This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
File: 323430333a666438303a3a2f33322d3336203d3e203538333639.roa (raw, json)
Hash identifier: Edve0lO+G+QnJBEYGDte6DYzQPe9wkrT34HSnb+bQXo=
Subject key identifier: DB:B9:75:B7:4A:F3:B2:51:E7:4D:FB:FA:3E:9F:17:D9:F1:65:D6:BF
Certificate issuer: /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial: 6DEA3D914008BC18585479C961DE585B5A487FF7
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
Signing time: Mon 22 Dec 2025 01:38:40 +0000
ROA not before: Mon 22 Dec 2025 01:33:40 +0000
ROA not after: Mon 21 Dec 2026 01:38:40 +0000
asID: 58369
IP address blocks: 2403:fd80::/32 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:ea:3d:91:40:08:bc:18:58:54:79:c9:61:de:58:5b:5a:48:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Validity
Not Before: Dec 22 01:33:40 2025 GMT
Not After : Dec 21 01:38:40 2026 GMT
Subject: CN=DBB975B74AF3B251E74DFBFA3E9F17D9F165D6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:fa:0d:79:cd:20:ba:a5:2f:4f:22:7d:df:
f5:4c:5a:e2:de:8e:c3:fd:62:30:a3:16:1c:59:fb:
e6:53:be:ce:79:d7:7d:fa:d9:b2:8b:77:54:72:cd:
c9:6c:5f:ce:2e:39:0f:9d:3f:c3:1b:b0:25:15:04:
74:78:b1:c2:ef:1e:e0:58:ce:b3:c2:bd:32:ea:3a:
54:39:6f:d0:4b:c9:d1:77:c6:46:1e:09:b6:b5:cb:
b7:f1:2c:3b:a7:2e:04:59:9f:ba:8e:31:e0:17:df:
7d:cf:5a:21:47:66:c0:8f:b7:cb:d6:6b:73:59:ae:
25:e4:5a:49:4b:8d:9d:79:ca:93:ee:b2:08:ba:92:
28:67:3f:6b:74:2e:87:3a:99:3c:28:b4:57:e9:d4:
29:8d:2b:d4:5e:c6:0a:59:80:69:4e:89:40:2e:08:
e7:d1:df:0c:3b:a1:69:94:d6:8e:12:1f:43:39:0a:
47:fa:d4:94:d1:45:3d:29:e9:29:1e:4a:97:a0:bc:
72:8d:33:e1:9e:4c:ee:b6:18:eb:6f:2c:d7:7e:31:
b5:1a:44:55:58:df:65:56:eb:44:f3:0b:24:5e:a2:
c0:39:e1:14:73:dc:c1:27:9a:ce:fc:26:90:1b:9d:
fb:1c:44:c2:7d:31:5d:88:f1:6b:f2:55:48:1f:ac:
08:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B9:75:B7:4A:F3:B2:51:E7:4D:FB:FA:3E:9F:17:D9:F1:65:D6:BF
X509v3 Authority Key Identifier:
keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33322d3336203d3e203538333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fd80::/32
Signature Algorithm: sha256WithRSAEncryption
3d:0e:51:8e:b1:7b:92:8d:1e:e4:bf:93:d1:28:a4:4b:e9:78:
86:e9:7c:d9:0f:ec:20:a6:4d:dc:17:72:9b:be:2f:4b:46:47:
95:5f:88:55:08:30:db:04:0e:3e:b0:1a:6c:bd:b4:78:ae:c9:
e2:49:59:25:c9:f3:47:68:19:df:d3:05:db:ed:81:71:48:c2:
59:14:7e:d6:8b:5c:6c:92:60:35:7f:00:13:f7:c4:c7:3b:5a:
b2:32:51:05:64:d9:8e:74:0b:c9:8f:c2:28:e8:20:87:f9:fe:
c9:a9:5f:83:85:d2:65:e9:64:10:e9:7b:ca:3a:95:ec:5f:4a:
0b:66:c2:9f:33:74:7d:e1:7f:a2:ca:3b:d2:ca:1c:4a:cd:3d:
1d:d8:01:c3:09:5c:76:94:6c:36:08:bc:83:a9:c9:94:eb:49:
4a:a3:97:82:2d:83:71:5f:60:29:5e:5e:87:f8:66:29:d4:8b:
70:70:d6:00:b5:fa:2f:36:1c:3f:72:c5:08:39:d0:3f:04:b5:
82:b3:22:46:6a:0c:46:8a:43:aa:4f:59:84:40:ef:23:e6:ff:
c7:3e:df:64:b4:81:b0:51:b4:a6:7e:a4:f9:40:4e:8c:b5:c7:
01:97:25:13:4d:05:1c:f8:64:6e:7a:11:60:64:26:13:04:2c:
f9:ca:7d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 18:38:58 2025 by rpki-client