This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e203535363736.roa File: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (raw, json) Hash identifier: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g= Subject key identifier: 3D:74:B8:91:2D:50:2F:60:43:D6:F8:0A:32:59:8C:9F:30:AE:01:11 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 6305FD900C0AEB7524B59D4DECEF7504731B81D2 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e203535363736.roa Signing time: Thu 04 Dec 2025 13:00:00 +0000 ROA not before: Thu 04 Dec 2025 12:55:00 +0000 ROA not after: Thu 03 Dec 2026 13:00:00 +0000 asID: 55676 IP address blocks: 2402:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:05:fd:90:0c:0a:eb:75:24:b5:9d:4d:ec:ef:75:04:73:1b:81:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Dec 4 12:55:00 2025 GMT Not After : Dec 3 13:00:00 2026 GMT Subject: CN=3D74B8912D502F6043D6F80A32598C9F30AE0111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:25:2f:79:bd:b5:ad:69:f0:34:ea:2d:4e: 89:16:0e:c6:9b:f5:db:6e:5e:90:bd:5c:8c:fb:f3: 31:63:df:8e:15:b8:f6:5a:8f:6b:50:04:91:e0:c1: e7:46:92:a4:27:0a:ab:2c:b3:72:0d:9b:dd:de:48: 6b:4b:77:b0:18:25:24:94:64:13:ee:03:6a:65:92: 08:51:e7:13:e4:ba:a7:a1:5d:f2:5a:fb:46:ff:bc: 81:e6:52:6f:05:e0:b4:6c:32:50:09:e5:e1:f4:eb: 24:ca:0c:95:65:c3:d1:9d:b1:80:0a:ee:b0:09:d7: 14:37:3b:55:11:1c:b4:cc:27:0e:9e:97:11:cd:93: d7:51:62:f8:76:b8:b6:30:be:22:42:76:9a:d5:bb: 84:8f:86:15:e0:f0:f2:1f:cf:1b:6b:5b:af:40:bf: ec:01:1b:f3:53:33:4d:e1:f2:61:cd:56:cb:dd:a8: 9e:c6:56:5f:93:28:56:0d:b8:f9:41:ff:89:73:32: 66:9b:08:f4:c7:8f:33:91:55:2c:7c:eb:17:c8:a8: 18:2b:39:73:63:89:94:99:c7:26:06:d8:69:84:c0: 4e:f4:ce:c1:ac:3e:8b:70:c4:85:69:cf:94:f1:e3: 14:3e:b7:37:d1:89:95:5c:5c:11:36:4d:2a:60:26: f4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:B8:91:2D:50:2F:60:43:D6:F8:0A:32:59:8C:9F:30:AE:01:11 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/323430323a326334303a3a2f34382d3438203d3e203535363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 33:31:a0:60:e6:ea:09:aa:d5:25:db:a0:d4:31:dd:70:12:d6: 14:c9:80:d5:79:fe:5d:e2:36:2a:ee:4a:57:ab:49:26:54:24: 31:22:79:c0:f8:e8:10:38:6b:14:41:ec:e1:85:64:64:d8:15: db:ba:dd:a6:58:73:d3:e0:15:56:57:72:56:8c:94:64:fb:0b: bc:ed:43:bd:6c:a8:05:b9:96:1b:8f:60:70:fa:fd:f7:14:59: 4d:97:55:52:68:ec:ea:e5:1e:bb:93:99:1c:e5:61:ea:7e:36: 07:a8:c8:51:31:37:af:83:4a:b4:9f:31:64:da:b1:49:c9:c3: 8d:11:53:1f:d5:41:25:ab:0b:b3:8b:53:fe:00:47:23:a5:09: d0:32:0f:69:85:19:de:59:b5:07:85:90:ff:ce:0d:4d:46:c2: 15:bb:e7:3e:0e:8c:65:4a:e5:8a:e6:c6:60:cd:12:a9:47:2c: 37:25:bb:0f:4e:f3:0c:ae:d4:ff:4d:92:11:c6:9a:75:bd:06: 68:b6:d2:f2:95:90:7a:3b:c3:e4:7c:66:52:0d:b5:46:f1:39: 3a:c6:05:32:4d:04:44:60:03:2a:56:91:ef:5f:a9:a4:36:d1: 2a:48:d7:07:3b:f1:0d:9a:ad:c1:ac:0d:4f:3f:a2:48:1b:d4: 73:8a:5d:5b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUYwX9kAwK63UktZ1N7O91BHMbgdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTEyMDQxMjU1MDBaFw0yNjEyMDMxMzAwMDBaMDMxMTAvBgNV BAMTKDNENzRCODkxMkQ1MDJGNjA0M0Q2RjgwQTMyNTk4QzlGMzBBRTAxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenyUveb21rWnwNOotTokWDsab 9dtuXpC9XIz78zFj344VuPZaj2tQBJHgwedGkqQnCqsss3INm93eSGtLd7AYJSSU ZBPuA2plkghR5xPkuqehXfJa+0b/vIHmUm8F4LRsMlAJ5eH06yTKDJVlw9GdsYAK 7rAJ1xQ3O1URHLTMJw6elxHNk9dRYvh2uLYwviJCdprVu4SPhhXg8PIfzxtrW69A v+wBG/NTM03h8mHNVsvdqJ7GVl+TKFYNuPlB/4lzMmabCPTHjzORVSx86xfIqBgr OXNjiZSZxyYG2GmEwE70zsGsPotwxIVpz5Tx4xQ+tzfRiZVcXBE2TSpgJvRXAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUPXS4kS1QL2BD1vgKMlmMnzCuAREwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3N2JjM2QyLTRhYjMtNGNmYi05 MjIyLTY2YzZlYTk0NDdlMy8wLzMyMzQzMDMyM2EzMjYzMzQzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDM1MzUzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAixAAAAwDQYJKoZI hvcNAQELBQADggEBADMxoGDm6gmq1SXboNQx3XAS1hTJgNV5/l3iNiruSlerSSZU JDEiecD46BA4axRB7OGFZGTYFdu63aZYc9PgFVZXclaMlGT7C7ztQ71sqAW5lhuP YHD6/fcUWU2XVVJo7OrlHruTmRzlYep+NgeoyFExN6+DSrSfMWTasUnJw40RUx/V QSWrC7OLU/4ARyOlCdAyD2mFGd5ZtQeFkP/ODU1GwhW75z4OjGVK5YrmxmDNEqlH LDcluw9O8wyu1P9NkhHGmnW9Bmi20vKVkHo7w+R8ZlINtUbxOTrGBTJNBERgAypW ke9fqaQ20SpI1wc78Q2arcGsDU8/okgb1HOKXVs= -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:57 2025 by rpki-client