This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa File: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (raw, json) Hash identifier: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4= Subject key identifier: 46:64:E5:75:A0:CE:55:6C:20:9C:45:25:7E:4C:97:61:76:30:4C:E8 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 31AAAA590D6073E9023FFB22780864FAC5CC795C Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa Signing time: Thu 06 Nov 2025 05:02:56 +0000 ROA not before: Thu 06 Nov 2025 04:57:56 +0000 ROA not after: Thu 05 Nov 2026 05:02:56 +0000 asID: 141898 IP address blocks: 2400:4be0::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:aa:aa:59:0d:60:73:e9:02:3f:fb:22:78:08:64:fa:c5:cc:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Nov 6 04:57:56 2025 GMT Not After : Nov 5 05:02:56 2026 GMT Subject: CN=4664E575A0CE556C209C45257E4C976176304CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2d:af:bf:d7:db:e7:10:a8:6c:1d:e9:f8:bd: 1c:61:a3:7b:7a:a4:96:b0:83:b2:5c:39:da:62:37: ba:0f:0b:cd:d2:b1:d9:b7:68:4e:97:30:c1:f1:08: 9c:ad:82:52:25:ad:e1:6c:b4:fd:43:db:24:9b:66: ab:b7:13:f7:e5:79:4d:ae:ea:bf:8a:35:70:4a:22: c3:22:24:69:60:e4:55:ad:41:a6:c3:c8:81:4f:1b: cb:4b:13:e1:69:8c:de:71:20:b1:ed:ae:fb:bd:b1: ba:65:68:c3:43:ad:b8:4e:89:9b:ff:7e:5e:5a:63: 7e:7e:f6:13:b5:94:5f:46:be:f6:7a:40:ec:84:ba: 32:e2:e8:0e:b4:fb:f9:67:d0:91:fa:0d:52:ea:5b: 21:8a:57:1f:ab:8a:6c:1a:1b:72:5f:43:b2:68:a3: 83:c3:c4:6d:3c:ea:bb:01:f3:34:9a:24:fc:1f:47: 98:1d:23:ac:e0:ff:10:c8:3d:16:22:5a:65:80:06: 66:55:f9:16:9d:c0:58:07:34:e3:64:d3:07:12:0c: 8e:63:c6:e9:a3:6f:53:1a:84:71:e8:eb:06:89:06: 0c:51:63:35:5f:73:02:2f:4f:2b:2a:00:ab:fa:ea: 30:42:89:5d:71:ce:91:68:9c:10:b5:a9:0a:ba:b0: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:E5:75:A0:CE:55:6C:20:9C:45:25:7E:4C:97:61:76:30:4C:E8 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/323430303a346265303a3a2f33322d3438203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4be0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:01:85:a7:f5:b4:c3:00:11:74:2d:0d:cc:d4:d7:d3:fb:d1: 72:63:1c:91:da:e6:fc:f5:fe:a2:17:89:8f:25:21:e3:9d:9c: 06:b6:7d:a3:60:e1:17:ad:2e:47:64:c5:aa:f9:bc:1b:24:f5: c0:df:98:e0:d6:9b:ce:c1:b7:0e:77:90:a3:c4:39:f3:16:fd: 32:6c:cd:7b:e7:aa:5d:46:65:25:68:0b:e5:d3:de:c8:9a:5b: 6c:ce:e5:52:59:78:ea:ef:cd:fc:9d:b4:f3:52:61:84:ee:b5: 11:64:11:a0:49:d0:85:43:7b:9f:13:58:23:10:62:8f:20:97: 77:51:ce:11:97:bc:f7:da:2d:06:d3:7f:dc:d0:fa:87:dd:81: 3f:1f:41:1c:f5:a3:54:10:d9:62:53:c3:40:f9:f5:65:f7:6a: 82:ee:94:00:e9:51:07:36:7c:a8:d1:d3:34:e9:37:b1:52:c0: 1a:ed:d8:fb:d1:0b:62:83:3a:ad:5a:7f:35:80:40:dd:b6:e3: d3:99:9e:78:03:dd:ae:8c:21:2a:e4:e6:77:ee:d3:b5:9a:e4: b9:b4:3c:d2:83:64:b8:0d:a1:e7:90:66:60:ee:90:1a:13:cf: e6:e8:5c:dc:2b:3d:d6:66:2b:70:ae:65:30:c2:c6:4c:dc:22: a9:8d:fa:18 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUMaqqWQ1gc+kCP/sieAhk+sXMeVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTExMDYwNDU3NTZaFw0yNjExMDUwNTAyNTZaMDMxMTAvBgNV BAMTKDQ2NjRFNTc1QTBDRTU1NkMyMDlDNDUyNTdFNEM5NzYxNzYzMDRDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8La+/19vnEKhsHen4vRxho3t6 pJawg7JcOdpiN7oPC83Ssdm3aE6XMMHxCJytglIlreFstP1D2ySbZqu3E/fleU2u 6r+KNXBKIsMiJGlg5FWtQabDyIFPG8tLE+FpjN5xILHtrvu9sbplaMNDrbhOiZv/ fl5aY35+9hO1lF9GvvZ6QOyEujLi6A60+/ln0JH6DVLqWyGKVx+rimwaG3JfQ7Jo o4PDxG086rsB8zSaJPwfR5gdI6zg/xDIPRYiWmWABmZV+RadwFgHNONk0wcSDI5j xumjb1MahHHo6waJBgxRYzVfcwIvTysqAKv66jBCiV1xzpFonBC1qQq6sLbdAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQURmTldaDOVWwgnEUlfkyXYXYwTOgwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGZmODE5LTJiYWQtNDgzZC05 ZmE4LWI2ZWJjNDg0MDMxYS8wLzMyMzQzMDMwM2EzNDYyNjUzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMxMzQzMTM4MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQAS+AwDQYJKoZI hvcNAQELBQADggEBAD0Bhaf1tMMAEXQtDczU19P70XJjHJHa5vz1/qIXiY8lIeOd nAa2faNg4RetLkdkxar5vBsk9cDfmODWm87Btw53kKPEOfMW/TJszXvnql1GZSVo C+XT3siaW2zO5VJZeOrvzfydtPNSYYTutRFkEaBJ0IVDe58TWCMQYo8gl3dRzhGX vPfaLQbTf9zQ+ofdgT8fQRz1o1QQ2WJTw0D59WX3aoLulADpUQc2fKjR0zTpN7FS wBrt2PvRC2KDOq1afzWAQN2249OZnngD3a6MISrk5nfu07Wa5Lm0PNKDZLgNoeeQ ZmDukBoTz+boXNwrPdZmK3CuZTDCxkzcIqmN+hg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:34 2025 by rpki-client