This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
File: 323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier: hRlgNS+Mu12RZCqjT7TsU1XAD429XbK7+5ieayUIT9I=
Subject key identifier: 84:BA:D5:D7:05:37:F9:F3:DA:7F:68:51:E2:88:C5:B5:83:16:0C:C0
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 28569146C633CE351DD2A91F6F0288E2D72EF64A
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
Signing time: Fri 07 Nov 2025 13:00:02 +0000
ROA not before: Fri 07 Nov 2025 12:55:02 +0000
ROA not after: Fri 06 Nov 2026 13:00:02 +0000
asID: 58369
IP address blocks: 2403:fd80:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:56:91:46:c6:33:ce:35:1d:d2:a9:1f:6f:02:88:e2:d7:2e:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Nov 7 12:55:02 2025 GMT
Not After : Nov 6 13:00:02 2026 GMT
Subject: CN=84BAD5D70537F9F3DA7F6851E288C5B583160CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:89:bd:4f:81:c0:b3:a3:16:13:6c:f1:06:
bd:83:d4:e7:68:0e:88:d6:5c:46:0c:b1:14:ff:14:
e7:a5:b1:1c:6d:ab:28:24:49:ac:7c:c9:12:3c:91:
94:55:44:08:6a:a3:fa:63:96:36:51:e4:e6:5c:f1:
2a:da:88:18:7c:c1:0e:df:c1:a2:c7:42:60:a0:a7:
c6:20:41:f8:c3:16:76:8a:c4:15:3f:b7:87:b9:02:
59:76:e5:e7:e5:34:20:0a:a7:ee:6c:06:da:84:ca:
0f:dc:d0:ef:7a:7d:4b:8f:11:0f:39:d6:03:6b:bd:
d6:88:78:a4:e9:bf:94:5c:54:d9:e8:83:0b:a0:6a:
62:f3:0b:31:54:d8:59:10:11:1c:7e:f8:0c:fd:7b:
e3:e0:7b:fe:bd:73:50:8c:c4:c3:3a:06:f7:18:99:
52:3c:a9:0a:81:7b:ab:ae:16:65:3f:fa:4d:c6:22:
53:a1:9e:d9:d8:ff:cb:31:78:d5:29:32:03:0c:8f:
77:ac:68:57:81:14:28:2c:88:2b:bb:c4:20:53:dc:
6f:9b:05:ea:0b:73:dc:78:19:d9:c6:31:71:e9:46:
e3:91:99:be:ea:e9:93:a2:ce:49:bb:49:91:67:cf:
24:6e:97:61:c7:6f:d6:59:2c:17:65:75:33:26:0f:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:D5:D7:05:37:F9:F3:DA:7F:68:51:E2:88:C5:B5:83:16:0C:C0
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a613030303a3a2f33362d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80:a000::/36
Signature Algorithm: sha256WithRSAEncryption
75:f4:79:c7:f9:17:ca:dd:e2:de:dd:17:d3:f4:04:1f:b2:da:
63:9b:50:dc:e9:81:dc:ec:4c:20:0b:4c:ed:39:ad:80:f6:05:
80:5b:77:24:a5:c3:76:15:ac:c0:20:ea:7e:c6:cc:45:3e:cb:
82:b8:93:b1:c4:0a:6f:c1:0b:9f:94:df:97:02:48:3a:43:c9:
f0:94:63:fa:a0:d3:ba:9c:5f:10:2a:51:e9:2d:2d:5e:d2:73:
91:56:4c:7c:34:97:ca:08:c3:ed:9e:0d:05:21:3a:9e:c2:42:
c9:3d:e5:b6:b4:6b:27:e2:17:64:50:cd:8d:db:d0:04:d0:2f:
85:13:84:76:9c:15:fc:6d:df:97:df:dd:42:e0:c6:e7:b3:4a:
d9:f6:97:a8:06:4f:ac:12:cb:97:19:bd:0c:b4:58:0e:47:65:
c1:a2:3d:40:0f:d8:69:c5:8a:26:51:ae:62:d2:61:6f:e5:81:
02:d4:d8:6d:b2:9c:a9:d4:13:00:71:ba:47:52:f0:90:4c:ca:
d7:af:11:46:47:20:f7:6b:03:f0:d0:b4:63:49:16:5a:55:d1:
de:53:59:dc:fd:3a:79:bb:70:6f:dc:55:72:db:33:86:38:78:
99:f1:9f:11:e9:66:62:70:c0:07:a4:e6:96:2d:23:8a:9c:e6:
15:59:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:01:07 2025 by rpki-client