This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa
File: 34352e3132362e35362e302f32322d3234203d3e20313332363437.roa (raw, json)
Hash identifier: WjfvCYbp65ghPW3ji7G9hoRxTgUciKFJHBsEK0TOyNo=
Subject key identifier: DF:59:3C:16:4F:5B:5B:D7:67:D4:2E:88:22:BD:54:79:19:40:34:AC
Certificate issuer: /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial: 4560D7B97A7BDFAED537077D7CEA7403244E14A6
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa
Signing time: Fri 12 Dec 2025 08:23:58 +0000
ROA not before: Fri 12 Dec 2025 08:18:58 +0000
ROA not after: Fri 11 Dec 2026 08:23:58 +0000
asID: 132647
IP address blocks: 45.126.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 02:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:60:d7:b9:7a:7b:df:ae:d5:37:07:7d:7c:ea:74:03:24:4e:14:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Validity
Not Before: Dec 12 08:18:58 2025 GMT
Not After : Dec 11 08:23:58 2026 GMT
Subject: CN=DF593C164F5B5BD767D42E8822BD5479194034AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:15:e3:ad:03:be:2b:0a:78:83:d4:2e:fe:
01:78:31:e6:63:28:17:74:11:5f:89:11:35:c5:63:
f6:6f:5b:14:5e:81:6a:02:70:9a:04:4c:1e:f1:02:
94:58:fb:48:2e:83:5b:67:f0:f9:fb:ce:e0:27:e3:
60:c3:4e:dc:58:aa:c5:52:29:35:04:d0:ed:5d:df:
61:a0:97:d1:59:68:7f:a4:28:b2:df:35:ea:84:00:
de:e9:b6:85:ea:76:40:2f:de:15:b0:a9:3e:e2:76:
82:9a:59:47:50:5a:11:e5:36:61:6b:63:2b:9a:f5:
17:21:20:2a:84:95:14:92:e6:bb:29:11:9d:2e:c9:
5c:61:8e:17:2f:0a:eb:23:d4:9b:c2:ec:0e:3b:f9:
99:57:d8:7a:41:d9:36:10:87:27:cb:4d:c4:90:72:
6d:21:fd:31:1d:a1:5c:50:bb:28:c5:16:81:72:81:
1a:a0:aa:93:5b:98:fe:06:f2:68:b4:ee:cb:a0:e5:
6f:5b:62:a3:a1:10:8c:a6:73:3e:a1:8a:15:3f:f6:
26:bb:82:53:36:6b:b5:ee:b1:c1:0a:91:31:06:fe:
0d:da:68:42:27:ca:34:5f:cc:eb:7e:a0:29:a5:67:
99:66:fe:d3:1f:c7:f3:f4:7e:23:5f:0c:68:ca:ca:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:3C:16:4F:5B:5B:D7:67:D4:2E:88:22:BD:54:79:19:40:34:AC
X509v3 Authority Key Identifier:
keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/34352e3132362e35362e302f32322d3234203d3e20313332363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.126.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ad:e1:6c:a8:bd:53:f4:a9:64:90:36:31:e6:9b:38:2f:1c:
b4:0d:79:ef:31:c8:bc:66:6f:12:61:34:e0:88:29:a5:bc:1c:
3e:cf:0f:d2:fa:bd:f9:fa:20:e3:58:99:4e:0a:6e:d1:36:09:
5c:9b:3e:7e:2d:bc:aa:9f:10:04:b1:41:f8:cb:1c:c6:2c:1e:
99:18:73:e0:fa:5e:37:02:25:16:4c:5c:e5:e0:43:de:ff:4c:
8d:7e:01:f1:f4:c7:8f:13:c5:5a:d7:9a:c2:a3:e3:19:be:de:
7d:1f:20:62:2f:ca:0a:8a:81:75:f2:ab:6d:07:21:e7:5a:ba:
b9:61:b0:0a:66:65:90:a5:d5:5a:7e:24:f9:2d:61:a0:63:1e:
a9:47:d0:ad:1d:42:b4:67:12:5e:78:3b:59:07:cc:e0:a7:c8:
bc:8a:1c:03:76:7e:d5:63:e6:da:a7:d3:3c:5b:a6:08:b8:2c:
81:e0:db:38:a3:5a:8c:57:6d:03:ca:ce:e9:9c:6d:fe:72:c4:
be:28:1f:89:43:0c:bf:0b:7e:d3:a5:81:73:7c:94:15:42:d4:
9f:d5:32:d5:05:00:bc:38:a7:90:c4:0d:9c:2f:2d:8b:e5:7d:
e7:8b:ef:0d:74:fb:45:3b:87:76:5e:4a:40:42:30:09:97:a7:
e4:14:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:46:41 2025 by rpki-client