This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: DAoksNdeqm4zq9OVQulk35VOaNyz03bL8VO+gSR443A= Subject key identifier: A2:49:1C:4A:56:1E:71:D9:34:D0:C8:91:C1:CC:18:52:05:59:E4:2E Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 498AA3289994E5CBE105EBCB723D3CE3B7278ED3 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 12:00:01 +0000 ROA not before: Fri 12 Dec 2025 11:55:01 +0000 ROA not after: Fri 11 Dec 2026 12:00:01 +0000 asID: 140423 IP address blocks: 2406:20c0:4000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:8a:a3:28:99:94:e5:cb:e1:05:eb:cb:72:3d:3c:e3:b7:27:8e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 11:55:01 2025 GMT Not After : Dec 11 12:00:01 2026 GMT Subject: CN=A2491C4A561E71D934D0C891C1CC18520559E42E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:a1:30:4b:f9:8d:c9:d8:23:d5:13:de:7b: 2a:d5:25:8c:f5:e3:bc:90:10:1b:22:7d:89:87:5a: 8a:08:31:02:ef:30:d7:67:bc:ee:8c:cf:9f:92:86: 06:c4:c1:d1:c7:08:85:e5:01:1c:48:b3:6e:fd:c5: 71:2a:ea:9e:3f:f8:a2:1e:4e:1d:93:de:f1:66:35: 05:e1:dc:c1:da:8a:a6:67:92:21:09:93:cc:ce:6f: 01:d3:d3:ae:2c:31:7c:f3:7b:a8:cc:f2:1b:c1:20: 4e:1e:33:43:a9:37:db:21:50:1a:a5:f5:96:55:4f: bb:2b:b5:d9:d9:40:e2:00:00:c1:4d:42:be:00:10: ea:82:6b:f3:50:c0:37:e4:ef:63:ce:92:f4:38:65: 63:f4:55:f6:bd:8f:f4:d3:71:60:3e:6d:95:9e:9d: f7:6d:75:d5:05:44:b7:63:21:cf:88:8e:a7:95:07: 9c:8d:d2:60:51:b0:93:21:cc:3e:0b:4f:f5:bd:20: a9:69:be:29:12:50:7d:77:6d:b3:2b:88:19:61:8b: eb:57:18:09:31:bf:e0:28:11:f3:c4:65:f8:7f:46: ca:88:4a:f6:14:a4:3e:cc:83:5d:6c:7c:d7:9f:36: 11:82:6a:e1:32:14:26:0b:e3:b1:12:80:4d:aa:e4: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:49:1C:4A:56:1E:71:D9:34:D0:C8:91:C1:CC:18:52:05:59:E4:2E X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 4f:f7:b6:54:47:5b:07:b2:ef:cc:b1:86:d2:71:e6:77:35:bf: 3b:83:91:30:bc:0b:b6:a0:b9:e3:4d:3e:60:25:90:86:07:ac: 30:8c:95:7e:22:c2:f8:f4:b7:a0:b6:b4:91:fb:ea:4f:83:cd: 43:e9:d3:b8:a5:40:54:6e:3a:5f:cd:14:0e:c6:06:16:63:32: ea:f5:87:e9:b0:7d:ef:73:66:b9:f5:4d:32:43:ed:23:04:12: 1b:bc:85:30:6b:3d:6d:42:87:e9:91:52:83:d9:57:e2:c6:d6: 1f:f8:f6:57:de:c9:2e:f9:c0:c8:0b:04:8d:26:0b:b5:7c:36: 69:1d:83:c6:4e:00:f0:67:0a:e7:09:dd:b6:96:61:74:d1:33: 9b:63:30:28:6a:94:9d:45:43:a3:b4:61:fc:32:0d:49:93:ea: a4:74:02:78:61:09:6a:9e:63:3f:e8:2f:c3:8a:33:3a:5f:11: 4b:0c:35:e0:e3:bb:e7:fa:5e:ec:c4:0a:00:a0:0d:ec:6f:95: ac:d1:6d:7c:c1:96:ae:43:23:46:f4:ca:84:fc:d9:b8:dd:75: 25:d6:4a:79:6d:e8:82:ae:35:77:27:78:09:c3:18:e2:f8:55: 7e:3f:81:de:9e:86:2f:93:8c:21:8a:0a:0b:b3:c1:ec:87:e4: bb:42:4d:61 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUSYqjKJmU5cvhBevLcj0847cnjtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMTU1MDFaFw0yNjEyMTExMjAwMDFaMDMxMTAvBgNV BAMTKEEyNDkxQzRBNTYxRTcxRDkzNEQwQzg5MUMxQ0MxODUyMDU1OUU0MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4qEwS/mNydgj1RPeeyrVJYz1 47yQEBsifYmHWooIMQLvMNdnvO6Mz5+ShgbEwdHHCIXlARxIs279xXEq6p4/+KIe Th2T3vFmNQXh3MHaiqZnkiEJk8zObwHT064sMXzze6jM8hvBIE4eM0OpN9shUBql 9ZZVT7srtdnZQOIAAMFNQr4AEOqCa/NQwDfk72POkvQ4ZWP0Vfa9j/TTcWA+bZWe nfdtddUFRLdjIc+IjqeVB5yN0mBRsJMhzD4LT/W9IKlpvikSUH13bbMriBlhi+tX GAkxv+AoEfPEZfh/RsqISvYUpD7Mg11sfNefNhGCauEyFCYL47ESgE2q5DDlAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUokkcSlYecdk00MiRwcwYUgVZ5C4wHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzQzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAQDANBgkqhkiG9w0BAQsFAAOCAQEAT/e2VEdbB7LvzLGG0nHmdzW/O4ORMLwL tqC5400+YCWQhgesMIyVfiLC+PS3oLa0kfvqT4PNQ+nTuKVAVG46X80UDsYGFmMy 6vWH6bB973NmufVNMkPtIwQSG7yFMGs9bUKH6ZFSg9lX4sbWH/j2V97JLvnAyAsE jSYLtXw2aR2Dxk4A8GcK5wndtpZhdNEzm2MwKGqUnUVDo7Rh/DINSZPqpHQCeGEJ ap5jP+gvw4ozOl8RSww14OO75/pe7MQKAKAN7G+VrNFtfMGWrkMjRvTKhPzZuN11 JdZKeW3ogq41dyd4CcMY4vhVfj+B3p6GL5OMIYoKC7PB7Ifku0JNYQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:50:46 2025 by rpki-client