This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
File: 323430303a346130303a3a2f33322d3332203d3e2039333431.roa (raw, json)
Hash identifier: 2nPqLY6TCp8Q6jY9wuP2P09MZEEjGhSNH2p4ZMt87+8=
Subject key identifier: E6:81:C9:52:D9:F7:3D:3F:22:4B:20:EE:0C:3C:C7:09:9A:C4:D9:01
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 035B424FF067A747D16DBB50685E1FE652FF3ADF
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
Signing time: Fri 14 Nov 2025 07:03:04 +0000
ROA not before: Fri 14 Nov 2025 06:58:04 +0000
ROA not after: Fri 13 Nov 2026 07:03:04 +0000
asID: 9341
IP address blocks: 2400:4a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 11:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:42:4f:f0:67:a7:47:d1:6d:bb:50:68:5e:1f:e6:52:ff:3a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Nov 14 06:58:04 2025 GMT
Not After : Nov 13 07:03:04 2026 GMT
Subject: CN=E681C952D9F73D3F224B20EE0C3CC7099AC4D901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:2f:56:8a:ae:69:cb:4a:63:44:71:ba:c6:
2a:bb:f0:ee:a2:30:70:07:d0:fc:ee:43:16:0a:63:
79:16:3a:56:90:41:91:b1:d9:85:4b:7c:48:7f:3b:
3b:75:e7:93:bd:f0:06:09:29:2d:33:f4:49:d7:a9:
2c:be:91:e8:2a:9f:5c:bb:32:3e:79:35:8e:35:2c:
74:86:79:00:f0:1f:d2:bc:48:47:94:dd:e1:38:ec:
8d:7e:15:3c:5b:ab:fb:2b:71:d8:9c:58:6b:c5:11:
df:89:05:74:62:33:4c:3a:c6:13:1b:d0:29:e8:31:
83:39:eb:bd:0b:b8:a5:f3:da:ce:61:76:3d:da:c4:
75:e3:5e:a2:79:bc:8e:a5:30:eb:68:77:0b:fe:7c:
61:01:a4:51:32:35:83:6d:52:9c:91:dc:6e:59:07:
6d:9a:08:ff:29:ad:6c:b3:8a:45:82:3c:59:84:c8:
f8:c3:cf:e1:5f:4d:ff:60:3b:18:28:05:cf:0f:0c:
1b:75:f8:3c:65:51:20:d7:a6:cb:05:84:d1:a4:70:
44:81:8f:03:98:bc:42:2c:86:32:00:ee:cb:37:0c:
bc:05:cd:af:ad:91:c1:61:d1:b6:d5:b9:16:33:7d:
f0:f2:c6:df:33:ac:5f:2e:63:d0:ee:ab:58:c7:9d:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:81:C9:52:D9:F7:3D:3F:22:4B:20:EE:0C:3C:C7:09:9A:C4:D9:01
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/323430303a346130303a3a2f33322d3332203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
30:9e:5c:72:4f:95:53:1d:a2:a1:4c:b5:3a:02:9e:e3:6b:2b:
df:30:94:6f:02:77:38:f3:ad:97:97:e5:50:f8:90:4b:7f:ce:
b3:b3:e2:68:0e:79:bb:7b:d5:43:cc:b8:b5:81:3a:1a:d7:bb:
85:be:15:4d:cf:eb:ae:1c:75:dc:c9:fa:17:af:55:87:05:b5:
fb:8f:51:fc:ab:2d:be:14:96:aa:1f:4a:19:84:60:ab:59:90:
8e:91:fa:47:55:a6:85:81:58:cb:87:4b:a4:40:70:ea:51:59:
73:5d:c5:b1:05:a0:2a:1c:58:45:79:ad:1d:b8:93:a5:57:5b:
5b:05:1e:b0:c7:c8:3b:ae:6f:b8:42:a9:2f:99:c3:72:5d:a0:
5e:66:82:58:f3:ef:07:64:53:d9:a4:8a:4e:ec:e5:f4:08:df:
86:aa:db:be:6c:8e:d3:54:c1:83:be:a4:3b:c7:17:6d:b5:6a:
fc:1a:5e:74:f3:27:9a:77:ff:48:93:d3:fd:6d:5a:d5:42:ba:
9e:3f:d6:fa:42:56:1b:c0:b9:ba:ec:ef:39:83:b0:12:0f:db:
6b:16:57:00:26:2e:1b:f5:87:90:f8:13:94:15:84:17:d9:1f:
b6:bc:50:91:5b:a7:ff:d6:a5:6d:d7:40:d4:3f:56:72:9e:72:
d7:52:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:50:39 2025 by rpki-client