This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa File: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (raw, json) Hash identifier: 8WcP2WWEYHZ1TNae3+A3s6W018bl6aSTVI6LBUjwgfE= Subject key identifier: 37:1A:54:24:3D:D4:22:1D:00:BB:74:91:2E:3C:D0:0B:52:27:B8:1F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 3BFCAF91B2A916DD91A7CED9E51B2591554B9526 Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa Signing time: Mon 08 Dec 2025 09:01:22 +0000 ROA not before: Mon 08 Dec 2025 08:56:22 +0000 ROA not after: Mon 07 Dec 2026 09:01:22 +0000 asID: 138114 IP address blocks: 2001:df7:2f00::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 04:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fc:af:91:b2:a9:16:dd:91:a7:ce:d9:e5:1b:25:91:55:4b:95:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Dec 8 08:56:22 2025 GMT Not After : Dec 7 09:01:22 2026 GMT Subject: CN=371A54243DD4221D00BB74912E3CD00B5227B81F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:86:23:d2:b3:c5:62:8d:10:2d:2b:4a:f6:cd: 4e:9c:ad:ac:10:91:53:f0:a8:36:70:8a:30:18:88: ae:1b:7e:f8:52:3e:91:d7:88:16:39:f1:3f:c9:7c: 04:4b:e3:a7:7a:8f:d6:ad:1d:7e:03:47:7e:61:c6: 88:2a:ef:c1:b8:c7:bc:b6:82:98:23:74:e1:63:99: 7d:11:6a:de:48:e5:bc:81:e9:82:1b:23:34:24:74: 6c:72:72:96:33:7e:46:72:42:da:b9:f4:71:d6:ff: 64:de:7c:bf:f5:4d:89:6e:30:aa:63:1b:b6:23:5d: 27:68:11:ae:34:c2:ec:27:59:20:c5:38:e6:57:6c: bf:0c:93:a7:14:65:e2:78:b0:60:5b:4d:1d:c9:16: 0d:ad:97:54:9c:76:0f:90:81:7e:d9:f7:05:de:6c: 61:70:e7:7f:4e:cb:86:24:f2:9e:b3:c4:10:0b:c5: a2:ab:f2:32:f0:41:f2:18:56:af:30:8d:da:11:11: 24:a6:8b:2e:d3:d5:92:fd:f7:39:a8:be:e0:2c:dc: 48:40:38:59:0f:d3:83:e9:93:44:12:d9:fa:b8:1b: a9:e8:b3:ff:82:19:6d:c2:8d:3f:18:b5:5f:d7:fe: 7a:a2:47:57:ea:0d:02:7d:f3:92:45:df:6e:fd:03: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1A:54:24:3D:D4:22:1D:00:BB:74:91:2E:3C:D0:0B:52:27:B8:1F X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df7:2f00::/48 Signature Algorithm: sha256WithRSAEncryption 47:77:1e:af:fe:ad:86:2f:b7:24:a5:a8:52:1a:ea:f6:35:45: bd:34:66:5b:bb:1d:33:7d:54:ff:56:bc:38:01:42:6b:72:e9: 6b:20:c1:b9:08:00:f1:9c:8a:99:d4:fe:9c:13:a1:e3:d4:fc: 30:a1:0d:90:1f:a0:44:ee:b8:a1:84:cc:c0:8b:0b:35:e2:27: 74:9b:2c:f1:0b:81:cf:cd:de:42:69:d4:f2:76:cd:7e:c0:a2: 57:af:d2:01:70:d1:29:f7:1b:40:4e:74:5e:8d:d6:64:09:4f: 71:19:92:2e:4e:b5:f7:09:b0:20:bb:ca:68:47:63:ae:20:9c: d8:6c:62:ad:ab:d1:c4:ca:57:6c:34:cc:c7:28:a9:a8:38:26: ef:75:9e:c0:77:81:0a:19:b4:e2:1a:69:ac:c7:d4:9d:62:65: 0c:c4:b5:97:08:c3:92:46:68:eb:73:c7:9a:b7:4f:cf:db:cc: 4a:68:22:70:59:99:10:da:1c:b7:ae:4c:08:ec:e7:85:1c:6b: 2c:32:c7:91:28:e5:8e:32:c5:7b:29:01:72:e6:37:8f:b8:29: 94:43:e7:56:20:4c:69:0d:3e:b3:4d:3d:12:76:3a:4e:b6:bc: 97:e2:34:4a:4e:b5:44:f7:1f:6a:e1:ef:35:38:86:3f:8d:e3: 93:31:c6:02 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUO/yvkbKpFt2Rp87Z5RslkVVLlSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTEyMDgwODU2MjJaFw0yNjEyMDcwOTAxMjJaMDMxMTAvBgNV BAMTKDM3MUE1NDI0M0RENDIyMUQwMEJCNzQ5MTJFM0NEMDBCNTIyN0I4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hiPSs8VijRAtK0r2zU6crawQ kVPwqDZwijAYiK4bfvhSPpHXiBY58T/JfARL46d6j9atHX4DR35hxogq78G4x7y2 gpgjdOFjmX0Rat5I5byB6YIbIzQkdGxycpYzfkZyQtq59HHW/2TefL/1TYluMKpj G7YjXSdoEa40wuwnWSDFOOZXbL8Mk6cUZeJ4sGBbTR3JFg2tl1Scdg+QgX7Z9wXe bGFw539Oy4Yk8p6zxBALxaKr8jLwQfIYVq8wjdoRESSmiy7T1ZL99zmovuAs3EhA OFkP04Ppk0QS2fq4G6nos/+CGW3CjT8YtV/X/nqiR1fqDQJ985JF3279A3jpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNxpUJD3UIh0Au3SRLjzQC1InuB8wHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzZDkyNjhiLTVlNjEtNDNiMi1h NjI0LTQxYjAxZDdkNzZiMi8wLzMyMzAzMDMxM2E2NDY2MzczYTMyNjYzMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM4MzEzMTM0LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 9y8AMA0GCSqGSIb3DQEBCwUAA4IBAQBHdx6v/q2GL7ckpahSGur2NUW9NGZbux0z fVT/Vrw4AUJrculrIMG5CADxnIqZ1P6cE6Hj1PwwoQ2QH6BE7rihhMzAiws14id0 myzxC4HPzd5CadTyds1+wKJXr9IBcNEp9xtATnRejdZkCU9xGZIuTrX3CbAgu8po R2OuIJzYbGKtq9HEyldsNMzHKKmoOCbvdZ7Ad4EKGbTiGmmsx9SdYmUMxLWXCMOS Rmjrc8eat0/P28xKaCJwWZkQ2hy3rkwI7OeFHGssMseRKOWOMsV7KQFy5jePuCmU Q+dWIExpDT6zTT0SdjpOtryX4jRKTrVE9x9q4e81OIY/jeOTMcYC -----END CERTIFICATE-----Generated at Mon Jan 26 07:34:58 2026 by rpki-client