This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa
File: 323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa (raw, json)
Hash identifier: IaP+9crAPYdusPNA+T0uigUeDuOaSTpSpzGs2yhRh/o=
Subject key identifier: FB:05:15:A1:07:04:11:7E:E4:7A:1B:A5:00:07:DC:8C:0E:28:19:8E
Certificate issuer: /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial: 47D866972967CDD639D2643DA15B5CB68004A955
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa
Signing time: Wed 03 Dec 2025 04:01:48 +0000
ROA not before: Wed 03 Dec 2025 03:56:48 +0000
ROA not after: Wed 02 Dec 2026 04:01:48 +0000
asID: 23679
IP address blocks: 2401:2900:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d8:66:97:29:67:cd:d6:39:d2:64:3d:a1:5b:5c:b6:80:04:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Validity
Not Before: Dec 3 03:56:48 2025 GMT
Not After : Dec 2 04:01:48 2026 GMT
Subject: CN=FB0515A10704117EE47A1BA50007DC8C0E28198E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:28:15:1a:28:56:67:f4:ff:57:7c:3f:e0:
7c:78:34:89:90:f8:dc:6a:46:16:8a:fe:40:1f:c4:
ee:67:cd:b4:16:fe:83:3e:1b:30:28:f7:0d:bd:56:
32:11:3a:ab:58:59:d4:21:93:1d:35:1f:71:6a:2d:
d8:a3:d3:57:82:b6:c5:85:c9:f4:28:b5:f1:c1:49:
19:b0:7e:1c:33:bf:72:8b:9a:c4:31:6d:68:dc:9f:
0d:65:a7:29:b8:0a:c2:74:bc:61:76:37:d0:60:50:
88:10:e1:be:59:da:97:d0:24:c8:3d:3a:42:3e:c5:
b2:56:50:d5:1b:73:00:59:cc:0c:11:a5:3e:bb:89:
fb:2a:10:81:2f:e9:82:06:4e:f8:91:3e:4f:aa:69:
6d:1f:9c:16:33:17:40:66:dc:ed:29:e2:67:29:ac:
9d:20:a0:aa:a7:2a:96:1d:17:ec:e8:90:24:be:21:
8f:31:77:3b:41:65:b6:e6:0b:39:4d:c3:87:d3:60:
1e:a7:d7:a0:31:5a:af:fe:0c:9f:15:65:dc:44:14:
7a:cb:57:d4:bc:ef:50:66:1c:1c:93:dd:f8:f2:60:
ea:49:16:c4:12:c4:38:1c:78:8e:76:40:3e:7f:b2:
51:02:37:56:5a:d8:af:f9:7b:c9:f7:3d:76:cb:e2:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:15:A1:07:04:11:7E:E4:7A:1B:A5:00:07:DC:8C:0E:28:19:8E
X509v3 Authority Key Identifier:
keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/323430313a323930303a383838383a3a2f34382d3438203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:2900:8888::/48
Signature Algorithm: sha256WithRSAEncryption
7a:48:bc:a7:cd:0a:8e:60:1d:8b:af:d2:86:df:8a:4b:bb:15:
dd:15:72:18:5e:1b:b8:f2:99:26:2a:a6:02:3f:00:77:9e:1a:
32:0d:5a:61:0e:b0:b1:3d:6c:70:1e:ad:7c:c5:e3:e8:c2:50:
a6:37:b4:8b:aa:70:7d:0e:00:ac:fa:67:9f:f4:a8:c6:92:2e:
5f:62:27:24:b5:7f:69:b4:73:39:41:00:c0:3c:82:dc:a1:6e:
ff:e6:32:c7:9e:37:20:d3:f2:26:a3:6f:52:cc:e7:ed:d6:f8:
a5:36:b6:b0:53:da:c2:3b:9f:df:53:d0:ca:68:67:60:8c:db:
31:6d:19:ef:5e:53:ee:68:7e:dd:57:a5:0e:cc:d4:e3:c0:6d:
63:2f:41:68:fa:26:1b:9e:98:3c:a9:29:0b:ba:33:68:f1:90:
c9:28:2b:18:59:4c:52:cd:7e:32:cc:cb:cb:c8:ac:78:36:87:
ea:f6:b1:14:df:3d:03:53:bd:44:9d:a3:6f:02:2c:a5:ab:3f:
2f:df:dc:c3:b0:5f:f0:90:00:4f:7d:59:06:38:fc:84:2b:aa:
b0:ef:00:52:a0:09:80:ad:c0:be:42:21:ba:88:0c:6d:8e:8a:
56:0f:94:5a:ce:7e:2d:cb:14:79:aa:a1:6d:6e:99:ca:0c:a7:
d1:56:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:13:34 2025 by rpki-client