This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: l9N5vizels0zNjqiSpE9IOEX6BvqpauB6B0YkcgHYUY= Subject key identifier: 50:1A:77:59:07:01:1A:51:D3:29:A8:2C:A5:A8:F6:78:5F:50:91:40 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 5AD1B808FC08A8F5655AB3432F26A121F8A68456 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:00 +0000 ROA not before: Fri 12 Dec 2025 11:55:00 +0000 ROA not after: Fri 11 Dec 2026 12:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:f000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d1:b8:08:fc:08:a8:f5:65:5a:b3:43:2f:26:a1:21:f8:a6:84:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:00 2025 GMT Not After : Dec 11 12:00:00 2026 GMT Subject: CN=501A775907011A51D329A82CA5A8F6785F509140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:16:1a:8b:b5:04:f0:76:ac:87:5b:7a:66: f0:8e:ab:b3:33:0f:60:05:8a:43:33:4e:94:c6:cf: f7:16:38:88:24:e5:b2:2c:1b:14:a5:df:73:49:06: fd:e6:ca:f0:3f:e9:e7:f8:6e:3f:4d:26:65:c5:e6: 27:fd:96:9e:c2:ab:1d:8a:aa:cc:ff:3f:2b:f6:84: 56:eb:29:5d:32:a2:59:83:fe:d6:1d:25:77:ac:ce: 4f:79:5a:b8:0e:67:80:04:cf:b5:1d:92:f8:6e:fe: fc:44:86:a0:87:f5:49:24:1b:72:e2:ba:e0:71:c4: c7:c2:fe:33:c2:42:e9:c7:25:b7:f3:c2:82:e2:bd: 5f:53:38:31:ce:d0:4f:53:8a:52:99:c1:2d:6c:f4: 78:12:8d:d2:e2:dd:57:32:57:d1:9d:74:fc:ac:39: 41:b2:db:17:bd:77:05:61:c1:07:20:68:d7:58:05: 2e:3a:aa:2b:91:87:bd:50:30:de:95:af:b4:0a:7c: ea:87:13:46:58:9b:2d:d6:be:08:6f:0d:eb:f2:e4: 79:f9:06:9e:8b:de:5f:d0:a9:bf:30:f7:21:3f:66: 2c:c8:57:bd:7e:c3:fe:c2:45:e1:97:94:5f:31:e0: 5b:37:a2:53:7d:37:24:68:be:bb:16:35:3f:5d:47: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:77:59:07:01:1A:51:D3:29:A8:2C:A5:A8:F6:78:5F:50:91:40 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a663030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 19:43:a6:46:e0:3f:ec:94:6e:43:7e:c4:c4:e7:1a:06:c0:fa: 7e:2e:9d:40:e2:de:4d:ab:3c:bc:a8:98:b2:e2:46:b4:66:44: bb:8f:9d:ac:f5:ae:a7:5e:79:9f:34:96:33:15:c8:97:f0:e8: f5:5f:66:fa:f5:df:ab:32:14:1d:cf:48:43:06:89:22:70:89: 2e:9f:80:d2:95:bb:1b:05:eb:06:e0:e4:5d:f5:bd:fd:ee:a5: c2:04:d4:10:65:39:f8:ad:23:94:18:0c:18:51:81:a5:cc:0b: 7c:10:90:b5:08:a3:df:7d:94:a1:ce:c6:53:7e:87:4c:a5:16: c7:c2:a6:a0:2f:d7:4e:a5:d2:ff:15:e7:4c:34:75:fd:bc:7e: 8c:57:f6:f4:30:14:7a:89:3a:da:7c:a3:16:8d:98:e0:8a:5f: 9b:97:91:09:71:01:cf:1e:1e:86:d4:9d:e6:e6:cf:90:d3:ce: 44:f6:21:a7:58:3f:56:0a:c7:99:e1:53:57:e5:86:92:8e:ad: 97:73:13:d5:64:16:be:07:34:f5:1e:fc:49:df:34:53:27:5f: d5:cc:94:6b:1d:14:09:fd:4c:eb:83:2e:16:9b:1d:5c:f3:d9: af:b7:c1:d5:7c:fe:2c:4b:74:d9:12:43:3a:05:ca:85:87:c1: 8b:2b:1e:7c -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUWtG4CPwIqPVlWrNDLyahIfimhFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDBaFw0yNjEyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDUwMUE3NzU5MDcwMTFBNTFEMzI5QTgyQ0E1QThGNjc4NUY1MDkxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5RYai7UE8Hash1t6ZvCOq7Mz D2AFikMzTpTGz/cWOIgk5bIsGxSl33NJBv3myvA/6ef4bj9NJmXF5if9lp7Cqx2K qsz/Pyv2hFbrKV0yolmD/tYdJXeszk95WrgOZ4AEz7Udkvhu/vxEhqCH9UkkG3Li uuBxxMfC/jPCQunHJbfzwoLivV9TODHO0E9TilKZwS1s9HgSjdLi3VcyV9GddPys OUGy2xe9dwVhwQcgaNdYBS46qiuRh71QMN6Vr7QKfOqHE0ZYmy3WvghvDevy5Hn5 Bp6L3l/Qqb8w9yE/ZizIV71+w/7CReGXlF8x4Fs3olN9NyRovrsWNT9dR4h1AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUUBp3WQcBGlHTKagspaj2eF9QkUAwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDA8DANBgkqhkiG9w0BAQsFAAOCAQEAGUOmRuA/7JRuQ37ExOcaBsD6fi6dQOLe Tas8vKiYsuJGtGZEu4+drPWup155nzSWMxXIl/Do9V9m+vXfqzIUHc9IQwaJInCJ Lp+A0pW7GwXrBuDkXfW9/e6lwgTUEGU5+K0jlBgMGFGBpcwLfBCQtQij332Uoc7G U36HTKUWx8KmoC/XTqXS/xXnTDR1/bx+jFf29DAUeok62nyjFo2Y4Ipfm5eRCXEB zx4ehtSd5ubPkNPORPYhp1g/VgrHmeFTV+WGko6tl3MT1WQWvgc09R78Sd80Uydf 1cyUax0UCf1M64MuFpsdXPPZr7fB1Xz+LEt02RJDOgXKhYfBiysefA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:17:41 2025 by rpki-client