This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: EQ3tpkIgRtOjPRF6ogySCbVymNDN0UNWBCm36IHFLvw= Subject key identifier: D2:56:E2:DB:B9:2F:E3:26:F9:27:A8:A7:3D:5D:E9:33:0A:6F:50:78 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 491E64E668524C3C4249256D220FB5D974508B90 Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:00 +0000 ROA not before: Fri 12 Dec 2025 12:55:00 +0000 ROA not after: Fri 11 Dec 2026 13:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:7000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1e:64:e6:68:52:4c:3c:42:49:25:6d:22:0f:b5:d9:74:50:8b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:00 2025 GMT Not After : Dec 11 13:00:00 2026 GMT Subject: CN=D256E2DBB92FE326F927A8A73D5DE9330A6F5078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:3e:5b:a2:78:bc:18:c9:c9:3f:ee:df:52: cc:37:e1:cd:0d:a3:04:04:94:1b:16:a3:cd:24:80: 6e:fe:e7:38:20:8d:c6:5d:41:09:cc:10:eb:a0:c3: ef:0a:7c:47:13:12:20:71:92:49:d9:d2:0a:88:8e: bd:4d:e6:38:5f:f6:c1:83:57:45:93:49:36:86:cd: 71:06:33:62:20:d0:38:53:d8:00:56:f9:60:f0:9a: 0e:2b:f5:95:20:c7:a4:e8:7b:92:8d:3c:b8:b3:53: 3d:d2:5c:b7:61:2d:a7:36:dc:6c:2f:08:ce:0b:20: f6:53:6b:81:30:5c:f4:b0:a3:44:c8:8d:53:ca:e2: 1a:e8:a1:13:6b:b7:91:df:55:c8:95:68:c1:58:af: be:98:bf:37:e7:85:f2:2e:2c:aa:e8:13:c2:f0:87: 68:71:76:26:86:9f:94:2d:13:e4:1f:cc:c8:7d:62: 38:61:94:b7:27:90:48:93:c4:36:f9:83:7a:16:a9: d4:a0:df:a1:b7:52:fa:0e:85:74:68:f0:f5:81:db: bf:6d:58:5f:ea:af:c4:67:62:fb:c0:06:61:3a:5b: 47:c3:dc:56:d5:b1:3b:e1:e2:29:31:61:3e:9f:d8: 23:ed:e8:ac:93:58:c4:43:04:1c:5d:d9:03:2a:2b: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:56:E2:DB:B9:2F:E3:26:F9:27:A8:A7:3D:5D:E9:33:0A:6F:50:78 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a373030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:7000::/36 Signature Algorithm: sha256WithRSAEncryption 29:f3:a9:00:4e:f8:3a:a0:ae:04:ba:d3:b5:4c:2a:c7:da:ef: d2:9e:77:99:a8:82:c9:cd:7f:97:f9:69:bc:a9:4a:16:c8:04: d9:c9:13:8c:fb:7c:c7:d2:f7:bb:d8:32:bb:e0:8f:db:88:61: 1b:c1:2f:7b:82:56:82:0e:9b:16:91:e4:fe:b6:fc:10:7a:1b: 2f:fb:7f:ad:dc:7f:37:8e:91:91:10:c2:5c:0f:94:2b:d2:ea: a0:ad:70:f9:04:3c:ed:3d:5e:d6:b4:3f:3e:85:f2:6e:69:d7: 19:0e:b8:2b:9f:10:7f:90:9e:ed:dc:8a:df:85:fa:7f:de:d8: 58:e9:67:37:88:6f:05:1f:c2:66:93:f2:f9:0c:a0:5d:35:de: 53:6f:68:99:c8:c1:9e:0c:53:ee:65:ee:17:72:29:8a:42:11: 92:71:02:69:ae:7c:49:cd:e3:5e:7c:09:65:8a:44:81:2d:24: b5:90:ac:f4:1f:d8:a3:f7:e1:47:44:69:25:33:2b:97:e0:70: e5:bf:a7:d8:79:0c:3f:54:6e:af:09:8c:b0:a7:09:33:7d:69: 0f:e1:7c:85:de:95:c7:c4:11:cb:fe:6f:80:54:86:5b:e4:31: 38:f6:e3:b9:a5:48:eb:4b:3d:25:17:b0:8f:f9:94:9d:b6:d1: d5:c1:e7:14 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUSR5k5mhSTDxCSSVtIg+12XRQi5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDBaFw0yNjEyMTExMzAwMDBaMDMxMTAvBgNV BAMTKEQyNTZFMkRCQjkyRkUzMjZGOTI3QThBNzNENURFOTMzMEE2RjUwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRST5boni8GMnJP+7fUsw34c0N owQElBsWo80kgG7+5zggjcZdQQnMEOugw+8KfEcTEiBxkknZ0gqIjr1N5jhf9sGD V0WTSTaGzXEGM2Ig0DhT2ABW+WDwmg4r9ZUgx6Toe5KNPLizUz3SXLdhLac23Gwv CM4LIPZTa4EwXPSwo0TIjVPK4hrooRNrt5HfVciVaMFYr76YvzfnhfIuLKroE8Lw h2hxdiaGn5QtE+QfzMh9YjhhlLcnkEiTxDb5g3oWqdSg36G3UvoOhXRo8PWB279t WF/qr8RnYvvABmE6W0fD3FbVsTvh4ikxYT6f2CPt6KyTWMRDBBxd2QMqKxYNAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU0lbi27kv4yb5J6inPV3pMwpvUHgwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzczMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAcDANBgkqhkiG9w0BAQsFAAOCAQEAKfOpAE74OqCuBLrTtUwqx9rv0p53maiC yc1/l/lpvKlKFsgE2ckTjPt8x9L3u9gyu+CP24hhG8Eve4JWgg6bFpHk/rb8EHob L/t/rdx/N46RkRDCXA+UK9LqoK1w+QQ87T1e1rQ/PoXybmnXGQ64K58Qf5Ce7dyK 34X6f97YWOlnN4hvBR/CZpPy+QygXTXeU29omcjBngxT7mXuF3IpikIRknECaa58 Sc3jXnwJZYpEgS0ktZCs9B/Yo/fhR0RpJTMrl+Bw5b+n2HkMP1RurwmMsKcJM31p D+F8hd6Vx8QRy/5vgFSGW+QxOPbjuaVI60s9JRewj/mUnbbR1cHnFA== -----END CERTIFICATE-----Generated at Fri Dec 19 12:54:28 2025 by rpki-client