This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030333a3a2f34382d3438203d3e203233363739.roa File: 323430313a323930303a383030333a3a2f34382d3438203d3e203233363739.roa (raw, json) Hash identifier: ZPQJWqTmzJiRoB+v0w5R11w2MUO06CuxEIUoyZwZukw= Subject key identifier: FD:5A:CA:F0:A1:F8:88:1E:21:17:82:98:E7:BD:72:06:46:96:49:66 Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Certificate serial: 0B22DA65582085903965837303562B62A59B2C48 Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030333a3a2f34382d3438203d3e203233363739.roa Signing time: Wed 03 Dec 2025 04:01:47 +0000 ROA not before: Wed 03 Dec 2025 03:56:47 +0000 ROA not after: Wed 02 Dec 2026 04:01:47 +0000 asID: 23679 IP address blocks: 2401:2900:8003::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:22:da:65:58:20:85:90:39:65:83:73:03:56:2b:62:a5:9b:2c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984 Validity Not Before: Dec 3 03:56:47 2025 GMT Not After : Dec 2 04:01:47 2026 GMT Subject: CN=FD5ACAF0A1F8881E21178298E7BD720646964966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6b:15:c0:0e:2f:1a:f9:5a:33:2a:08:e5:2c: 54:a5:55:ac:54:d8:25:8c:e2:ff:98:3b:03:2f:bd: 4e:c6:46:d1:e2:1a:8e:4c:3e:30:db:d0:97:16:28: 36:c0:f8:3c:58:0c:19:3c:30:fe:48:d0:80:65:ab: 68:4b:f5:c9:7d:d8:76:3f:5e:21:65:8a:fb:d1:95: bb:02:32:91:bd:43:2b:4c:1c:40:8d:02:f5:14:5f: 2a:fd:cb:5c:45:56:3e:09:0d:35:49:a7:d7:97:bc: e8:2e:0c:06:16:6b:eb:3c:1d:14:e1:e7:08:7a:e7: 0d:aa:e5:e2:f4:0c:88:98:4d:1c:9f:ed:05:fd:2b: 87:fb:73:49:cc:81:72:5b:fd:72:5a:71:34:81:98: da:d9:29:f9:c5:c9:f0:c2:fc:34:61:4e:0b:7c:3c: ad:6e:65:b8:e9:12:3e:09:c7:57:6b:7e:12:e6:84: 85:fc:d8:19:28:22:f9:c7:bb:3c:70:ce:f9:0c:dc: e0:dc:75:0b:0b:24:e3:d6:40:b1:a9:64:2f:6c:f4: 33:b7:04:34:df:f1:7c:f1:5c:7b:7c:fa:01:55:48: 78:11:1e:6d:de:bb:a4:de:08:4f:4a:1a:bd:d0:c1: c2:cd:90:f2:c9:bc:c2:37:59:62:62:73:99:5b:a1: 12:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5A:CA:F0:A1:F8:88:1E:21:17:82:98:E7:BD:72:06:46:96:49:66 X509v3 Authority Key Identifier: keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383030333a3a2f34382d3438203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:2900:8003::/48 Signature Algorithm: sha256WithRSAEncryption 30:f0:3a:ec:11:5e:17:8a:4a:03:c5:a3:82:d7:6f:6f:d8:bd: 52:6b:d1:60:a3:49:7f:e3:f1:22:c2:20:9c:9b:de:19:8d:9f: e1:ae:70:75:a7:cf:82:09:94:c6:3d:ab:bb:29:71:ee:87:a5: 54:92:3e:0e:e2:83:60:f5:5e:5a:64:52:97:1c:55:5c:2c:cf: c9:20:57:df:e3:6a:3a:a5:0b:0b:0b:02:79:81:94:1d:52:13: 1b:aa:dc:54:ce:21:80:5b:b4:87:c2:84:39:8c:c8:77:05:c0: 6a:45:ce:07:5f:ec:3d:f5:c9:85:fe:e7:88:87:cb:4d:d0:4d: 7d:13:91:eb:04:34:06:7a:48:cf:f8:0e:19:f3:35:78:71:95: ae:4a:e8:e5:a5:1d:53:2c:28:3d:92:38:28:70:61:fc:ad:06: 30:61:7b:94:e1:c0:b3:14:39:ce:1c:b0:13:30:2e:38:ff:62: 29:fa:4c:42:3b:f5:21:fe:bc:49:3a:82:da:a6:2b:38:c5:c4: 5f:bf:75:9a:ea:e6:7b:42:ea:8d:a4:89:25:b7:8e:6e:bd:7a: 42:26:6b:d5:46:f0:78:01:83:5a:60:14:64:fc:a1:e6:e4:00: 46:2f:2c:2d:1b:ae:9c:24:c1:7e:5a:a1:07:c4:45:b1:b5:e5: 84:a6:88:7d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCyLaZVgghZA5ZYNzA1YrYqWbLEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0 RkE2Njk4NDAeFw0yNTEyMDMwMzU2NDdaFw0yNjEyMDIwNDAxNDdaMDMxMTAvBgNV BAMTKEZENUFDQUYwQTFGODg4MUUyMTE3ODI5OEU3QkQ3MjA2NDY5NjQ5NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaxXADi8a+VozKgjlLFSlVaxU 2CWM4v+YOwMvvU7GRtHiGo5MPjDb0JcWKDbA+DxYDBk8MP5I0IBlq2hL9cl92HY/ XiFlivvRlbsCMpG9QytMHECNAvUUXyr9y1xFVj4JDTVJp9eXvOguDAYWa+s8HRTh 5wh65w2q5eL0DIiYTRyf7QX9K4f7c0nMgXJb/XJacTSBmNrZKfnFyfDC/DRhTgt8 PK1uZbjpEj4Jx1drfhLmhIX82BkoIvnHuzxwzvkM3ODcdQsLJOPWQLGpZC9s9DO3 BDTf8XzxXHt8+gFVSHgRHm3eu6TeCE9KGr3QwcLNkPLJvMI3WWJic5lboRKlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/VrK8KH4iB4hF4KY571yBkaWSWYwHwYDVR0j BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2 Njk4NC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMyMzQzMDMxM2EzMjM5MzAzMDNhMzgzMDMwMzMz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAEp AIADMA0GCSqGSIb3DQEBCwUAA4IBAQAw8DrsEV4XikoDxaOC129v2L1Sa9Fgo0l/ 4/EiwiCcm94ZjZ/hrnB1p8+CCZTGPau7KXHuh6VUkj4O4oNg9V5aZFKXHFVcLM/J IFff42o6pQsLCwJ5gZQdUhMbqtxUziGAW7SHwoQ5jMh3BcBqRc4HX+w99cmF/ueI h8tN0E19E5HrBDQGekjP+A4Z8zV4cZWuSujlpR1TLCg9kjgocGH8rQYwYXuU4cCz FDnOHLATMC44/2Ip+kxCO/Uh/rxJOoLapis4xcRfv3Wa6uZ7QuqNpIklt45uvXpC JmvVRvB4AYNaYBRk/KHm5ABGLywtG66cJMF+WqEHxEWxteWEpoh9 -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:54 2025 by rpki-client