This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
File: 323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa (raw, json)
Hash identifier: /naXUI1PFOv1rItDNLbEQT4MSqYrlC9O+26iNkvkvFM=
Subject key identifier: 3A:63:F7:C4:2F:9F:09:10:2D:CE:F1:9F:64:1C:61:8D:04:30:D0:DA
Certificate issuer: /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial: 1FF6F82A414E04340353CE5D5002E7E17BBCA28C
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
Signing time: Sat 27 Dec 2025 23:00:01 +0000
ROA not before: Sat 27 Dec 2025 22:55:01 +0000
ROA not after: Sat 26 Dec 2026 23:00:01 +0000
asID: 139972
IP address blocks: 2405:c440:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 06:45:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f6:f8:2a:41:4e:04:34:03:53:ce:5d:50:02:e7:e1:7b:bc:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
Validity
Not Before: Dec 27 22:55:01 2025 GMT
Not After : Dec 26 23:00:01 2026 GMT
Subject: CN=3A63F7C42F9F09102DCEF19F641C618D0430D0DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:1c:05:a8:0c:f1:3d:5e:b5:98:76:92:87:
72:c0:d8:92:b3:14:26:28:ba:a8:4f:cf:b9:84:1c:
9c:1a:1d:65:74:75:72:1b:a3:49:89:87:ac:fb:57:
e1:55:32:97:39:59:9b:4e:75:96:62:75:bf:cd:53:
0f:7f:41:28:60:e6:ba:d0:7d:4f:73:88:96:cc:64:
b1:3c:49:87:cf:6e:6a:b5:9d:21:30:3e:2b:b0:83:
2e:ef:72:79:15:92:e3:1f:f9:c0:f3:53:d1:57:2d:
22:eb:a2:1a:e8:e9:17:6b:a3:79:08:ba:2e:d0:5f:
f1:79:75:dd:57:c7:0f:de:e4:15:d8:e6:09:3f:0a:
1c:6c:7c:15:e5:fa:70:e6:54:dc:34:cd:d0:aa:cd:
a5:32:ef:00:6c:60:27:c4:a2:b7:14:ea:63:b5:f7:
f3:db:ba:66:0d:f4:7c:e0:b9:25:a6:9b:63:a5:e5:
04:b5:fd:eb:09:ab:08:72:6f:00:a4:53:96:8b:73:
eb:88:d0:90:3b:85:16:8d:dd:ac:66:56:63:00:1b:
eb:85:fb:5c:78:fb:02:c1:ff:62:2f:b5:ab:b3:cf:
59:25:e5:41:74:d3:48:28:a8:e2:22:35:94:9d:7e:
3f:4a:28:a0:f5:b3:13:cf:a7:15:02:7c:48:34:1c:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:63:F7:C4:2F:9F:09:10:2D:CE:F1:9F:64:1C:61:8D:04:30:D0:DA
X509v3 Authority Key Identifier:
keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/323430353a633434303a653a3a2f34382d3438203d3e20313339393732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c440:e::/48
Signature Algorithm: sha256WithRSAEncryption
3d:24:9b:48:85:48:c7:4b:6e:ce:a2:d3:5b:76:fe:d3:b0:80:
58:29:46:d7:f5:67:50:99:25:a7:a9:a8:19:83:0e:ae:d3:15:
38:e9:20:ef:ba:a8:8b:15:dc:b8:c1:78:db:06:e5:0c:08:45:
c9:f8:93:3c:5e:a1:ed:2a:27:8d:4a:c4:ac:17:1b:e0:59:00:
9b:0d:96:65:80:0c:36:0b:7d:00:ea:2d:f6:cf:ae:c7:e8:9f:
ed:be:d1:f7:2a:15:d8:d2:7e:09:8b:1d:59:e5:16:97:7e:91:
84:9b:51:8c:05:0f:e1:b3:8a:ea:0e:82:c8:30:40:ae:73:f4:
95:02:83:e5:05:16:92:75:5d:ae:dd:dc:69:bb:da:57:dd:7b:
54:16:b0:75:c3:2a:c1:a9:d1:90:39:54:15:1a:43:a7:e0:64:
44:2f:0d:db:cd:f8:ce:e9:e2:48:df:21:d9:b7:0c:5a:c0:0c:
e4:e1:f2:27:6c:d4:50:16:58:4f:ea:90:78:ec:5e:8a:77:a8:
08:60:8d:dd:37:ec:4d:7a:9b:e4:68:d2:31:4d:06:45:79:4c:
1c:af:94:e9:8a:e8:e8:47:8a:bf:e0:b7:e0:f3:cc:36:66:0d:
07:2d:9c:40:ad:e7:46:dc:62:a5:bf:17:87:e6:58:b8:95:a0:
4e:c6:c7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:51:21 2026 by rpki-client