This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa File: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (raw, json) Hash identifier: ZpsXVRa1bGj6KGJ4JUiINsK5cebpyx4AuHAmoR4SCEQ= Subject key identifier: B3:28:FB:53:4E:BB:AB:89:FE:35:B3:4D:DE:CB:F5:EF:71:F7:15:69 Certificate issuer: /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7 Certificate serial: 42118DD1E0F21CD8BBC91EC2AF4FB507244DEEF9 Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa Signing time: Thu 18 Dec 2025 04:00:02 +0000 ROA not before: Thu 18 Dec 2025 03:55:02 +0000 ROA not after: Thu 17 Dec 2026 04:00:02 +0000 asID: 140429 IP address blocks: 2406:21c0::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:11:8d:d1:e0:f2:1c:d8:bb:c9:1e:c2:af:4f:b5:07:24:4d:ee:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7 Validity Not Before: Dec 18 03:55:02 2025 GMT Not After : Dec 17 04:00:02 2026 GMT Subject: CN=B328FB534EBBAB89FE35B34DDECBF5EF71F71569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4a:94:fd:72:34:2e:8a:b1:06:a6:d2:5e:bf: 4f:f5:64:37:68:09:71:63:22:64:01:d5:d9:bd:03: 2d:0b:3e:c9:38:8c:4e:55:70:18:46:ea:f9:9d:f6: e2:11:2c:1d:a3:9c:69:f0:b4:c0:9c:f7:4f:31:8e: cd:be:5f:be:36:b0:b3:3b:4b:d0:29:40:52:01:6a: ee:44:e1:b6:e8:de:37:16:9b:a2:29:e9:41:2e:e3: 99:be:dc:87:89:56:54:ff:bd:d0:e4:5f:4a:6f:2f: 11:b4:4e:bf:ae:b7:d7:de:77:c0:d4:60:15:08:c6: d0:47:15:95:df:4e:38:50:c0:04:35:0c:0e:d4:24: 25:5d:da:a7:22:e4:f9:b7:1a:3d:c1:01:e8:d3:65: 2a:f9:6f:e4:49:bc:dd:2b:d2:07:5b:fc:e2:88:1e: 90:e6:63:9d:08:cd:ff:e8:38:a4:e3:69:23:37:b7: 8e:ac:10:25:2a:62:85:e4:e2:9d:86:fe:f4:49:75: e7:62:cc:ba:c3:d9:43:91:05:89:e0:49:1a:0e:19: fa:c4:53:68:b4:d7:25:76:79:a5:fd:0d:0e:57:5e: be:77:16:66:a3:92:ba:f2:a0:57:8f:9a:72:2f:da: fb:14:39:f5:56:d2:e6:33:a6:24:a3:0a:d9:ef:b6: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:FB:53:4E:BB:AB:89:FE:35:B3:4D:DE:CB:F5:EF:71:F7:15:69 X509v3 Authority Key Identifier: keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/323430363a323163303a3a2f33322d3332203d3e20313430343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:21c0::/32 Signature Algorithm: sha256WithRSAEncryption af:15:1c:1c:ce:60:3f:b6:4c:4d:88:98:31:38:30:1a:43:16: c4:7b:25:9a:2d:3e:6a:04:b2:09:73:b7:96:f8:8a:3b:b0:ae: 91:4c:51:8c:bc:72:d7:50:5a:ca:af:97:f3:27:cb:96:d8:3d: e8:68:a6:e8:f6:68:ea:43:e5:23:1f:8e:b2:7e:8b:55:69:3e: 2a:c5:b5:a8:3e:11:d9:32:68:ce:98:29:41:42:b4:e3:ae:ae: a7:87:71:34:1f:2d:0b:2e:fd:46:dc:9d:4e:3e:7b:e7:e2:80: 18:54:f5:95:8e:9a:4d:b4:c3:d4:b4:7d:61:e8:8e:42:52:37: 1d:df:9d:3b:c2:18:87:f1:e1:d7:52:4e:f4:00:b0:04:34:16: 95:47:2e:01:ba:75:88:57:b5:a3:ec:80:91:0a:c9:b9:8f:f9: d9:32:a9:38:6c:cd:a2:a5:58:78:05:9a:ea:ff:14:cd:d5:3a: f1:4b:bc:d5:e9:53:29:ac:4f:3b:56:2f:ba:d7:7e:cb:67:cb: b3:d0:27:66:d9:51:4f:90:c0:23:68:1c:ea:e3:5c:5f:4b:37: 60:f6:18:96:b7:13:c5:fb:b3:8b:3b:5c:11:bf:04:b5:f9:2e: 02:6a:8b:f4:eb:5b:f8:ee:3b:55:ad:16:b1:59:af:bf:1a:53: cf:b8:ba:2d -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUQhGN0eDyHNi7yR7Cr0+1ByRN7vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyQTgwQURDQkQ4MzZGNEQ4RDVFNEU5ODA4OEMzRUNC Q0FGMThENzAeFw0yNTEyMTgwMzU1MDJaFw0yNjEyMTcwNDAwMDJaMDMxMTAvBgNV BAMTKEIzMjhGQjUzNEVCQkFCODlGRTM1QjM0RERFQ0JGNUVGNzFGNzE1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SpT9cjQuirEGptJev0/1ZDdo CXFjImQB1dm9Ay0LPsk4jE5VcBhG6vmd9uIRLB2jnGnwtMCc908xjs2+X742sLM7 S9ApQFIBau5E4bbo3jcWm6Ip6UEu45m+3IeJVlT/vdDkX0pvLxG0Tr+ut9fed8DU YBUIxtBHFZXfTjhQwAQ1DA7UJCVd2qci5Pm3Gj3BAejTZSr5b+RJvN0r0gdb/OKI HpDmY50Izf/oOKTjaSM3t46sECUqYoXk4p2G/vRJdedizLrD2UORBYngSRoOGfrE U2i01yV2eaX9DQ5XXr53FmajkrryoFePmnIv2vsUOfVW0uYzpiSjCtnvtnfPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUsyj7U067q4n+NbNN3sv173H3FWkwHwYDVR0j BBgwFoAUyCqArcvYNvTY1eTpgIjD7LyvGNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzJhYjA2Mi04NzAzLTRkYTYtYWQ3Mi04MGQyNWFlOGJmNWYvMC9DODJBODBBRENC RDgzNkY0RDhENUU0RTk4MDg4QzNFQ0JDQUYxOEQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgyQTgwQURDQkQ4MzZGNEQ4RDVFNEU5ODA4OEMzRUNCQ0FG MThENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjMmFiMDYyLTg3MDMtNGRhNi1h ZDcyLTgwZDI1YWU4YmY1Zi8wLzMyMzQzMDM2M2EzMjMxNjMzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMDM0MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGIcAwDQYJKoZI hvcNAQELBQADggEBAK8VHBzOYD+2TE2ImDE4MBpDFsR7JZotPmoEsglzt5b4ijuw rpFMUYy8ctdQWsqvl/Mny5bYPehopuj2aOpD5SMfjrJ+i1VpPirFtag+EdkyaM6Y KUFCtOOurqeHcTQfLQsu/UbcnU4+e+figBhU9ZWOmk20w9S0fWHojkJSNx3fnTvC GIfx4ddSTvQAsAQ0FpVHLgG6dYhXtaPsgJEKybmP+dkyqThszaKlWHgFmur/FM3V OvFLvNXpUymsTztWL7rXfstny7PQJ2bZUU+QwCNoHOrjXF9LN2D2GJa3E8X7s4s7 XBG/BLX5LgJqi/TrW/juO1WtFrFZr78aU8+4ui0= -----END CERTIFICATE-----Generated at Fri Dec 19 12:24:39 2025 by rpki-client