This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa File: 323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa (raw, json) Hash identifier: AM+aiplYUdhH8KU+dJBKvmqgp4vQ5YGIVFo2krKpct4= Subject key identifier: 74:6E:F2:A0:91:87:7E:DF:A6:57:47:62:1A:27:5F:6F:16:E8:06:F9 Certificate issuer: /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Certificate serial: 537655CE887002BEB52CA9F077B6C8ED6CEF7D7E Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa Signing time: Sun 30 Nov 2025 15:00:00 +0000 ROA not before: Sun 30 Nov 2025 14:55:00 +0000 ROA not after: Sun 29 Nov 2026 15:00:00 +0000 asID: 131749 IP address blocks: 2402:be80:d9ab::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:76:55:ce:88:70:02:be:b5:2c:a9:f0:77:b6:c8:ed:6c:ef:7d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF Validity Not Before: Nov 30 14:55:00 2025 GMT Not After : Nov 29 15:00:00 2026 GMT Subject: CN=746EF2A091877EDFA65747621A275F6F16E806F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:76:a0:fb:1e:33:91:d6:b7:7b:34:12:c0: 32:52:bf:5c:1a:e2:c0:10:e7:06:39:85:aa:d9:c1: 8c:88:1f:a7:53:a9:27:c2:0c:f2:ac:33:27:48:82: cd:bd:b3:ee:75:14:7a:fd:69:64:19:27:80:22:81: 8e:b5:40:7b:a5:c0:8d:7c:01:c0:1a:3f:e4:7b:c9: 0c:6c:94:0b:a3:9d:9f:86:d9:6b:34:4a:02:d6:bd: c1:06:91:99:75:07:4a:25:bd:b2:30:c3:41:c6:49: 9d:24:41:c3:b1:2a:e5:c9:b8:50:6d:cb:87:c6:eb: 23:5e:16:93:f0:9b:79:bf:1b:6c:6e:a0:95:2c:0a: bc:0b:05:cc:cb:85:e5:3b:2d:eb:66:f3:e4:a3:1e: b0:39:6e:03:ae:17:75:eb:91:e5:1c:6d:f6:b4:e9: f4:ac:c1:ca:fb:c0:c2:9e:54:46:36:22:ec:77:df: 5d:c5:da:88:73:75:48:b8:9c:47:ff:3c:69:ad:ef: 66:fc:95:4e:7f:99:89:57:8e:59:a8:4c:d2:9f:51: 69:bd:1f:c4:a4:05:25:7f:96:0d:37:69:68:57:ac: f8:76:c9:7d:28:e1:cb:ed:70:96:09:c8:18:93:db: 69:e9:df:da:9d:73:cd:1a:0a:97:dd:4f:6a:ae:64: 26:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6E:F2:A0:91:87:7E:DF:A6:57:47:62:1A:27:5F:6F:16:E8:06:F9 X509v3 Authority Key Identifier: keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/323430323a626538303a643961623a3a2f34382d3438203d3e20313331373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:be80:d9ab::/48 Signature Algorithm: sha256WithRSAEncryption 94:1f:76:b3:eb:42:29:49:9d:0b:0b:14:39:71:4f:de:b5:41: fa:8d:4d:c7:fc:fb:9d:33:f5:51:74:fa:ca:fe:ee:8f:bb:58: 69:e1:5b:f8:f9:35:05:e7:f9:fb:55:96:dd:28:3a:8b:5b:03: d2:d4:64:7f:df:eb:d4:6b:4e:6e:ed:9a:0c:e6:2f:e9:92:11: 77:71:ff:a5:ef:e0:02:e3:ed:25:3d:80:65:1c:98:c9:79:47: 18:20:87:46:5d:17:b2:42:52:b6:bd:e8:5c:b1:74:81:6f:5e: ee:da:fc:86:c3:c6:6a:f8:9b:45:5d:53:92:ff:b3:ce:a4:08: 48:2a:c6:d5:1f:56:e7:dc:23:67:41:78:ee:16:0d:ca:df:da: 8e:27:96:f6:68:1f:b8:ab:2d:fb:f4:4a:b1:bd:9f:57:2d:7c: 81:be:8c:e0:05:38:e7:db:28:3e:5d:a0:d8:d3:f3:e2:8d:76: 0a:41:b7:33:36:1b:b3:b6:a9:51:1a:b6:28:a7:eb:9e:e2:b3: ea:3f:01:51:f8:6b:1c:bb:20:65:06:2a:93:31:ec:44:9e:44: 97:0b:83:3c:4e:67:a8:04:58:3f:05:55:d9:3b:2d:8e:88:c8: bb:a7:c0:24:ae:65:3d:13:bb:2a:07:c3:71:2c:80:16:b6:17: 7c:df:3f:91 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUU3ZVzohwAr61LKnwd7bI7WzvfX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5 NTIyNDZGRjAeFw0yNTExMzAxNDU1MDBaFw0yNjExMjkxNTAwMDBaMDMxMTAvBgNV BAMTKDc0NkVGMkEwOTE4NzdFREZBNjU3NDc2MjFBMjc1RjZGMTZFODA2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjHag+x4zkda3ezQSwDJSv1wa 4sAQ5wY5harZwYyIH6dTqSfCDPKsMydIgs29s+51FHr9aWQZJ4AigY61QHulwI18 AcAaP+R7yQxslAujnZ+G2Ws0SgLWvcEGkZl1B0olvbIww0HGSZ0kQcOxKuXJuFBt y4fG6yNeFpPwm3m/G2xuoJUsCrwLBczLheU7Letm8+SjHrA5bgOuF3XrkeUcbfa0 6fSswcr7wMKeVEY2Iux3313F2ohzdUi4nEf/PGmt72b8lU5/mYlXjlmoTNKfUWm9 H8SkBSV/lg03aWhXrPh2yX0o4cvtcJYJyBiT22np39qdc80aCpfdT2quZCYnAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUdG7yoJGHft+mV0diGidfbxboBvkwHwYDVR0j BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy NDZGRi5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04 YTg1LWVjZmQxMmI5MTVmNS8wLzMyMzQzMDMyM2E2MjY1MzgzMDNhNjQzOTYxNjIz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNzM0Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk Ar6A2aswDQYJKoZIhvcNAQELBQADggEBAJQfdrPrQilJnQsLFDlxT961QfqNTcf8 +50z9VF0+sr+7o+7WGnhW/j5NQXn+ftVlt0oOotbA9LUZH/f69RrTm7tmgzmL+mS EXdx/6Xv4ALj7SU9gGUcmMl5Rxggh0ZdF7JCUra96FyxdIFvXu7a/IbDxmr4m0Vd U5L/s86kCEgqxtUfVufcI2dBeO4WDcrf2o4nlvZoH7irLfv0SrG9n1ctfIG+jOAF OOfbKD5doNjT8+KNdgpBtzM2G7O2qVEatiin657is+o/AVH4axy7IGUGKpMx7ESe RJcLgzxOZ6gEWD8FVdk7LY6IyLunwCSuZT0TuyoHw3EsgBa2F3zfP5E= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:40 2025 by rpki-client