This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa File: 323430353a636163303a3a2f33322d3332203d3e20313339393832.roa (raw, json) Hash identifier: 8XDzxw0TaLUeJDSAqwkpcBgLpYWoQ6KOKlrexsJYJlI= Subject key identifier: 3C:8C:A8:0A:4B:DE:62:7A:EA:D0:CE:76:E1:67:97:5C:E8:48:48:74 Certificate issuer: /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Certificate serial: 16622E738406C7B6C91E26ABE4483B31400DF4F2 Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa Signing time: Sun 07 Dec 2025 13:00:01 +0000 ROA not before: Sun 07 Dec 2025 12:55:01 +0000 ROA not after: Sun 06 Dec 2026 13:00:01 +0000 asID: 139982 IP address blocks: 2405:cac0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:62:2e:73:84:06:c7:b6:c9:1e:26:ab:e4:48:3b:31:40:0d:f4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Validity Not Before: Dec 7 12:55:01 2025 GMT Not After : Dec 6 13:00:01 2026 GMT Subject: CN=3C8CA80A4BDE627AEAD0CE76E167975CE8484874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:3c:d7:7b:b5:ba:0c:26:76:2a:08:fc:2d: f3:17:16:19:4a:a3:8c:b6:65:09:db:30:c5:6e:8e: 49:49:9c:a1:f5:2d:74:a1:87:a5:d4:3e:a1:fb:25: 1e:69:bb:81:6d:e4:a2:3b:6d:28:cc:2a:15:76:da: 4a:49:a0:96:30:88:19:aa:9d:2a:2d:c3:cc:9c:1f: cc:40:61:d9:c0:13:a4:b9:9c:d0:ea:b2:a6:d0:50: 80:dd:5e:32:07:b7:60:b0:7d:10:fb:4c:31:e5:8b: ed:92:38:fc:a1:c8:9a:b2:c0:3f:80:44:0c:25:f7: d9:14:7c:67:53:e4:b5:88:37:55:d5:17:3b:da:a5: a0:67:3c:1a:59:07:fb:da:69:95:53:3e:83:b8:2a: e5:74:8b:40:13:42:32:eb:9d:f9:a0:cb:a3:1c:84: cb:b6:2a:67:f3:4a:76:08:45:76:de:62:cd:12:f4: 05:8b:6f:72:d7:9e:43:40:3b:f4:c5:bf:4c:ab:57: 58:97:13:b1:2b:bc:a6:68:ec:22:68:b4:13:ae:f8: 25:eb:e2:f1:7c:9d:db:a3:a6:8c:18:5c:d7:a6:12: 90:7e:e1:a2:67:3f:b3:cc:fa:72:c3:64:89:f2:10: 56:4c:8c:6f:ee:fe:f0:57:5e:ad:a7:70:ba:17:25: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8C:A8:0A:4B:DE:62:7A:EA:D0:CE:76:E1:67:97:5C:E8:48:48:74 X509v3 Authority Key Identifier: keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/323430353a636163303a3a2f33322d3332203d3e20313339393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:cac0::/32 Signature Algorithm: sha256WithRSAEncryption 29:78:82:46:40:f2:21:f1:b0:a9:30:62:a2:6e:43:b8:08:04: c1:b7:da:78:4a:44:6c:35:74:7b:7f:16:da:d3:18:09:2a:8c: 00:19:54:f5:d2:37:8c:37:de:72:49:d1:16:e8:5d:8a:25:3b: 77:c4:99:14:9d:04:ce:32:51:53:31:9c:79:1f:e0:ce:2e:7a: d7:0e:a7:8d:c5:58:b2:d9:f4:1c:95:95:33:23:38:9f:a0:43: 9c:b8:71:da:50:6c:2b:07:8e:8f:e8:c6:f5:38:74:fa:5c:a8: 10:50:0b:72:e2:79:31:b0:37:12:b0:37:43:28:d0:4f:12:77: c2:57:7e:3e:27:b0:7f:9f:98:06:4d:31:83:05:4c:8b:f1:29: bb:5a:9f:19:dc:a0:d9:2a:63:7d:77:0f:e3:8b:b7:1a:b3:f1: 3d:0d:4b:7e:b7:41:b6:21:25:71:cc:00:12:52:c4:e1:f2:a8: 51:55:f7:97:ef:18:10:78:77:5c:26:6b:55:5e:b3:11:fc:dd: ac:66:f1:97:65:32:cf:6d:a6:f4:d2:1a:aa:65:3e:c1:c7:99: b5:a3:dc:cb:a5:a3:58:f7:e1:e3:12:39:10:9e:fb:ed:62:a0: e2:27:99:ba:50:14:bd:06:28:59:7d:87:05:27:46:d4:fb:70: 28:15:43:64 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFmIuc4QGx7bJHiar5Eg7MUAN9PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4 QTNCQjZENDAeFw0yNTEyMDcxMjU1MDFaFw0yNjEyMDYxMzAwMDFaMDMxMTAvBgNV BAMTKDNDOENBODBBNEJERTYyN0FFQUQwQ0U3NkUxNjc5NzVDRTg0ODQ4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf6TzXe7W6DCZ2Kgj8LfMXFhlK o4y2ZQnbMMVujklJnKH1LXShh6XUPqH7JR5pu4Ft5KI7bSjMKhV22kpJoJYwiBmq nSotw8ycH8xAYdnAE6S5nNDqsqbQUIDdXjIHt2CwfRD7TDHli+2SOPyhyJqywD+A RAwl99kUfGdT5LWIN1XVFzvapaBnPBpZB/vaaZVTPoO4KuV0i0ATQjLrnfmgy6Mc hMu2KmfzSnYIRXbeYs0S9AWLb3LXnkNAO/TFv0yrV1iXE7ErvKZo7CJotBOu+CXr 4vF8ndujpowYXNemEpB+4aJnP7PM+nLDZInyEFZMjG/u/vBXXq2ncLoXJfhbAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUPIyoCkveYnrq0M524WeXXOhISHQwHwYDVR0j BBgwFoAUNoNp0JbOCYLM8fERAB8qLoo7ttQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMC8zNjgzNjlEMDk2 Q0UwOTgyQ0NGMUYxMTEwMDFGMkEyRThBM0JCNkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzY4MzY5RDA5NkNFMDk4MkNDRjFGMTExMDAxRjJBMkU4QTNC QjZENC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5ZjI2ZmI4LTcyYzQtNDlkOS05 Y2JlLTgyMjYzOTcyNzFhMi8wLzMyMzQzMDM1M2E2MzYxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzOTM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFysAwDQYJKoZI hvcNAQELBQADggEBACl4gkZA8iHxsKkwYqJuQ7gIBMG32nhKRGw1dHt/FtrTGAkq jAAZVPXSN4w33nJJ0RboXYolO3fEmRSdBM4yUVMxnHkf4M4uetcOp43FWLLZ9ByV lTMjOJ+gQ5y4cdpQbCsHjo/oxvU4dPpcqBBQC3LieTGwNxKwN0Mo0E8Sd8JXfj4n sH+fmAZNMYMFTIvxKbtanxncoNkqY313D+OLtxqz8T0NS363QbYhJXHMABJSxOHy qFFV95fvGBB4d1wma1VesxH83axm8ZdlMs9tpvTSGqplPsHHmbWj3Mulo1j34eMS ORCe++1ioOInmbpQFL0GKFl9hwUnRtT7cCgVQ2Q= -----END CERTIFICATE-----Generated at Thu Dec 25 03:42:16 2025 by rpki-client