This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa File: 323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa (raw, json) Hash identifier: gbaWHMYogVYHSsn2QDOr4CXrKUvLF5nUF0bmeD5zg3A= Subject key identifier: 17:A6:97:D7:A6:C6:B4:F9:EE:D1:9B:25:C2:B7:5A:91:1F:F9:A6:F0 Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9 Certificate serial: 029BFFD80E73365446AF4535BB73A210BFB804DF Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa Signing time: Sun 30 Nov 2025 10:00:01 +0000 ROA not before: Sun 30 Nov 2025 09:55:01 +0000 ROA not after: Sun 29 Nov 2026 10:00:01 +0000 asID: 139972 IP address blocks: 2405:c440:9::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9b:ff:d8:0e:73:36:54:46:af:45:35:bb:73:a2:10:bf:b8:04:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9 Validity Not Before: Nov 30 09:55:01 2025 GMT Not After : Nov 29 10:00:01 2026 GMT Subject: CN=17A697D7A6C6B4F9EED19B25C2B75A911FF9A6F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:8e:27:f2:7c:4f:e7:ab:38:ef:b5:40:08: 4b:20:ad:32:4d:bd:e8:8f:6b:99:0d:ba:44:62:31: 13:98:15:a5:ef:9b:d8:53:cf:27:67:5d:05:08:94: bd:8d:70:71:93:55:d6:d2:2f:fb:1f:87:9f:6e:ee: 88:90:ff:fc:c6:0a:34:de:e2:a6:6c:93:57:59:ee: f8:91:95:d4:74:73:5b:2f:51:1e:80:44:09:9a:2b: 24:67:f5:86:5d:ff:a6:a3:0d:56:c8:58:c8:ff:79: 47:44:b6:a4:a4:17:f8:da:10:b3:01:dc:66:56:5f: 53:4c:d4:8d:a3:46:ae:96:03:04:e6:58:d2:82:d5: d1:a0:80:55:9b:c5:34:e6:69:a4:eb:72:d5:c6:f6: 84:d9:0f:74:91:69:e5:01:94:b6:45:4b:5c:fc:55: 80:0d:64:5a:53:d3:54:37:e8:98:4f:50:71:de:03: de:46:67:82:2a:ed:0f:65:40:d4:88:11:24:5d:92: 37:b2:7e:87:12:f5:4e:02:98:7e:a6:4e:bd:b3:e8: 5a:3b:0c:c4:d2:df:43:46:4e:b0:6c:25:29:b1:c2: 46:77:b6:f7:94:76:1c:48:ba:48:ca:a6:60:3c:1f: 58:79:4f:ce:1d:93:a5:89:96:50:22:58:a6:1e:e5: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A6:97:D7:A6:C6:B4:F9:EE:D1:9B:25:C2:B7:5A:91:1F:F9:A6:F0 X509v3 Authority Key Identifier: keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a393a3a2f34382d3438203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:c440:9::/48 Signature Algorithm: sha256WithRSAEncryption a7:5e:67:4a:e2:fa:3c:54:91:f9:63:2e:bb:f8:85:fb:95:69: 8d:79:d6:77:be:f6:cb:75:a4:9c:66:d4:d3:41:63:b9:79:f6: 96:fd:54:14:6f:df:3d:68:78:55:df:9a:64:10:bf:1f:67:ba: d3:b6:94:a4:ac:da:05:0f:bc:12:ab:fb:da:a2:3d:87:3f:c1: 7c:63:66:90:ef:b7:f3:31:02:ee:89:76:6e:c8:ea:05:55:2d: 75:0a:40:71:1a:6f:b8:12:a5:6f:19:f5:55:a1:6c:b1:68:fb: 2c:06:cc:5a:e0:07:b1:d3:48:91:c6:3f:a2:28:bb:05:26:39: b6:b2:ae:68:a8:73:10:b7:91:da:de:0e:8e:f7:42:fb:eb:40: 95:a6:9c:b1:5b:52:dc:a6:ba:54:54:e1:c6:26:69:cf:13:2f: f7:2d:09:3c:5b:dd:83:5a:76:52:21:07:33:19:93:71:46:51: 7d:30:60:16:ec:b2:f2:fe:c2:18:df:6e:03:90:c9:31:05:61: 24:9f:33:99:c0:b0:be:87:4e:74:e4:13:4c:81:24:9a:2f:38: a1:1b:05:e1:6c:d0:47:d7:29:75:96:4c:c6:ee:a3:87:6d:59: 67:3b:f6:58:97:a7:10:cc:2d:eb:03:7f:23:4f:b6:0a:9f:9e: e8:6c:5e:e6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUApv/2A5zNlRGr0U1u3OiEL+4BN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD NzhGOTBGOTAeFw0yNTExMzAwOTU1MDFaFw0yNjExMjkxMDAwMDFaMDMxMTAvBgNV BAMTKDE3QTY5N0Q3QTZDNkI0RjlFRUQxOUIyNUMyQjc1QTkxMUZGOUE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7Y4n8nxP56s477VACEsgrTJN veiPa5kNukRiMROYFaXvm9hTzydnXQUIlL2NcHGTVdbSL/sfh59u7oiQ//zGCjTe 4qZsk1dZ7viRldR0c1svUR6ARAmaKyRn9YZd/6ajDVbIWMj/eUdEtqSkF/jaELMB 3GZWX1NM1I2jRq6WAwTmWNKC1dGggFWbxTTmaaTrctXG9oTZD3SRaeUBlLZFS1z8 VYANZFpT01Q36JhPUHHeA95GZ4Iq7Q9lQNSIESRdkjeyfocS9U4CmH6mTr2z6Fo7 DMTS30NGTrBsJSmxwkZ3tveUdhxIukjKpmA8H1h5T84dk6WJllAiWKYe5TNdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUF6aX16bGtPnu0ZslwrdakR/5pvAwHwYDVR0j BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2 NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04 MzExLWUwNTNmY2E1MGRmZC8wLzMyMzQzMDM1M2E2MzM0MzQzMDNhMzkzYTNhMmYz NDM4MmQzNDM4MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBcRAAAkw DQYJKoZIhvcNAQELBQADggEBAKdeZ0ri+jxUkfljLrv4hfuVaY151ne+9st1pJxm 1NNBY7l59pb9VBRv3z1oeFXfmmQQvx9nutO2lKSs2gUPvBKr+9qiPYc/wXxjZpDv t/MxAu6Jdm7I6gVVLXUKQHEab7gSpW8Z9VWhbLFo+ywGzFrgB7HTSJHGP6IouwUm ObayrmiocxC3kdreDo73QvvrQJWmnLFbUtymulRU4cYmac8TL/ctCTxb3YNadlIh BzMZk3FGUX0wYBbssvL+whjfbgOQyTEFYSSfM5nAsL6HTnTkE0yBJJovOKEbBeFs 0EfXKXWWTMbuo4dtWWc79liXpxDMLesDfyNPtgqfnuhsXuY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:49 2025 by rpki-client