This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa File: 323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa (raw, json) Hash identifier: nASP1+s5Yr02DageTGdazoA9xc6IABPGa5gu3FsZO/s= Subject key identifier: 2A:F0:E5:F6:FD:63:E5:16:B6:17:33:CA:13:C7:39:9C:D0:FF:B1:95 Certificate issuer: /CN=35369AC685201508541197F86A8FDAC2375BE30A Certificate serial: 036EF91DC26B24859747E91E816F20F6FDF15D8E Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa Signing time: Thu 18 Dec 2025 09:00:02 +0000 ROA not before: Thu 18 Dec 2025 08:55:02 +0000 ROA not after: Thu 17 Dec 2026 09:00:02 +0000 asID: 131769 IP address blocks: 2001:df2:ef00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6e:f9:1d:c2:6b:24:85:97:47:e9:1e:81:6f:20:f6:fd:f1:5d:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A Validity Not Before: Dec 18 08:55:02 2025 GMT Not After : Dec 17 09:00:02 2026 GMT Subject: CN=2AF0E5F6FD63E516B61733CA13C7399CD0FFB195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:11:3b:36:1c:c1:23:9c:7b:6f:59:ba:15:fd: f2:f8:7a:ce:ba:a3:ac:ef:55:b4:b5:ef:cc:75:fd: fc:ec:cc:23:58:25:ad:69:7e:86:03:fe:b8:b0:0c: 69:a7:4e:ed:53:68:c3:9a:bd:88:63:e1:24:ea:fe: ff:76:3e:ff:37:d1:78:9b:bd:5e:af:c5:d1:37:c5: 08:f0:fa:e1:f9:4e:7a:4e:7f:2d:7d:44:6b:3e:e0: 9f:85:85:f0:ae:98:54:11:25:ce:fe:f2:7f:f2:88: 83:71:bb:8a:68:d8:5c:8a:df:42:81:df:62:f5:fb: 10:67:5d:6e:af:ed:fa:ec:cd:b3:62:23:a2:f0:55: 3e:1a:e1:a3:1f:f6:e4:ce:75:b5:2e:6a:da:a0:6e: 9f:d4:5e:32:3d:ef:fa:29:57:99:fc:b3:46:d8:2d: 46:41:41:2a:62:c6:77:9c:15:3f:57:57:94:b2:3a: bc:e5:a8:1e:89:f8:40:b2:a1:44:63:b2:18:4c:77: 3b:42:e7:2d:94:a7:f1:5d:15:18:a8:bf:3d:17:b7: 5e:2d:51:a0:81:72:16:31:3c:4c:66:08:b9:ca:25: 45:77:87:74:25:ab:92:d0:27:16:b5:4d:2f:1f:b1: 26:72:d9:89:1b:8c:75:9a:67:f3:f8:11:81:75:06: 27:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:E5:F6:FD:63:E5:16:B6:17:33:CA:13:C7:39:9C:D0:FF:B1:95 X509v3 Authority Key Identifier: keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/323030313a6466323a656630303a3a2f34382d3438203d3e20313331373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df2:ef00::/48 Signature Algorithm: sha256WithRSAEncryption 8d:7e:ae:12:ba:87:1b:f4:9a:2c:ff:2f:d4:17:41:2b:db:74: f1:c4:6b:b5:1e:4c:23:6c:f9:e0:55:13:21:55:e3:9b:4c:ed: 18:44:26:26:e7:cf:7c:d9:a0:3f:ba:42:0a:ae:4a:ac:4f:91: d5:66:15:22:cc:90:f1:88:37:96:17:32:9f:14:6e:68:ae:f5: 3b:3c:e0:a2:fe:af:21:81:99:06:4b:d8:08:69:e3:0a:7d:88: a4:c2:b0:5d:20:32:25:30:31:71:74:c7:a9:85:4b:01:f5:ab: 7d:9e:83:37:8d:85:02:6c:ec:b6:2c:f0:62:35:6d:54:d3:5d: 3e:d5:d3:ed:2c:30:ba:80:c8:9c:75:af:5e:c5:81:8f:20:c8: 14:a4:8e:d2:84:fb:19:1d:60:4a:4b:f1:bc:83:39:4e:9c:4a: 87:0b:47:00:ed:97:5b:89:49:e4:95:cc:67:6a:06:ff:e4:d1: 3b:fc:19:7b:67:fe:a5:c6:c9:ff:e1:31:6e:37:e5:25:bc:46: cf:d3:f0:08:06:be:11:b2:a0:b5:ba:57:94:71:15:b3:74:88: a3:36:c6:10:d3:6c:1e:02:e3:65:ef:02:89:4a:a7:bd:64:04: 4d:7a:2f:d4:57:01:7f:4b:b7:2c:70:0a:40:ef:93:42:6b:03: b1:d8:40:5d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUA275HcJrJIWXR+kegW8g9v3xXY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIz NzVCRTMwQTAeFw0yNTEyMTgwODU1MDJaFw0yNjEyMTcwOTAwMDJaMDMxMTAvBgNV BAMTKDJBRjBFNUY2RkQ2M0U1MTZCNjE3MzNDQTEzQzczOTlDRDBGRkIxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3ETs2HMEjnHtvWboV/fL4es66 o6zvVbS178x1/fzszCNYJa1pfoYD/riwDGmnTu1TaMOavYhj4STq/v92Pv830Xib vV6vxdE3xQjw+uH5TnpOfy19RGs+4J+FhfCumFQRJc7+8n/yiINxu4po2FyK30KB 32L1+xBnXW6v7frszbNiI6LwVT4a4aMf9uTOdbUuatqgbp/UXjI97/opV5n8s0bY LUZBQSpixnecFT9XV5SyOrzlqB6J+ECyoURjshhMdztC5y2Up/FdFRiovz0Xt14t UaCBchYxPExmCLnKJUV3h3Qlq5LQJxa1TS8fsSZy2YkbjHWaZ/P4EYF1Bie1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKvDl9v1j5Ra2FzPKE8c5nND/sZUwHwYDVR0j BBgwFoAUNTaaxoUgFQhUEZf4ao/awjdb4wowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTRhY2EzYy02M2RjLTRjMWItYTdlOC1hY2JhZTgyMWNkZTUvMC8zNTM2OUFDNjg1 MjAxNTA4NTQxMTk3Rjg2QThGREFDMjM3NUJFMzBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzUzNjlBQzY4NTIwMTUwODU0MTE5N0Y4NkE4RkRBQzIzNzVC RTMwQS5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNGFjYTNjLTYzZGMtNGMxYi1h N2U4LWFjYmFlODIxY2RlNS8wLzMyMzAzMDMxM2E2NDY2MzIzYTY1NjYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzMxMzczNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 8u8AMA0GCSqGSIb3DQEBCwUAA4IBAQCNfq4Suocb9Jos/y/UF0Er23TxxGu1Hkwj bPngVRMhVeObTO0YRCYm58982aA/ukIKrkqsT5HVZhUizJDxiDeWFzKfFG5orvU7 POCi/q8hgZkGS9gIaeMKfYikwrBdIDIlMDFxdMephUsB9at9noM3jYUCbOy2LPBi NW1U010+1dPtLDC6gMicda9exYGPIMgUpI7ShPsZHWBKS/G8gzlOnEqHC0cA7Zdb iUnklcxnagb/5NE7/Bl7Z/6lxsn/4TFuN+UlvEbP0/AIBr4RsqC1uleUcRWzdIij NsYQ02weAuNl7wKJSqe9ZARNei/UVwF/S7cscApA75NCawOx2EBd -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:32 2025 by rpki-client