This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/323430363a373634303a3a2f33322d3332203d3e20313431303731.roa File: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (raw, json) Hash identifier: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M= Subject key identifier: 48:F3:61:D8:8D:AD:32:E3:D7:83:4A:2A:80:DF:A9:4D:77:30:F2:44 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 3F3F7BFA3749E38F8EF432C798E4FDE1DB88CCC9 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/323430363a373634303a3a2f33322d3332203d3e20313431303731.roa Signing time: Wed 17 Dec 2025 19:00:02 +0000 ROA not before: Wed 17 Dec 2025 18:55:02 +0000 ROA not after: Wed 16 Dec 2026 19:00:02 +0000 asID: 141071 IP address blocks: 2406:7640::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:3f:7b:fa:37:49:e3:8f:8e:f4:32:c7:98:e4:fd:e1:db:88:cc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Dec 17 18:55:02 2025 GMT Not After : Dec 16 19:00:02 2026 GMT Subject: CN=48F361D88DAD32E3D7834A2A80DFA94D7730F244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:8f:22:fa:9f:39:f7:0f:30:7b:eb:21:2b: 0c:c1:bd:57:c7:16:a5:42:8d:00:be:6a:9c:da:4d: 4e:1c:20:a4:5b:c2:60:81:3b:d6:2f:96:32:7b:fe: 9e:7f:67:c5:0c:d9:0a:c0:9e:d7:12:e2:b8:e6:87: 10:84:ee:c1:57:f8:d5:d1:0e:cf:57:3d:3c:d1:b0: cd:61:26:9f:f8:e3:a2:82:9e:d8:fb:ad:a8:48:2e: 19:a4:70:2b:8e:cd:ad:1c:75:2c:5f:78:16:57:23: da:2c:9b:61:3f:a0:fb:b9:71:3d:38:88:99:07:37: 7f:20:12:37:f2:e6:ea:d4:59:aa:50:94:32:5e:2d: e7:f5:75:3a:20:23:dd:51:09:40:36:68:a2:df:4b: b4:99:f0:70:a4:d7:cf:5a:04:70:4e:3f:b3:c9:2e: 71:81:50:70:60:c5:c8:ae:10:8e:25:1a:54:c1:ff: 8f:ed:34:3e:a0:b0:37:98:18:f9:49:c6:4a:b9:74: 23:b7:9a:41:e3:c4:2a:5f:d4:51:d2:4c:b3:52:02: c1:c2:ad:e2:90:0d:2a:b2:9c:6a:d6:ba:33:7a:c6: 5d:4e:46:05:0b:92:23:3d:93:fc:ea:56:2b:ee:99: f5:a5:d3:f8:a7:df:ef:0d:c2:a5:6f:e9:57:dd:1d: 8f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F3:61:D8:8D:AD:32:E3:D7:83:4A:2A:80:DF:A9:4D:77:30:F2:44 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/323430363a373634303a3a2f33322d3332203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7640::/32 Signature Algorithm: sha256WithRSAEncryption c9:d9:56:c9:35:30:0d:9d:4b:f9:9e:24:43:d4:11:4d:1d:3a: 50:96:e3:05:60:34:cc:b9:01:8b:b8:94:a7:b2:a5:bf:63:68: 4d:eb:0e:dc:19:87:92:24:37:12:36:41:a5:8d:34:5c:52:9f: bc:7e:54:5a:b1:7d:f6:f0:fd:ad:37:d3:19:52:51:95:1b:3b: 4f:ff:9f:68:e3:9d:f1:94:d4:bc:13:1d:7e:b8:b6:42:31:cd: f8:9e:61:71:ac:0e:ac:76:69:52:ad:c2:05:28:b4:0b:11:ac: 5d:7f:d1:78:35:b6:3a:39:d9:58:45:e2:4e:d9:ad:f2:c3:a1: 99:76:3f:a7:c7:11:b7:bb:52:da:ff:c6:b8:bd:a4:92:e9:d3: 1f:88:d7:59:a6:a9:fc:ab:68:92:4a:f8:83:b8:1c:31:b4:b5: 24:c1:ed:4a:8a:a7:70:9b:8c:c1:55:a8:42:f2:e6:e1:91:2a: b6:48:a5:61:e0:5d:68:98:d9:91:a8:6f:33:fc:14:79:2d:91: 8e:8e:4f:81:e9:a8:06:c1:46:9d:09:73:1d:e6:dc:f2:ca:e9: 6e:17:d7:3a:25:0b:2c:15:5e:74:99:0e:49:e7:2d:f4:5b:03: f4:7e:76:95:43:62:ec:bf:fe:e9:c3:a8:ca:62:d9:8b:60:4d: 89:8d:86:80 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUPz97+jdJ44+O9DLHmOT94duIzMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTEyMTcxODU1MDJaFw0yNjEyMTYxOTAwMDJaMDMxMTAvBgNV BAMTKDQ4RjM2MUQ4OERBRDMyRTNENzgzNEEyQTgwREZBOTRENzczMEYyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYI8i+p859w8we+shKwzBvVfH FqVCjQC+apzaTU4cIKRbwmCBO9YvljJ7/p5/Z8UM2QrAntcS4rjmhxCE7sFX+NXR Ds9XPTzRsM1hJp/446KCntj7rahILhmkcCuOza0cdSxfeBZXI9osm2E/oPu5cT04 iJkHN38gEjfy5urUWapQlDJeLef1dTogI91RCUA2aKLfS7SZ8HCk189aBHBOP7PJ LnGBUHBgxciuEI4lGlTB/4/tND6gsDeYGPlJxkq5dCO3mkHjxCpf1FHSTLNSAsHC reKQDSqynGrWujN6xl1ORgULkiM9k/zqVivumfWl0/in3+8NwqVv6VfdHY+JAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUSPNh2I2tMuPXg0oqgN+pTXcw8kQwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5Y2UwYzk0LTBkNmMtNDViMy1h YWM2LTM0ZDBjZTliMWYwOC8wLzMyMzQzMDM2M2EzNzM2MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGdkAwDQYJKoZI hvcNAQELBQADggEBAMnZVsk1MA2dS/meJEPUEU0dOlCW4wVgNMy5AYu4lKeypb9j aE3rDtwZh5IkNxI2QaWNNFxSn7x+VFqxffbw/a030xlSUZUbO0//n2jjnfGU1LwT HX64tkIxzfieYXGsDqx2aVKtwgUotAsRrF1/0Xg1tjo52VhF4k7ZrfLDoZl2P6fH Ebe7Utr/xri9pJLp0x+I11mmqfyraJJK+IO4HDG0tSTB7UqKp3CbjMFVqELy5uGR KrZIpWHgXWiY2ZGobzP8FHktkY6OT4HpqAbBRp0Jcx3m3PLK6W4X1zolCywVXnSZ DknnLfRbA/R+dpVDYuy//unDqMpi2YtgTYmNhoA= -----END CERTIFICATE-----Generated at Sat Dec 20 14:39:11 2025 by rpki-client