This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
File: 323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa (raw, json)
Hash identifier: e44E7s4PRD9CCUk2jY7ZZ7l5t8KM/OqUwkHUrfkkOcg=
Subject key identifier: 61:61:DD:E6:F9:49:7B:05:3D:14:41:06:66:0D:0A:FE:B1:AE:43:22
Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial: 2F3B55471AE6BF794F72EA4ADF343E27828A3193
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
Signing time: Mon 19 Jan 2026 04:38:00 +0000
ROA not before: Mon 19 Jan 2026 04:33:00 +0000
ROA not after: Mon 18 Jan 2027 04:38:00 +0000
asID: 55695
IP address blocks: 2405:2d40:92::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 22:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3b:55:47:1a:e6:bf:79:4f:72:ea:4a:df:34:3e:27:82:8a:31:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Validity
Not Before: Jan 19 04:33:00 2026 GMT
Not After : Jan 18 04:38:00 2027 GMT
Subject: CN=6161DDE6F9497B053D144106660D0AFEB1AE4322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:f6:3e:8f:62:0e:78:ee:c1:06:f7:dd:99:
40:c1:10:d3:08:57:28:eb:8e:6f:d1:99:5b:a8:b4:
a7:44:24:4a:de:55:91:9a:91:53:1b:63:e1:f8:cb:
9d:e6:85:a9:fd:c4:c7:26:f1:cd:fb:ae:ab:e6:68:
fd:c5:7d:e1:65:da:d1:eb:c1:98:df:92:37:de:0d:
28:eb:3a:d1:52:d7:29:34:92:f5:92:cc:b9:0d:c2:
66:af:41:19:06:6b:a6:da:5b:e1:dd:74:72:19:f8:
68:8b:57:12:2b:cc:fb:e5:6e:e9:f4:75:04:76:6a:
fb:d1:18:54:6d:a5:c5:1c:98:d4:59:d0:17:05:cd:
a2:f3:f8:f9:37:9c:e2:93:23:a5:e6:7a:de:56:f8:
95:4c:fd:16:dd:89:55:e5:18:75:3a:8b:12:ac:69:
2e:94:6a:0a:2d:aa:34:a6:07:ab:90:3d:50:0d:bc:
2c:29:c9:cb:aa:52:af:90:34:b8:be:3a:80:bb:27:
0a:7f:22:6c:f0:b0:4a:8c:18:8c:db:39:37:ae:ba:
74:46:75:3d:d6:6a:6e:92:17:b4:00:04:9f:ab:14:
05:2a:02:6a:82:16:35:2c:1b:67:a4:78:cf:c3:f1:
68:af:cb:5a:f7:4c:84:15:83:b6:d0:da:e1:05:b7:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:DD:E6:F9:49:7B:05:3D:14:41:06:66:0D:0A:FE:B1:AE:43:22
X509v3 Authority Key Identifier:
keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/323430353a326434303a39323a3a2f34382d3438203d3e203535363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:2d40:92::/48
Signature Algorithm: sha256WithRSAEncryption
1b:02:8a:69:a6:39:db:78:82:b4:33:23:61:b0:8b:37:84:54:
87:c0:f2:ef:2a:53:af:e6:bf:1f:34:02:69:7c:ba:64:ed:4a:
6d:23:b2:15:b5:14:c2:96:3f:13:3b:aa:13:1a:fc:fa:f0:03:
08:c8:15:fa:90:3c:08:c8:69:fc:cb:14:98:9b:90:52:cd:64:
f8:63:ab:87:7b:f8:5a:28:96:c1:b3:64:a2:f4:47:b2:48:cb:
85:8f:df:51:c3:1f:0f:f1:18:72:6b:77:05:f0:58:c4:3f:79:
86:7e:5e:7c:e4:62:b1:8d:6a:a9:34:8e:c6:23:aa:84:f9:0f:
55:10:df:85:5e:3e:69:84:43:e8:79:7b:49:17:a4:b8:c5:d8:
07:3d:4f:7d:9f:02:91:1e:ec:b3:16:d5:53:d7:31:9b:7f:4f:
78:cd:b0:75:25:00:42:e6:0b:2e:00:09:5a:c9:5d:85:63:60:
ee:63:1c:4f:73:86:15:f9:f7:00:d4:59:4b:21:fa:ac:e8:c5:
b2:99:cb:f2:61:18:84:3b:fa:fe:80:b7:49:d6:c7:5c:98:3d:
fd:d1:e2:00:87:22:5b:17:94:8f:fc:95:12:b3:09:1f:31:e8:
51:76:01:c4:41:b2:bb:11:3a:6d:ad:62:3f:d5:3b:83:d1:c5:
f5:7a:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:04:30 2026 by rpki-client