This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa File: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (raw, json) Hash identifier: fOtgd90l6YKA0pJYOUhs+MVJ6TtfFnXek+6jELFm240= Subject key identifier: 58:39:5E:42:08:B0:0D:CF:82:B1:E5:E5:B9:22:39:18:19:11:67:25 Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Certificate serial: 0B8541CBCE5B598597451562ED4FAB864B772E88 Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa Signing time: Sat 13 Dec 2025 06:01:00 +0000 ROA not before: Sat 13 Dec 2025 05:56:00 +0000 ROA not after: Sat 12 Dec 2026 06:01:00 +0000 asID: 138842 IP address blocks: 2404:cdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:85:41:cb:ce:5b:59:85:97:45:15:62:ed:4f:ab:86:4b:77:2e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Validity Not Before: Dec 13 05:56:00 2025 GMT Not After : Dec 12 06:01:00 2026 GMT Subject: CN=58395E4208B00DCF82B1E5E5B922391819116725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:df:32:79:9c:9f:c9:43:7d:7a:54:f2:75:8c: 56:bc:76:d3:4f:c0:e6:66:6e:7d:f4:15:fd:99:77: 4c:69:c6:2e:f4:a9:7a:73:e9:23:9e:e4:b0:fe:0b: b9:78:95:24:5b:37:6f:f1:63:f4:6d:cc:d0:3a:64: f2:08:b8:01:ec:99:47:01:00:93:50:d4:a0:17:06: f5:00:d6:ea:42:27:23:1d:10:c3:03:d4:76:66:bc: ef:cc:80:a1:80:80:8d:c7:6b:91:8e:c9:a3:2b:d1: fb:f9:ca:93:fd:68:52:1d:90:b4:b4:e0:76:7f:36: c7:67:59:77:ed:64:3a:8b:f4:da:5c:7e:1f:3e:e7: 54:8d:fd:8f:cb:6e:8d:90:d1:83:71:2e:c4:76:31: 76:d9:a5:56:a2:ae:e0:57:ff:66:93:13:f5:10:fa: 6e:ad:73:95:b5:a7:29:74:78:4c:a0:d6:9e:9f:66: f7:7c:4d:43:3e:0e:8d:32:11:1a:a3:e4:27:2b:21: 45:7a:63:52:55:40:ee:91:32:cc:c6:4f:33:c9:0a: 37:2a:83:bc:d0:a1:dc:0a:55:64:d5:70:51:d2:50: 32:a0:aa:db:aa:23:08:38:7b:a2:a6:b1:80:7b:e9: 90:b8:54:38:42:d7:04:81:a4:30:11:2b:4f:87:b1: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:39:5E:42:08:B0:0D:CF:82:B1:E5:E5:B9:22:39:18:19:11:67:25 X509v3 Authority Key Identifier: keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/323430343a636463303a3a2f33322d3332203d3e20313338383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 4d:3a:f7:f4:eb:b5:70:62:45:5a:d2:2f:23:45:97:b2:0c:6b: 2e:ca:1b:34:fe:6a:7c:a7:76:9c:c8:00:69:3d:33:82:13:52: 76:7d:8f:fc:cf:7c:87:52:2e:17:16:75:20:1a:23:eb:1a:5f: 5b:fc:aa:de:76:a2:eb:fc:d4:04:bd:e5:4a:08:27:f7:a8:3d: 84:50:db:01:0e:54:67:02:55:15:be:31:d6:7d:0c:f6:2e:5f: 7a:c9:1b:b0:a9:a8:58:85:e0:f0:1b:4f:04:3a:56:a1:0b:e4: b6:b6:c1:83:86:ab:9d:5b:0f:b6:27:ca:90:f8:eb:f8:4e:71: 00:5f:98:af:94:e6:b9:de:e7:3f:37:ab:67:56:50:76:eb:af: 02:91:4b:b6:7f:7f:f4:cf:a9:5e:5f:44:ef:f1:08:ac:51:ad: c5:33:23:41:6c:4a:fa:79:44:e8:2e:d9:05:12:dd:52:58:33: 4b:8f:bd:e8:a1:50:06:80:71:08:a6:81:ff:40:28:9f:40:3b: 50:25:2c:a9:55:6d:fc:1d:5d:f4:6c:36:1f:f7:5e:ed:be:08: c5:a5:e0:f1:ae:44:5a:95:4b:6a:6a:f6:4b:dd:fb:11:90:78: 21:24:53:d8:6f:ab:d0:69:63:18:d2:7e:75:1c:eb:56:02:d8: 3a:7f:7b:14 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUC4VBy85bWYWXRRVi7U+rhkt3LogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1 NTgxQTkzODAeFw0yNTEyMTMwNTU2MDBaFw0yNjEyMTIwNjAxMDBaMDMxMTAvBgNV BAMTKDU4Mzk1RTQyMDhCMDBEQ0Y4MkIxRTVFNUI5MjIzOTE4MTkxMTY3MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD03zJ5nJ/JQ316VPJ1jFa8dtNP wOZmbn30Ff2Zd0xpxi70qXpz6SOe5LD+C7l4lSRbN2/xY/RtzNA6ZPIIuAHsmUcB AJNQ1KAXBvUA1upCJyMdEMMD1HZmvO/MgKGAgI3Ha5GOyaMr0fv5ypP9aFIdkLS0 4HZ/NsdnWXftZDqL9Npcfh8+51SN/Y/Lbo2Q0YNxLsR2MXbZpVairuBX/2aTE/UQ +m6tc5W1pyl0eEyg1p6fZvd8TUM+Do0yERqj5CcrIUV6Y1JVQO6RMszGTzPJCjcq g7zQodwKVWTVcFHSUDKgqtuqIwg4e6KmsYB76ZC4VDhC1wSBpDARK0+HsVRFAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUWDleQgiwDc+CseXluSI5GBkRZyUwHwYDVR0j BBgwFoAUJRhZ+nJuhOuO8Vhcax89klWBqTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTM2NzRhNi0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC8yNTE4NTlGQTcy NkU4NEVCOEVGMTU4NUM2QjFGM0Q5MjU1ODFBOTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1NTgx QTkzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MzY3NGE2LTExNGYtNGJiNS04 NWJiLWNiYjY3ZGIyYTk1NS8wLzMyMzQzMDM0M2E2MzY0NjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzMzODM4MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQEzcAwDQYJKoZI hvcNAQELBQADggEBAE069/TrtXBiRVrSLyNFl7IMay7KGzT+anyndpzIAGk9M4IT UnZ9j/zPfIdSLhcWdSAaI+saX1v8qt52ouv81AS95UoIJ/eoPYRQ2wEOVGcCVRW+ MdZ9DPYuX3rJG7CpqFiF4PAbTwQ6VqEL5La2wYOGq51bD7YnypD46/hOcQBfmK+U 5rne5z83q2dWUHbrrwKRS7Z/f/TPqV5fRO/xCKxRrcUzI0FsSvp5ROgu2QUS3VJY M0uPveihUAaAcQimgf9AKJ9AO1AlLKlVbfwdXfRsNh/3Xu2+CMWl4PGuRFqVS2pq 9kvd+xGQeCEkU9hvq9BpYxjSfnUc61YC2Dp/exQ= -----END CERTIFICATE-----Generated at Fri Dec 19 12:19:49 2025 by rpki-client