This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa File: 323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa (raw, json) Hash identifier: PQat5U+b+2F8TUbM0TfEWCf1rYTowaZZ4esIP2eke+A= Subject key identifier: AF:65:CC:41:A3:85:23:D3:F1:DA:3D:79:F4:7F:56:DA:4D:DC:07:F8 Certificate issuer: /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Certificate serial: 2DC7C8F3777F20FBA9DAD74EF2163F500360C65D Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa Signing time: Fri 12 Dec 2025 13:00:00 +0000 ROA not before: Fri 12 Dec 2025 12:55:00 +0000 ROA not after: Fri 11 Dec 2026 13:00:00 +0000 asID: 140423 IP address blocks: 2406:20c0:8000::/36 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c7:c8:f3:77:7f:20:fb:a9:da:d7:4e:f2:16:3f:50:03:60:c6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874 Validity Not Before: Dec 12 12:55:00 2025 GMT Not After : Dec 11 13:00:00 2026 GMT Subject: CN=AF65CC41A38523D3F1DA3D79F47F56DA4DDC07F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:42:20:a8:c1:ea:b3:a9:10:3b:cc:c9:59:a9: d9:77:d2:c8:06:b7:01:aa:ea:f3:30:6c:e4:08:01: 4b:4d:ff:a7:58:58:12:03:86:59:a8:a9:f3:96:4e: 49:ab:52:20:d0:b5:9c:90:54:47:46:e7:cf:83:c2: d8:55:10:01:c3:cb:b3:c3:4a:7c:22:8c:12:88:ef: 8f:ea:a9:f6:54:6c:2a:bd:a4:7d:5b:ad:56:42:07: a0:7d:a5:1f:71:2b:0e:01:17:9d:67:b4:17:de:6f: 3d:0d:5d:6d:cf:b0:60:23:54:c2:2f:38:59:b0:26: 35:a7:ab:37:0e:51:51:0d:33:5d:38:6b:61:af:57: 95:29:61:fb:8e:62:95:8b:7c:4b:d3:d8:50:86:47: b9:11:8a:e3:93:e3:39:07:dc:76:4b:b0:35:8d:c7: 13:de:c1:0d:95:d5:be:0e:ff:86:42:64:84:ee:8d: 88:a2:a3:fd:56:08:12:35:97:66:58:2f:a6:9f:51: fb:d3:a4:4d:b0:7f:f2:ae:98:f8:22:a5:e5:53:7a: ff:48:67:dc:ac:9e:53:6d:23:23:5e:1f:29:d6:7b: cb:54:a5:48:55:d9:ab:ea:da:50:c4:56:2e:be:49: 11:76:ee:99:44:03:9d:03:4c:17:ba:93:af:74:a5: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:65:CC:41:A3:85:23:D3:F1:DA:3D:79:F4:7F:56:DA:4D:DC:07:F8 X509v3 Authority Key Identifier: keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a383030303a3a2f33362d3438203d3e20313430343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:20c0:8000::/36 Signature Algorithm: sha256WithRSAEncryption 75:5a:b0:87:11:29:f4:2f:25:61:41:bb:0a:2b:ab:76:ab:5e: 70:3d:9c:51:c7:84:58:db:e0:cc:e3:9e:b6:0e:cc:14:c0:5b: bb:b0:70:52:6d:4d:01:a7:27:f3:b7:af:39:ac:09:66:5d:08: dd:a2:99:72:70:ff:35:77:1f:c3:6e:7b:03:6e:01:f3:21:b7: 79:76:76:41:9e:30:1c:2f:ca:a0:7b:58:7b:3f:51:aa:31:fb: 2b:14:92:cc:da:0e:79:22:16:29:03:af:9a:e1:66:ac:79:2a: 5c:98:37:42:4d:91:92:5f:1c:a0:65:0d:9c:c3:7b:0d:68:f2: 9f:a5:43:5f:5e:ef:a5:51:b8:37:65:87:70:e7:55:4a:dc:b2: 31:dc:bd:ec:d8:2f:09:85:b7:49:ac:b0:be:b3:fa:48:b5:7a: f7:d6:58:d1:87:59:1f:06:6d:a5:b1:c2:d8:b1:a7:de:28:42: 80:9d:06:65:4d:f4:a9:82:f2:e6:85:ac:4d:e1:71:a0:80:b5: 47:fe:d5:d4:9b:c4:fc:87:5e:10:5b:99:42:7d:e2:38:e8:2f: b5:83:b1:69:26:0b:e6:16:c2:91:c0:25:fb:5b:bf:8f:58:16: 9a:cf:7c:fc:5a:db:e2:00:db:96:18:20:a2:f6:f8:59:73:3a: df:fd:39:19 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIULcfI83d/IPup2tdO8hY/UANgxl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz NTJDQjg3NDAeFw0yNTEyMTIxMjU1MDBaFw0yNjEyMTExMzAwMDBaMDMxMTAvBgNV BAMTKEFGNjVDQzQxQTM4NTIzRDNGMURBM0Q3OUY0N0Y1NkRBNEREQzA3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QiCoweqzqRA7zMlZqdl30sgG twGq6vMwbOQIAUtN/6dYWBIDhlmoqfOWTkmrUiDQtZyQVEdG58+DwthVEAHDy7PD SnwijBKI74/qqfZUbCq9pH1brVZCB6B9pR9xKw4BF51ntBfebz0NXW3PsGAjVMIv OFmwJjWnqzcOUVENM104a2GvV5UpYfuOYpWLfEvT2FCGR7kRiuOT4zkH3HZLsDWN xxPewQ2V1b4O/4ZCZITujYiio/1WCBI1l2ZYL6afUfvTpE2wf/KumPgipeVTev9I Z9ysnlNtIyNeHynWe8tUpUhV2avq2lDEVi6+SRF27plEA50DTBe6k690paW7AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUr2XMQaOFI9Px2j159H9W2k3cB/gwHwYDVR0j BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04 OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhMzgzMDMwMzAz YTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMTM0MzAzNDMyMzMucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BiDAgDANBgkqhkiG9w0BAQsFAAOCAQEAdVqwhxEp9C8lYUG7CiurdqtecD2cUceE WNvgzOOetg7MFMBbu7BwUm1NAacn87evOawJZl0I3aKZcnD/NXcfw257A24B8yG3 eXZ2QZ4wHC/KoHtYez9RqjH7KxSSzNoOeSIWKQOvmuFmrHkqXJg3Qk2Rkl8coGUN nMN7DWjyn6VDX17vpVG4N2WHcOdVStyyMdy97NgvCYW3SaywvrP6SLV699ZY0YdZ HwZtpbHC2LGn3ihCgJ0GZU30qYLy5oWsTeFxoIC1R/7V1JvE/IdeEFuZQn3iOOgv tYOxaSYL5hbCkcAl+1u/j1gWms98/Frb4gDblhggovb4WXM63/05GQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:26:11 2025 by rpki-client