This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: /haU1gSh0mI3JilBGNURo1mhP+ctxjmdCNE9UJZppIs= Subject key identifier: 62:06:B9:52:68:87:47:E6:E5:C7:CD:C5:6B:BA:76:8A:3B:37:4A:22 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: F2DB5E22FD74FF98BA0130A814D707C1A39754 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:00 +0000 ROA not before: Fri 12 Dec 2025 12:55:00 +0000 ROA not after: Fri 11 Dec 2026 13:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:d000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f2:db:5e:22:fd:74:ff:98:ba:01:30:a8:14:d7:07:c1:a3:97:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:00 2025 GMT Not After : Dec 11 13:00:00 2026 GMT Subject: CN=6206B952688747E6E5C7CDC56BBA768A3B374A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c2:54:37:c7:31:5c:f9:70:93:95:d3:19:10: 62:0e:f0:69:01:5b:98:9c:2a:5e:ce:cd:79:25:2e: 5e:2e:9c:59:7c:38:dd:c0:f4:90:2b:5b:55:c3:22: 3c:1a:5f:7f:e8:a0:1c:cb:f1:08:c4:0a:9c:f2:40: f7:b1:9e:43:c7:92:53:1e:a8:bc:e9:97:50:e8:84: c7:3b:1b:e4:45:60:f0:ad:25:ad:11:ca:90:61:d9: d8:b6:17:79:2d:33:25:59:fa:16:eb:2a:d8:df:38: 2c:78:a8:2f:ad:5f:fc:1e:fb:3b:92:ea:9c:2b:25: 2c:4c:ec:f5:21:fa:b7:c5:47:b5:7b:ed:67:85:cd: 4d:74:e2:54:a4:52:25:6c:6a:33:3a:e8:7e:22:51: 50:ce:ea:12:48:1a:57:6e:d4:67:d9:ee:b1:13:13: 93:b5:38:cb:bc:56:89:11:80:04:04:a1:ec:b4:34: f5:cd:e2:9c:0d:20:09:a0:80:11:0e:2c:53:b9:71: d8:ad:c0:f9:67:68:c3:59:1e:9e:94:b3:e3:6a:e9: 09:fc:e6:29:57:40:64:8c:4c:94:d1:b4:5f:4e:7a: 20:86:b9:d6:c7:6f:74:8e:84:28:5b:0e:d3:89:83: f9:09:3c:aa:6a:0c:9b:4f:e7:58:d7:ed:1e:98:fd: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:06:B9:52:68:87:47:E6:E5:C7:CD:C5:6B:BA:76:8A:3B:37:4A:22 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a643030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:d000::/36 Signature Algorithm: sha256WithRSAEncryption 02:2f:0d:78:06:6b:3a:04:dd:2a:ba:6c:b5:54:89:de:45:2b: 85:44:4b:12:f4:64:13:fd:65:cc:7b:14:02:a2:0b:94:fe:fc: fe:f1:46:80:e6:c1:c9:6e:fb:46:63:02:24:11:f4:bd:a2:c0: a1:31:7d:2d:c9:10:e7:b8:fa:50:4d:25:33:ee:6e:46:ff:92: e3:b6:94:90:b3:01:29:d7:e8:9f:1b:82:cf:0a:1e:21:92:06: b2:c0:77:c5:34:9a:23:cf:86:18:8a:aa:28:65:20:02:ba:24: fe:28:6f:92:1c:49:7d:d3:78:ba:ca:6b:13:5c:aa:91:17:6a: 4f:c1:06:33:55:48:78:7c:f6:37:65:8a:35:33:bd:d8:f6:a3: 9a:78:dd:63:9c:58:2a:bc:68:5d:b4:2a:58:ac:f2:51:56:20: fa:c8:d9:f8:bf:9d:57:10:e0:f1:c9:80:13:ee:ae:17:b0:84: 34:dd:83:b3:8b:7f:00:67:69:d3:26:0f:a8:b0:05:60:73:18: 62:63:95:92:d3:5f:80:76:db:25:7c:32:b6:5e:f0:f2:52:bc: 3b:a7:33:cb:46:97:5d:de:50:12:a7:9b:0c:57:5d:f3:69:92: 85:a3:8a:da:39:3b:c7:4c:ea:0e:2f:71:f2:fa:a1:c1:b4:be: e1:c9:7c:5a -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUAPLbXiL9dP+YugEwqBTXB8Gjl1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDBaFw0yNjEyMTExMzAwMDBaMDMxMTAvBgNV BAMTKDYyMDZCOTUyNjg4NzQ3RTZFNUM3Q0RDNTZCQkE3NjhBM0IzNzRBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmwlQ3xzFc+XCTldMZEGIO8GkB W5icKl7OzXklLl4unFl8ON3A9JArW1XDIjwaX3/ooBzL8QjECpzyQPexnkPHklMe qLzpl1DohMc7G+RFYPCtJa0RypBh2di2F3ktMyVZ+hbrKtjfOCx4qC+tX/we+zuS 6pwrJSxM7PUh+rfFR7V77WeFzU104lSkUiVsajM66H4iUVDO6hJIGldu1GfZ7rET E5O1OMu8VokRgAQEoey0NPXN4pwNIAmggBEOLFO5cditwPlnaMNZHp6Us+Nq6Qn8 5ilXQGSMTJTRtF9OeiCGudbHb3SOhChbDtOJg/kJPKpqDJtP51jX7R6Y/XTtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUYga5UmiHR+blx83Fa7p2ijs3SiIwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjQzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDA0DANBgkqhkiG9w0BAQsFAAOCAQEAAi8NeAZrOgTdKrpstVSJ3kUrhURLEvRk E/1lzHsUAqILlP78/vFGgObByW77RmMCJBH0vaLAoTF9LckQ57j6UE0lM+5uRv+S 47aUkLMBKdfonxuCzwoeIZIGssB3xTSaI8+GGIqqKGUgArok/ihvkhxJfdN4uspr E1yqkRdqT8EGM1VIeHz2N2WKNTO92PajmnjdY5xYKrxoXbQqWKzyUVYg+sjZ+L+d VxDg8cmAE+6uF7CENN2Ds4t/AGdp0yYPqLAFYHMYYmOVktNfgHbbJXwytl7w8lK8 O6czy0aXXd5QEqebDFdd82mShaOK2jk7x0zqDi9x8vqhwbS+4cl8Wg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:19:47 2025 by rpki-client