This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa File: 323430363a373534303a3a2f33322d3332203d3e20313431303637.roa (raw, json) Hash identifier: tGZJC6gHp+rBRUU+fviXr/Qmv6Fq3jy2euNYPnmiMt4= Subject key identifier: 40:3C:72:EA:BA:02:4F:7C:22:1D:84:29:B8:0D:2C:D0:AB:A7:F8:3D Certificate issuer: /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Certificate serial: 15DAEBC57BE1E9786F4906FFE73CD71049540A8D Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa Signing time: Fri 14 Nov 2025 15:00:02 +0000 ROA not before: Fri 14 Nov 2025 14:55:02 +0000 ROA not after: Fri 13 Nov 2026 15:00:02 +0000 asID: 141067 IP address blocks: 2406:7540::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:da:eb:c5:7b:e1:e9:78:6f:49:06:ff:e7:3c:d7:10:49:54:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC Validity Not Before: Nov 14 14:55:02 2025 GMT Not After : Nov 13 15:00:02 2026 GMT Subject: CN=403C72EABA024F7C221D8429B80D2CD0ABA7F83D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:68:26:a6:01:a8:e4:70:23:ad:bc:cb:a4: 8e:ce:ae:36:77:72:fb:67:99:09:b3:19:81:3c:98: 08:6d:88:dc:d9:65:3a:41:3d:3f:82:6e:6d:d9:75: 7b:d6:b9:a9:81:6e:1d:ab:f9:df:d4:0e:90:24:38: 5e:7c:1f:e5:5f:e5:ad:d4:6b:65:f5:5c:2b:67:25: f1:33:46:a2:ae:fb:6b:22:17:84:13:94:4e:62:0e: 93:8d:bd:40:a6:66:54:3f:e2:d2:17:e2:f2:e6:82: 2f:06:89:29:63:4c:b0:2b:90:f0:78:b1:a0:37:59: a8:cb:2d:68:ed:61:c5:a1:27:5b:03:f5:c3:5a:56: 3e:31:dc:9d:3f:2d:b0:c4:00:97:b0:99:56:87:08: 97:90:9c:a1:e5:d6:b4:a0:40:61:e4:b9:69:18:26: 3a:0a:cd:7b:09:15:05:74:30:74:db:d4:cd:f4:eb: d5:9d:19:fc:15:c9:37:14:88:78:f9:2a:38:4c:64: 2a:f2:8d:b1:4c:c6:a7:54:c6:cb:bb:26:04:59:f5: 53:87:52:08:b1:eb:b5:ce:1c:bf:75:90:b9:09:02: 11:22:25:95:8e:bf:3b:2f:86:4a:be:c7:33:6f:70: 56:2b:58:f1:aa:fa:3d:1a:9c:78:42:fa:4d:2f:6b: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:72:EA:BA:02:4F:7C:22:1D:84:29:B8:0D:2C:D0:AB:A7:F8:3D X509v3 Authority Key Identifier: keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/323430363a373534303a3a2f33322d3332203d3e20313431303637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:7540::/32 Signature Algorithm: sha256WithRSAEncryption 6e:9f:f7:8a:78:56:9a:ea:c5:6f:3e:5c:4d:43:c6:7e:d8:75: 3a:e7:66:27:58:95:cc:a6:3b:f8:03:de:e0:eb:b0:64:f9:6e: 5e:78:8b:5f:45:ac:89:f1:b8:4e:c0:f9:e1:aa:6e:d8:5a:a5: db:87:b4:66:67:b2:7a:73:0f:11:9e:21:b1:db:bf:c8:a1:f7: 7d:17:7e:5a:be:da:43:d8:58:3f:f2:0a:bc:20:19:43:a5:2e: 1a:a0:35:c6:12:79:da:b5:06:b4:b9:b1:ab:d4:8d:8f:7c:b3: 75:70:6b:ce:c7:a9:ad:b5:72:0e:6c:17:95:23:34:03:01:bb: 08:14:39:0b:26:e6:1c:06:38:60:2b:63:97:45:2a:ca:20:81: ac:1a:fe:e3:88:e7:45:96:38:11:93:6e:d3:c4:57:13:d0:fc: b7:18:7e:17:11:ce:d6:f7:d8:70:72:57:0e:64:e8:25:63:2c: b5:3b:17:9c:71:34:df:31:42:51:91:81:84:66:0e:c4:16:9c: 10:c7:c9:ef:2a:9f:b3:50:93:09:52:9f:bf:20:89:57:29:45: 35:3c:3d:9e:e0:30:6a:b0:e3:7e:70:4c:4e:73:0d:8e:e0:d9: 7d:3d:e5:7b:e6:e7:14:1a:39:f5:0e:fc:9f:b4:21:b5:9e:cd: 20:40:1c:0f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUFdrrxXvh6XhvSQb/5zzXEElUCo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZD NTdFOUJFQzAeFw0yNTExMTQxNDU1MDJaFw0yNjExMTMxNTAwMDJaMDMxMTAvBgNV BAMTKDQwM0M3MkVBQkEwMjRGN0MyMjFEODQyOUI4MEQyQ0QwQUJBN0Y4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+WgmpgGo5HAjrbzLpI7OrjZ3 cvtnmQmzGYE8mAhtiNzZZTpBPT+Cbm3ZdXvWuamBbh2r+d/UDpAkOF58H+Vf5a3U a2X1XCtnJfEzRqKu+2siF4QTlE5iDpONvUCmZlQ/4tIX4vLmgi8GiSljTLArkPB4 saA3WajLLWjtYcWhJ1sD9cNaVj4x3J0/LbDEAJewmVaHCJeQnKHl1rSgQGHkuWkY JjoKzXsJFQV0MHTb1M3069WdGfwVyTcUiHj5KjhMZCryjbFMxqdUxsu7JgRZ9VOH Ugix67XOHL91kLkJAhEiJZWOvzsvhkq+xzNvcFYrWPGq+j0anHhC+k0vay3hAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUQDxy6roCT3wiHYQpuA0s0Kun+D0wHwYDVR0j BBgwFoAUKLMFxmM2xDOrYBum8LNS5sV+m+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZlOWI1MS1iZDg3LTQ5MDUtOWJmNC1hODQ4YTQ0ZTViYTUvMC8yOEIzMDVDNjYz MzZDNDMzQUI2MDFCQTZGMEIzNTJFNkM1N0U5QkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZDNTdF OUJFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiNmU5YjUxLWJkODctNDkwNS05 YmY0LWE4NDhhNDRlNWJhNS8wLzMyMzQzMDM2M2EzNzM1MzQzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzQzMTMwMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQGdUAwDQYJKoZI hvcNAQELBQADggEBAG6f94p4VprqxW8+XE1Dxn7YdTrnZidYlcymO/gD3uDrsGT5 bl54i19FrInxuE7A+eGqbthapduHtGZnsnpzDxGeIbHbv8ih930Xflq+2kPYWD/y CrwgGUOlLhqgNcYSedq1BrS5savUjY98s3Vwa87Hqa21cg5sF5UjNAMBuwgUOQsm 5hwGOGArY5dFKsoggawa/uOI50WWOBGTbtPEVxPQ/LcYfhcRztb32HByVw5k6CVj LLU7F5xxNN8xQlGRgYRmDsQWnBDHye8qn7NQkwlSn78giVcpRTU8PZ7gMGqw435w TE5zDY7g2X095Xvm5xQaOfUO/J+0IbWezSBAHA8= -----END CERTIFICATE-----Generated at Sat Dec 6 17:48:59 2025 by rpki-client