This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: 8IK00qD1mcZyUe31U0w/j0iWrFFsRvs3QsCBJPOq4NU=
Subject key identifier: 37:7A:33:F5:0B:D1:E4:EB:A2:18:39:04:BC:C5:DC:4B:97:AF:40:20
Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial: 082FDD8344872E14739F10E121A18DFF6FB1476E
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sun 30 Nov 2025 08:00:00 +0000
ROA not before: Sun 30 Nov 2025 07:55:00 +0000
ROA not after: Sun 29 Nov 2026 08:00:00 +0000
asID: 139972
IP address blocks: 2405:c440:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 10:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2f:dd:83:44:87:2e:14:73:9f:10:e1:21:a1:8d:ff:6f:b1:47:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
Validity
Not Before: Nov 30 07:55:00 2025 GMT
Not After : Nov 29 08:00:00 2026 GMT
Subject: CN=377A33F50BD1E4EBA2183904BCC5DC4B97AF4020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ad:71:60:07:c8:3f:99:b3:5a:a2:ca:22:8f:
f2:14:d3:a3:62:ba:bf:56:3a:03:ae:6c:45:b6:a3:
8d:41:d8:a5:57:d4:18:d0:c0:02:4c:98:b9:c7:ba:
30:be:c2:3b:e7:b2:9f:16:3d:0c:bf:25:ed:0e:ec:
74:83:4a:95:99:fc:cb:f2:b4:dd:db:b5:52:c0:1e:
e4:ec:7a:29:c9:6c:e3:f4:1e:f2:06:b7:06:5c:24:
56:d8:b7:da:2a:69:f9:ba:de:de:07:79:bc:cf:98:
39:14:7d:1c:e6:c3:51:99:2e:83:74:d9:07:9b:13:
0c:18:ce:f7:bd:72:f3:98:9d:84:9a:a8:66:18:50:
0f:56:45:4f:ca:d8:f8:1e:43:96:f2:f5:58:83:c1:
64:2b:05:61:de:fb:6d:74:fc:05:4c:92:9d:c4:f2:
27:e8:90:d6:a6:21:27:a3:5e:85:e5:70:31:76:5b:
c3:86:da:d9:8b:e8:51:14:21:9a:ef:5e:59:51:9a:
7a:31:76:54:d1:c1:70:ed:be:33:53:ca:62:70:8f:
af:68:5e:92:49:76:2f:ae:cc:da:5d:c0:09:9a:46:
0c:ad:61:f6:ff:6b:6e:ed:2b:0b:0a:27:b7:d9:2e:
6f:2b:97:c2:5b:f3:1f:ec:14:00:20:d6:3d:a2:7d:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7A:33:F5:0B:D1:E4:EB:A2:18:39:04:BC:C5:DC:4B:97:AF:40:20
X509v3 Authority Key Identifier:
keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a373a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:7::/48
Signature Algorithm: sha256WithRSAEncryption
3e:50:d1:37:12:6a:08:db:a1:5a:03:be:de:97:f5:cd:5c:82:
4a:ea:81:9f:5e:54:9e:02:c2:c4:cd:eb:30:3c:3f:42:e0:bb:
0d:13:e3:9e:fe:1f:99:3b:c7:9a:b8:45:92:f1:9c:99:0c:4e:
fc:00:a9:bb:7e:f7:5e:1b:12:39:c5:55:bc:21:a9:4b:a0:24:
09:ad:d5:03:27:e0:72:18:7e:57:1b:d8:23:91:67:59:58:f8:
39:fa:59:b0:2f:32:ac:1e:a2:5b:e8:88:5f:8b:13:07:b8:c3:
bf:9e:eb:4d:33:5e:bb:e4:36:5d:42:5d:86:52:bb:7d:fd:3d:
f5:72:f2:ac:ed:1c:60:71:98:e3:cb:36:9c:14:d0:6f:2c:80:
2b:05:a3:4c:8e:72:09:e8:98:da:db:7c:56:76:73:df:59:ae:
f8:8b:ba:5e:5f:8e:d0:d1:cd:45:5a:b0:6f:32:40:62:16:33:
58:73:c5:9a:91:50:ac:55:74:14:40:f1:bd:50:29:00:50:26:
bd:98:53:02:b7:d8:4a:90:77:4b:dd:ac:f6:5c:65:e6:9b:78:
8e:ae:a7:d6:b7:2a:42:72:10:73:a6:16:63:37:52:a8:43:2d:
ab:a3:c4:b6:62:22:e8:a3:79:ae:9d:19:8a:8d:2b:84:5d:6b:
78:a7:02:55
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUCC/dg0SHLhRznxDhIaGN/2+xR24wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD
NzhGOTBGOTAeFw0yNTExMzAwNzU1MDBaFw0yNjExMjkwODAwMDBaMDMxMTAvBgNV
BAMTKDM3N0EzM0Y1MEJEMUU0RUJBMjE4MzkwNEJDQzVEQzRCOTdBRjQwMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0rXFgB8g/mbNaosoij/IU06Ni
ur9WOgOubEW2o41B2KVX1BjQwAJMmLnHujC+wjvnsp8WPQy/Je0O7HSDSpWZ/Mvy
tN3btVLAHuTseinJbOP0HvIGtwZcJFbYt9oqafm63t4HebzPmDkUfRzmw1GZLoN0
2QebEwwYzve9cvOYnYSaqGYYUA9WRU/K2PgeQ5by9ViDwWQrBWHe+210/AVMkp3E
8ifokNamISejXoXlcDF2W8OG2tmL6FEUIZrvXllRmnoxdlTRwXDtvjNTymJwj69o
XpJJdi+uzNpdwAmaRgytYfb/a27tKwsKJ7fZLm8rl8Jb8x/sFAAg1j2ifeZDAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUN3oz9QvR5OuiGDkEvMXcS5evQCAwHwYDVR0j
BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2
NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG
OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04
MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzczYTNhMmYz
NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAcw
DQYJKoZIhvcNAQELBQADggEBAD5Q0TcSagjboVoDvt6X9c1cgkrqgZ9eVJ4CwsTN
6zA8P0Lguw0T457+H5k7x5q4RZLxnJkMTvwAqbt+914bEjnFVbwhqUugJAmt1QMn
4HIYflcb2CORZ1lY+Dn6WbAvMqweolvoiF+LEwe4w7+e600zXrvkNl1CXYZSu339
PfVy8qztHGBxmOPLNpwU0G8sgCsFo0yOcgnomNrbfFZ2c99ZrviLul5fjtDRzUVa
sG8yQGIWM1hzxZqRUKxVdBRA8b1QKQBQJr2YUwK32EqQd0vdrPZcZeabeI6up9a3
KkJyEHOmFmM3UqhDLaujxLZiIuijea6dGYqNK4Rda3inAlU=
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:55 2025 by rpki-client