This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa File: 323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa (raw, json) Hash identifier: SaOZhKEGus74SzOuwkXBJNM/MuY1pmhRpzbgIg+CDmU= Subject key identifier: 83:84:82:4C:DE:A2:36:07:DE:0D:91:01:2F:18:B4:08:DC:22:8D:82 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 712A14B5693FC3E23BC6308F9026FF8C1101F582 Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa Signing time: Fri 12 Dec 2025 16:00:02 +0000 ROA not before: Fri 12 Dec 2025 15:55:02 +0000 ROA not after: Fri 11 Dec 2026 16:00:02 +0000 asID: 397763 IP address blocks: 2402:9800:4010::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:2a:14:b5:69:3f:c3:e2:3b:c6:30:8f:90:26:ff:8c:11:01:f5:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Dec 12 15:55:02 2025 GMT Not After : Dec 11 16:00:02 2026 GMT Subject: CN=8384824CDEA23607DE0D91012F18B408DC228D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:21:68:65:27:96:8d:11:b7:41:09:b1:61: 8f:39:f5:9d:c5:b4:e8:69:9c:fa:1f:ff:22:ac:9d: 6f:ec:e9:87:92:82:09:9b:08:01:83:36:61:bb:76: 03:41:fe:bd:62:41:b2:04:f3:98:45:97:42:ee:0c: a4:fd:ae:58:e6:54:7f:88:26:2c:3f:b2:3e:da:64: 64:08:bd:97:a5:ab:e7:9f:32:ba:0d:92:1f:5a:38: 41:6f:fe:51:f3:6c:5f:d7:61:da:b4:5b:b6:d9:99: 92:02:6f:33:3e:24:80:d4:9d:e2:32:fb:c1:2e:37: ad:4e:e4:d8:5f:17:39:b5:f5:33:91:be:69:67:17: d1:a2:26:2a:b9:76:d9:ff:e7:79:a4:15:33:00:67: 0f:ff:2e:6f:2a:f7:47:f3:49:16:b3:1d:bb:d6:56: 2d:09:98:16:58:30:cb:62:36:86:3a:a2:43:13:20: 90:f3:39:45:de:67:ca:84:89:be:6d:0d:2a:9f:12: b9:cd:fb:3c:bb:c1:fd:38:54:cb:fd:2d:29:76:c7: de:38:14:46:e7:74:03:b8:c4:dd:19:56:66:bd:fa: 0a:57:dd:02:f8:66:93:ce:12:da:07:ee:5b:b7:7d: 6c:2a:54:41:69:85:19:8b:2b:73:74:51:35:2f:7c: e2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:84:82:4C:DE:A2:36:07:DE:0D:91:01:2F:18:B4:08:DC:22:8D:82 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/323430323a393830303a343031303a3a2f34382d3438203d3e20333937373633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9800:4010::/48 Signature Algorithm: sha256WithRSAEncryption d8:ff:cd:d1:7c:cf:f4:04:db:44:fb:d6:91:00:ce:3d:ee:62: e1:1c:d0:7b:43:32:e0:bb:8a:7a:ce:d1:46:d2:30:03:5b:ed: 74:07:bc:81:3e:0c:04:7b:a0:33:48:22:49:7c:61:67:8b:01: 44:87:75:6d:89:25:bd:9e:00:88:42:e2:69:33:a1:be:c0:95: 44:99:be:49:6b:a1:f7:12:f9:00:9e:c6:5f:93:3f:d6:b5:cc: 9e:1f:6c:e8:54:ff:56:54:51:d9:4e:0b:da:9e:36:42:18:a9: b1:cd:db:b2:95:c1:ae:44:fc:8c:56:b1:82:83:a2:ee:15:db: d8:35:a7:e2:a4:0e:d4:03:fd:e6:45:0a:95:ac:18:9b:38:a2: 83:81:17:ac:9b:13:4c:ca:d9:1f:02:a2:7b:9a:12:58:2a:9a: d9:86:92:78:68:6d:8a:ea:05:68:34:7b:0a:df:99:2b:c9:5c: 06:61:22:9c:f5:0d:09:cc:1c:9b:ea:f9:94:62:8d:75:83:65: f8:cc:00:5a:2c:99:58:23:3c:c9:1f:bd:ea:02:db:ad:ed:f4: c7:d1:50:69:d6:5d:ae:f9:27:4a:d9:72:3e:43:63:fd:0b:a6: c4:61:a2:c7:b6:d9:74:67:c5:db:f6:32:e7:16:0c:d1:5c:05: 1e:bc:ef:55 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcSoUtWk/w+I7xjCPkCb/jBEB9YIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTEyMTIxNTU1MDJaFw0yNjEyMTExNjAwMDJaMDMxMTAvBgNV BAMTKDgzODQ4MjRDREVBMjM2MDdERTBEOTEwMTJGMThCNDA4REMyMjhEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmiFoZSeWjRG3QQmxYY859Z3F tOhpnPof/yKsnW/s6YeSggmbCAGDNmG7dgNB/r1iQbIE85hFl0LuDKT9rljmVH+I Jiw/sj7aZGQIvZelq+efMroNkh9aOEFv/lHzbF/XYdq0W7bZmZICbzM+JIDUneIy +8EuN61O5NhfFzm19TORvmlnF9GiJiq5dtn/53mkFTMAZw//Lm8q90fzSRazHbvW Vi0JmBZYMMtiNoY6okMTIJDzOUXeZ8qEib5tDSqfErnN+zy7wf04VMv9LSl2x944 FEbndAO4xN0ZVma9+gpX3QL4ZpPOEtoH7lu3fWwqVEFphRmLK3N0UTUvfOLBAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUg4SCTN6iNgfeDZEBLxi0CNwijYIwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMyMzQzMDMyM2EzOTM4MzAzMDNhMzQzMDMxMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM5MzczNzM2MzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk ApgAQBAwDQYJKoZIhvcNAQELBQADggEBANj/zdF8z/QE20T71pEAzj3uYuEc0HtD MuC7inrO0UbSMANb7XQHvIE+DAR7oDNIIkl8YWeLAUSHdW2JJb2eAIhC4mkzob7A lUSZvklrofcS+QCexl+TP9a1zJ4fbOhU/1ZUUdlOC9qeNkIYqbHN27KVwa5E/IxW sYKDou4V29g1p+KkDtQD/eZFCpWsGJs4ooOBF6ybE0zK2R8ConuaElgqmtmGknho bYrqBWg0ewrfmSvJXAZhIpz1DQnMHJvq+ZRijXWDZfjMAFosmVgjPMkfveoC263t 9MfRUGnWXa75J0rZcj5DY/0LpsRhose22XRnxdv2MucWDNFcBR6871U= -----END CERTIFICATE-----Generated at Fri Dec 19 12:22:32 2025 by rpki-client