhfkn/O5rQNmnb4x0qjwvgBs ObPNVxp2+fGvb+pEWm71OSAK8AiU6WlF1JMDNiTJLiNvI4QbjJzHVRw1XlW1bCpE ZrPRQItYc83bhf1/CljAHDNpIUNY3IJUpRCXsLyRnHjo/hja+GuNvb5wg/5p/56b xkr9fO0srRyGHgmhRsAzgx5t8LRduVJK/lTLCuCTVQwOTh/WBpWObA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:17:39 2025 by rpki-client