This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa
File: 323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa (raw, json)
Hash identifier: bt4Vopji+GVCjDjyKmW6QNBO59RohOWW/7HaomcjyK8=
Subject key identifier: 54:C8:5A:F0:81:CE:89:A7:E5:1D:76:3B:49:D5:37:F4:08:AA:D3:6F
Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial: 45A44B9517F836281522851E8B51551A1AF04533
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa
Signing time: Fri 12 Dec 2025 13:00:00 +0000
ROA not before: Fri 12 Dec 2025 12:55:00 +0000
ROA not after: Fri 11 Dec 2026 13:00:00 +0000
asID: 150268
IP address blocks: 2406:20c0:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a4:4b:95:17:f8:36:28:15:22:85:1e:8b:51:55:1a:1a:f0:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Validity
Not Before: Dec 12 12:55:00 2025 GMT
Not After : Dec 11 13:00:00 2026 GMT
Subject: CN=54C85AF081CE89A7E51D763B49D537F408AAD36F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:08:24:f2:2c:9f:15:6c:37:83:90:a3:7e:
67:4e:e2:9d:14:d0:49:e7:5f:2c:1a:07:e0:fc:b2:
a7:dc:a4:4d:d5:c8:89:dd:c9:db:05:97:3a:31:4e:
26:e9:5b:12:19:e8:8f:e6:89:84:9a:63:7e:4f:d5:
37:11:11:25:97:70:13:5d:13:1a:5e:43:92:e8:f8:
55:53:ac:fe:6f:7d:52:46:b9:65:9a:e0:c6:82:6b:
19:64:0b:81:63:0f:af:ea:25:d1:9b:9a:7e:3f:81:
ea:83:4f:bd:5d:45:31:db:02:e5:fd:8b:34:bf:5a:
19:29:68:50:ee:e8:31:d8:77:0a:76:09:15:ea:5a:
44:c9:7d:9f:41:ed:d6:31:f5:c6:f7:3b:f5:04:6f:
d8:7a:cd:cb:94:c3:50:49:05:15:91:56:05:be:f7:
f2:fa:be:4c:95:29:c5:e8:e4:2f:ae:63:6c:e4:14:
79:d4:2a:80:96:c6:6d:02:1c:b4:cf:c0:09:ae:e0:
dd:61:be:82:6a:57:5f:95:c4:64:57:8e:99:69:9f:
69:cc:00:71:4a:12:00:89:cf:1b:b6:0f:2e:6d:0f:
a8:dc:db:ec:f9:d1:35:3d:a5:03:30:19:64:05:76:
39:9c:0e:57:44:3e:69:3d:eb:65:f1:c6:b9:83:7a:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C8:5A:F0:81:CE:89:A7:E5:1D:76:3B:49:D5:37:F4:08:AA:D3:6F
X509v3 Authority Key Identifier:
keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030303a3a2f34382d3438203d3e20313530323638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:20c0:e000::/48
Signature Algorithm: sha256WithRSAEncryption
c0:d2:72:1c:ea:fb:de:1b:51:fa:d8:9a:fc:b0:47:18:ab:bd:
75:d6:d9:19:25:33:ba:26:c0:7f:f8:d4:0e:09:50:46:b4:9b:
03:c8:e9:6b:6f:ec:71:53:1d:8e:4c:28:08:6a:6e:5a:64:1a:
52:45:54:ae:41:76:51:ce:22:1b:8b:19:ef:50:9d:f8:33:ca:
f8:f8:fc:b2:e2:a7:23:7b:6a:fa:5a:5e:86:a9:af:f1:a2:08:
b3:54:56:94:39:ae:c6:b6:08:0f:81:79:92:51:b7:e5:22:a3:
51:99:fa:d2:ca:00:75:ef:b5:b6:c5:0c:de:49:08:0a:30:ba:
1f:47:29:ec:9d:42:b8:3f:b5:19:5a:8a:60:76:88:b4:69:d2:
fe:a7:10:a9:30:12:35:24:12:54:ba:24:8d:b0:c0:07:9a:96:
4c:67:4c:8e:d1:44:cf:bd:dd:83:54:3b:9d:91:dc:46:94:01:
e2:b3:65:fb:b2:0c:fe:00:02:6d:a5:ab:b5:33:e7:9c:cb:0f:
5e:64:58:e9:6c:5b:57:86:1a:6e:87:9f:38:00:25:ee:76:74:
37:d6:61:65:cb:d9:39:fc:81:99:8a:dc:4a:2a:34:e5:56:60:
55:cb:47:9e:ea:40:99:e5:46:32:53:b6:c1:03:c6:42:a9:38:
40:2b:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:38:08 2025 by rpki-client