This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa File: 323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa (raw, json) Hash identifier: JWPEr+YEE2hs7W3kAhuyMCMsvTeskc1YUPV2w6TdwMs= Subject key identifier: C2:3A:B5:93:D9:D8:C2:B8:52:00:AD:5F:9A:94:A2:9B:DD:EC:F3:03 Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8 Certificate serial: 5AA070329AFB09A41E7A97501DEA67856B79A55E Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa Signing time: Fri 07 Nov 2025 13:00:01 +0000 ROA not before: Fri 07 Nov 2025 12:55:01 +0000 ROA not after: Fri 06 Nov 2026 13:00:01 +0000 asID: 58369 IP address blocks: 2403:fd80:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a0:70:32:9a:fb:09:a4:1e:7a:97:50:1d:ea:67:85:6b:79:a5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8 Validity Not Before: Nov 7 12:55:01 2025 GMT Not After : Nov 6 13:00:01 2026 GMT Subject: CN=C23AB593D9D8C2B85200AD5F9A94A29BDDECF303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:cc:ca:da:41:19:72:60:5b:1e:1d:69:97: 4f:dc:a5:66:21:fb:54:9b:bd:a1:0c:01:99:9f:63: b2:cf:72:30:6e:a4:f8:61:06:38:2b:e0:8a:a6:4b: 94:97:59:41:51:0b:a4:74:6a:c0:5a:3c:68:48:2e: f9:37:ab:72:34:38:a5:b1:1a:2d:bd:08:84:65:38: a5:52:22:25:80:b0:23:ef:e6:68:a1:40:66:ef:7f: b8:0c:ab:75:f7:7c:9d:0d:9d:15:80:1b:08:17:a7: 8d:29:bd:be:f4:9d:a2:ee:b4:f2:13:76:8b:3c:6b: 46:82:c8:74:ed:75:8a:d6:c7:64:d6:d4:90:c6:cf: 3e:25:b0:12:25:22:fd:b0:f0:c6:1c:cc:8a:af:02: 4e:95:e2:2f:d4:32:04:4f:c0:24:48:11:5d:d8:d6: 27:3a:dd:9c:51:4b:f8:63:52:0c:6c:d5:18:f2:63: 32:e4:a9:42:6c:96:96:f7:2b:f9:00:ff:fa:85:3a: 51:e0:a6:d3:7d:dc:7d:07:3f:b3:7b:3c:0e:02:a3: 02:8d:a1:62:c0:11:f6:a9:9c:42:d8:76:bf:97:71: 08:87:43:ed:2b:30:9b:f5:ae:1c:19:63:48:fb:66: a1:9e:47:42:31:d5:c7:bc:6e:25:21:c3:b9:45:24: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3A:B5:93:D9:D8:C2:B8:52:00:AD:5F:9A:94:A2:9B:DD:EC:F3:03 X509v3 Authority Key Identifier: keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a633030303a3a2f33362d3336203d3e203538333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:fd80:c000::/36 Signature Algorithm: sha256WithRSAEncryption 4c:7b:26:c0:e3:22:09:6c:33:1d:ad:76:d4:91:b4:54:88:80: ab:54:3c:a1:c7:9a:4c:d9:fe:d8:dc:21:a1:b4:80:f0:66:d2: 5f:83:7f:51:19:cb:99:94:44:31:b7:8f:3b:1c:1c:ec:eb:1a: 7b:2b:f0:17:65:3d:7f:e8:19:c4:e0:ad:13:4e:45:b4:0e:ca: fd:41:20:22:81:f9:39:89:21:f0:21:58:4c:fd:5f:b5:a0:31: 76:bd:40:22:b7:69:fe:63:9c:64:55:3f:7e:14:0f:94:10:b3: a0:fd:5c:89:88:aa:10:99:bd:ab:4f:a6:e8:17:f4:87:dd:96: 3d:8c:19:3f:d7:81:4a:fc:e0:68:2c:7e:1f:9f:67:0b:35:eb: 3b:80:db:e3:9a:ed:a8:4c:07:66:70:6e:ec:6e:e5:b3:22:24: ac:ab:2d:49:e5:62:6b:b6:83:ce:f7:b9:b2:28:c8:d5:bf:5b: 40:b4:98:69:a6:98:29:7f:7f:18:7a:2d:92:58:44:a6:21:dc: 62:45:ce:35:b5:6b:1c:4c:a7:50:c2:5a:4c:a4:1c:f9:6f:b8: 98:6c:1c:1a:f3:33:f1:ee:8c:ae:44:8f:0d:f5:5e:9f:db:a5: c2:ad:e1:fa:8e:84:28:13:f1:19:0d:6b:6d:06:2d:21:5e:b9: e8:2e:50:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqBwMpr7CaQeepdQHepnhWt5pV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE MjJEMDRCODAeFw0yNTExMDcxMjU1MDFaFw0yNjExMDYxMzAwMDFaMDMxMTAvBgNV BAMTKEMyM0FCNTkzRDlEOEMyQjg1MjAwQUQ1RjlBOTRBMjlCRERFQ0YzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3O8zK2kEZcmBbHh1pl0/cpWYh +1SbvaEMAZmfY7LPcjBupPhhBjgr4IqmS5SXWUFRC6R0asBaPGhILvk3q3I0OKWx Gi29CIRlOKVSIiWAsCPv5mihQGbvf7gMq3X3fJ0NnRWAGwgXp40pvb70naLutPIT dos8a0aCyHTtdYrWx2TW1JDGzz4lsBIlIv2w8MYczIqvAk6V4i/UMgRPwCRIEV3Y 1ic63ZxRS/hjUgxs1RjyYzLkqUJslpb3K/kA//qFOlHgptN93H0HP7N7PA4CowKN oWLAEfapnELYdr+XcQiHQ+0rMJv1rhwZY0j7ZqGeR0Ix1ce8biUhw7lFJItrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjq1k9nYwrhSAK1fmpSim93s8wMwHwYDVR0j BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4 MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE MDRCOC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h NWI1LWExNGVjNzM5YmY5OS8wLzMyMzQzMDMzM2E2NjY0MzgzMDNhNjMzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJAP9 gMAwDQYJKoZIhvcNAQELBQADggEBAEx7JsDjIglsMx2tdtSRtFSIgKtUPKHHmkzZ /tjcIaG0gPBm0l+Df1EZy5mURDG3jzscHOzrGnsr8BdlPX/oGcTgrRNORbQOyv1B ICKB+TmJIfAhWEz9X7WgMXa9QCK3af5jnGRVP34UD5QQs6D9XImIqhCZvatPpugX 9Ifdlj2MGT/XgUr84Ggsfh+fZws16zuA2+Oa7ahMB2Zwbuxu5bMiJKyrLUnlYmu2 g873ubIoyNW/W0C0mGmmmCl/fxh6LZJYRKYh3GJFzjW1axxMp1DCWkykHPlvuJhs HBrzM/HujK5Ejw31Xp/bpcKt4fqOhCgT8RkNa20GLSFeueguUPA= -----END CERTIFICATE-----Generated at Sun Dec 7 07:23:22 2025 by rpki-client