This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa
File: 323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier: xhA/2CTOIWfVDpHM1NkVlpPmJHY6UZcMtq24fqHi4DE=
Subject key identifier: E0:F8:60:9B:E7:01:15:C5:ED:48:B0:1A:D6:36:83:07:F7:6B:AC:CB
Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial: 4D70E7F1EEF211DFB2B63A13C6B441B65E60A1DF
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa
Signing time: Mon 19 Jan 2026 04:40:18 +0000
ROA not before: Mon 19 Jan 2026 04:35:18 +0000
ROA not after: Mon 18 Jan 2027 04:40:18 +0000
asID: 55695
IP address blocks: 2405:2d40:65::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 22:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:70:e7:f1:ee:f2:11:df:b2:b6:3a:13:c6:b4:41:b6:5e:60:a1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Validity
Not Before: Jan 19 04:35:18 2026 GMT
Not After : Jan 18 04:40:18 2027 GMT
Subject: CN=E0F8609BE70115C5ED48B01AD6368307F76BACCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:4f:54:b5:fb:1e:ac:2f:5a:ad:03:28:94:
db:10:27:a4:e8:95:42:40:7f:93:16:a3:b2:96:5f:
b4:ed:19:b8:d5:7b:f9:b5:36:c3:64:8b:2b:cf:e7:
1a:e0:c3:42:c7:97:44:14:93:4d:61:59:12:26:46:
fa:fa:f7:8e:ec:41:c4:e9:b0:65:0b:df:ef:b6:a3:
67:86:13:35:fa:25:17:c0:60:d4:54:3c:5c:e0:63:
c1:e2:32:95:cf:50:c6:db:5c:b2:ad:14:aa:3f:2e:
18:52:62:5e:ef:71:59:d8:f6:8e:7b:a6:c5:70:91:
2c:d2:68:80:e6:75:b0:8f:ba:ed:e6:31:ff:ad:d4:
27:24:28:c8:cf:bc:49:0d:8f:d8:75:d6:e5:ca:cf:
75:8e:ff:53:1a:a4:f8:48:ab:bd:5d:4f:4a:a3:47:
77:1a:8a:9c:c3:fa:a2:88:f1:30:4c:28:4c:01:57:
14:e6:86:d7:28:98:aa:c6:5a:1d:a6:44:f3:a6:c5:
49:67:53:bb:61:7a:b0:95:aa:af:b3:05:28:a6:20:
33:21:19:6d:c9:ab:db:9c:88:2b:fb:df:97:9c:a2:
f9:f3:33:55:a1:c4:c2:f1:60:fd:1a:53:c0:ea:46:
19:d6:e5:c9:f1:4e:20:53:05:75:1b:f8:eb:48:a8:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F8:60:9B:E7:01:15:C5:ED:48:B0:1A:D6:36:83:07:F7:6B:AC:CB
X509v3 Authority Key Identifier:
keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a36353a3a2f34382d3438203d3e203535363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:2d40:65::/48
Signature Algorithm: sha256WithRSAEncryption
cd:7c:85:59:f4:a6:3f:39:bb:18:de:73:37:80:28:72:76:23:
e9:95:72:67:cd:63:98:fe:6a:e4:87:9c:b5:80:a4:e0:c2:93:
b1:62:c9:21:c2:5d:25:d6:5e:ef:37:19:52:ca:ce:88:ec:d6:
82:dc:40:e3:a1:98:4a:e2:23:46:74:6b:98:7f:bb:c5:d7:fa:
bc:06:c4:7c:39:bd:11:b0:09:a4:da:e9:0c:45:cf:6e:37:80:
30:e5:22:c9:c0:19:ef:ee:d5:db:ca:97:d0:71:f4:1d:d6:4f:
09:22:ce:6c:6d:42:f5:57:61:22:c5:43:91:f1:f7:2e:14:d2:
31:7d:91:94:b3:c8:bf:55:ee:22:b6:9b:dd:c0:50:e1:ad:29:
80:b4:2d:cf:bc:51:47:83:6c:46:82:b1:68:80:5f:26:d1:cd:
a4:17:2b:09:6a:92:e6:97:d0:a7:68:b9:65:b0:79:ce:cd:88:
7f:85:2c:83:94:d5:be:ab:7b:d0:f9:be:a0:6d:09:af:f2:bc:
d3:ce:19:fe:68:5f:2c:40:5e:66:bf:a8:37:f5:19:94:6f:4b:
a7:79:95:6b:70:61:21:c1:e9:b0:5f:f4:d8:36:41:69:4f:9e:
ab:6d:64:f8:f4:9b:54:ba:46:4e:d8:68:8d:b0:d1:02:78:d2:
3f:b1:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:04:36 2026 by rpki-client