This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa File: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (raw, json) Hash identifier: iw3Cyi1VQGI3NXc1Y1g7ynB6mTlTdwiAa9nkvlJ8yLw= Subject key identifier: 0A:37:90:3E:A9:60:18:4B:A7:7C:88:03:F2:25:49:E8:93:82:DB:04 Certificate issuer: /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Certificate serial: 4F290ED1FFE98903206B1DD9CF0942D756825F37 Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa Signing time: Fri 28 Nov 2025 04:02:50 +0000 ROA not before: Fri 28 Nov 2025 03:57:50 +0000 ROA not after: Fri 27 Nov 2026 04:02:50 +0000 asID: 58495 IP address blocks: 2405:9d40::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:29:0e:d1:ff:e9:89:03:20:6b:1d:d9:cf:09:42:d7:56:82:5f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962 Validity Not Before: Nov 28 03:57:50 2025 GMT Not After : Nov 27 04:02:50 2026 GMT Subject: CN=0A37903EA960184BA77C8803F22549E89382DB04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:01:2b:5e:3b:d5:da:c6:41:74:64:67:4d:b2: 63:ab:f8:38:ec:9a:18:d3:5e:ab:b1:74:40:7e:5f: 03:9e:39:51:26:03:10:8b:a8:20:15:f4:19:97:af: 6a:1b:fa:54:0b:c6:be:9c:ef:2f:55:22:67:be:df: 24:47:fe:c5:e5:e8:b0:fc:2c:8d:2c:8a:68:82:cc: 5c:bf:de:9a:57:e1:3d:e9:0b:a4:af:66:1e:94:65: d3:7f:22:37:02:d7:9d:ec:5f:e7:30:9b:30:de:8a: 35:7f:f4:0a:ef:75:2e:8b:d2:8a:6c:e8:05:db:db: d7:e2:a5:42:0e:4a:6f:c5:f2:ba:c9:90:d3:8e:09: 74:d4:0a:1b:53:72:ea:55:ed:fa:94:62:b9:65:6a: dc:9f:95:f3:30:22:2a:d0:a7:fa:6e:ce:41:a3:f9: 34:b7:91:ef:50:86:95:2b:71:54:5c:c4:bc:fd:3b: 83:60:a8:b8:1a:46:c5:5b:91:2e:59:ee:c4:14:36: de:03:57:ab:ac:f6:2a:07:14:5b:45:d1:19:45:fa: f4:39:9e:4d:ac:db:fc:a1:6c:2f:a6:79:b9:50:ce: 4a:30:2d:66:f5:aa:5f:f9:06:43:f1:a3:28:33:28: 4e:3e:93:e3:83:73:da:08:d9:c8:3c:43:f9:f6:8c: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:37:90:3E:A9:60:18:4B:A7:7C:88:03:F2:25:49:E8:93:82:DB:04 X509v3 Authority Key Identifier: keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/323430353a396434303a3a2f33322d3438203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:9d40::/32 Signature Algorithm: sha256WithRSAEncryption 49:30:98:a7:0a:3d:0b:a5:39:16:f0:95:ce:60:56:2a:ab:b2: 8e:ab:e1:b8:0d:14:2a:a5:b1:0c:e3:03:b2:25:20:b2:ac:f7: ea:90:0d:18:38:52:52:1c:8e:b8:05:b9:fa:76:98:f8:b9:af: 80:3c:33:d9:d5:8f:8a:77:1a:8d:2e:e1:14:67:0b:98:4d:0a: 73:b8:8b:17:50:e0:e3:53:6b:73:8a:8e:a9:c1:f6:e0:a0:6a: a1:bb:79:65:e7:a1:b6:42:bc:4b:7f:f3:b6:f1:f2:3b:ad:ed: d7:e2:93:bf:68:4c:63:8b:81:7c:39:37:f7:71:29:44:40:fd: b4:cb:24:e7:14:db:97:f2:7a:87:56:58:d2:37:97:f9:62:76: ff:ea:b7:f5:4a:e7:e6:c0:dc:b5:7f:91:f4:e7:df:f2:da:ce: c1:78:17:6f:3a:78:b7:ad:83:f6:84:5d:94:bd:0f:ab:4b:07: 55:71:a8:1b:03:1f:52:7b:c5:9c:df:79:5e:01:d5:f9:0c:93: af:9f:f9:b8:4f:89:5f:f9:c5:1d:84:48:79:46:7a:b0:cb:2b: 35:e7:3c:2f:7e:9f:6c:3d:b4:04:9d:31:05:cc:8e:3c:05:b5: 6b:0e:d3:09:37:6b:5a:8c:5b:83:e1:1d:54:d7:95:33:ae:06: ff:fb:4f:fb -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUTykO0f/piQMgax3ZzwlC11aCXzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMz MkY3NTk2MjAeFw0yNTExMjgwMzU3NTBaFw0yNjExMjcwNDAyNTBaMDMxMTAvBgNV BAMTKDBBMzc5MDNFQTk2MDE4NEJBNzdDODgwM0YyMjU0OUU4OTM4MkRCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ASteO9XaxkF0ZGdNsmOr+Djs mhjTXquxdEB+XwOeOVEmAxCLqCAV9BmXr2ob+lQLxr6c7y9VIme+3yRH/sXl6LD8 LI0simiCzFy/3ppX4T3pC6SvZh6UZdN/IjcC153sX+cwmzDeijV/9ArvdS6L0ops 6AXb29fipUIOSm/F8rrJkNOOCXTUChtTcupV7fqUYrllatyflfMwIirQp/puzkGj +TS3ke9QhpUrcVRcxLz9O4NgqLgaRsVbkS5Z7sQUNt4DV6us9ioHFFtF0RlF+vQ5 nk2s2/yhbC+meblQzkowLWb1ql/5BkPxoygzKE4+k+ODc9oI2cg8Q/n2jKh7AgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUCjeQPqlgGEunfIgD8iVJ6JOC2wQwHwYDVR0j BBgwFoAUwAVTFIjzhHXKU8tKerzsDDL3WWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDY0Y2JlZS1jNTEzLTQ2YzYtYTFkMC0zZWMwMWQ3YTY2MjYvMC9DMDA1NTMxNDg4 RjM4NDc1Q0E1M0NCNEE3QUJDRUMwQzMyRjc1OTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNTUzMTQ4OEYzODQ3NUNBNTNDQjRBN0FCQ0VDMEMzMkY3 NTk2Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NjRjYmVlLWM1MTMtNDZjNi1h MWQwLTNlYzAxZDdhNjYyNi8wLzMyMzQzMDM1M2EzOTY0MzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDM1MzgzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBZ1AMA0GCSqGSIb3 DQEBCwUAA4IBAQBJMJinCj0LpTkW8JXOYFYqq7KOq+G4DRQqpbEM4wOyJSCyrPfq kA0YOFJSHI64Bbn6dpj4ua+APDPZ1Y+KdxqNLuEUZwuYTQpzuIsXUODjU2tzio6p wfbgoGqhu3ll56G2QrxLf/O28fI7re3X4pO/aExji4F8OTf3cSlEQP20yyTnFNuX 8nqHVljSN5f5Ynb/6rf1SufmwNy1f5H059/y2s7BeBdvOni3rYP2hF2UvQ+rSwdV cagbAx9Se8Wc33leAdX5DJOvn/m4T4lf+cUdhEh5Rnqwyys15zwvfp9sPbQEnTEF zI48BbVrDtMJN2tajFuD4R1U15Uzrgb/+0/7 -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:11 2025 by rpki-client