This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa File: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (raw, json) Hash identifier: Mn12cCWWwqenSncttGnq31sIu/+Hnb5sVeUQv3iCWNw= Subject key identifier: 93:3F:58:C6:9B:CC:02:73:98:69:39:02:E4:DB:8E:01:74:87:FC:02 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 3672D78B1E9209FB5B87FB496E004558DCFE6AF7 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa Signing time: Fri 05 Dec 2025 17:53:51 +0000 ROA not before: Fri 05 Dec 2025 17:48:51 +0000 ROA not after: Fri 04 Dec 2026 17:53:51 +0000 asID: 4382 IP address blocks: 2403:b900:151f::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 03:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:72:d7:8b:1e:92:09:fb:5b:87:fb:49:6e:00:45:58:dc:fe:6a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Dec 5 17:48:51 2025 GMT Not After : Dec 4 17:53:51 2026 GMT Subject: CN=933F58C69BCC027398693902E4DB8E017487FC02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:22:36:d8:b1:26:8f:e2:84:fb:2a:ae:6d: 31:08:9e:c8:74:8f:a8:ed:69:58:91:84:4f:38:b7: 3a:fb:1c:fc:59:96:e2:30:3c:59:cc:bc:c4:e6:d7: 16:d2:23:db:20:b7:60:fa:37:98:c3:c0:fe:20:09: fb:5c:a3:0b:ab:7a:cd:79:af:04:96:34:45:c6:03: 5d:5e:0f:0d:00:de:fe:ff:a1:43:d6:67:f7:ec:c8: d8:62:c6:e8:da:aa:fd:85:26:2a:dd:de:d2:6b:d9: 47:8c:98:6c:22:51:ce:31:c9:63:96:6f:76:0b:8a: 63:5a:83:15:22:00:51:a0:a7:00:62:74:3c:b8:d7: a1:e0:59:e3:1b:14:74:a9:71:63:a6:ef:df:45:27: 6d:72:02:0a:1f:f2:53:09:45:ca:9f:8c:35:d4:7f: 1c:a2:bf:17:9e:68:2d:fb:03:05:a9:56:9a:d6:a7: 32:82:e2:57:b9:a9:33:81:a5:af:3b:60:79:54:90: be:9a:c1:d4:26:df:53:3a:cc:d2:af:6b:1c:22:82: 46:ee:a3:5b:3a:84:d2:44:bd:d0:7d:ee:1c:56:66: 23:8f:8b:32:2f:51:b6:3d:bf:45:bb:b4:b5:92:e0: 57:33:b5:99:ed:f9:e6:cf:28:2b:3c:3c:f6:66:6a: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:3F:58:C6:9B:CC:02:73:98:69:39:02:E4:DB:8E:01:74:87:FC:02 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b900:151f::/48 Signature Algorithm: sha256WithRSAEncryption ac:38:cb:31:a4:af:9e:7b:63:55:aa:b6:da:80:e3:bb:23:cf: 86:97:4f:64:b0:a8:3c:ea:d6:54:ce:4d:34:da:c2:7b:9d:41: 79:54:4f:02:a2:78:19:92:ae:a0:7d:9b:29:19:da:3c:70:44: 20:10:5d:5d:09:03:ed:c9:9e:50:cd:18:0d:f2:4b:3a:e0:72: 38:5d:82:a0:7a:5d:3e:eb:3c:59:e8:07:3b:d2:61:b2:8d:74: ce:1e:29:e6:9b:b7:fe:e0:de:fc:9e:04:e4:1f:fe:6d:e9:a8: b6:53:58:c8:1a:ed:ea:d3:dd:54:9a:7d:cb:d1:94:23:46:03: 86:77:be:c9:ff:be:68:c5:56:84:9d:3e:38:39:af:0a:b1:99: 0f:01:e9:c8:e0:52:b7:37:10:94:b7:3a:af:ea:d0:af:e8:5b: 00:19:73:03:58:2c:d2:49:81:80:a9:73:a8:73:fa:f4:3d:c5: 30:d1:18:e2:55:9f:fa:ab:5d:05:14:50:1e:6c:12:7b:64:05: 99:91:80:d8:e1:a0:3e:7d:4a:a7:77:98:25:0a:3b:c9:66:c7: 01:e4:ee:c9:5b:7c:b0:df:ff:ed:53:d9:47:20:d8:dd:9b:8c: b5:ac:64:89:e2:7a:12:47:d1:7b:3a:b8:24:37:93:57:95:96: 5d:3f:83:66 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNnLXix6SCftbh/tJbgBFWNz+avcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTEyMDUxNzQ4NTFaFw0yNjEyMDQxNzUzNTFaMDMxMTAvBgNV BAMTKDkzM0Y1OEM2OUJDQzAyNzM5ODY5MzkwMkU0REI4RTAxNzQ4N0ZDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyyI22LEmj+KE+yqubTEInsh0 j6jtaViRhE84tzr7HPxZluIwPFnMvMTm1xbSI9sgt2D6N5jDwP4gCftcowures15 rwSWNEXGA11eDw0A3v7/oUPWZ/fsyNhixujaqv2FJird3tJr2UeMmGwiUc4xyWOW b3YLimNagxUiAFGgpwBidDy416HgWeMbFHSpcWOm799FJ21yAgof8lMJRcqfjDXU fxyivxeeaC37AwWpVprWpzKC4le5qTOBpa87YHlUkL6awdQm31M6zNKvaxwigkbu o1s6hNJEvdB97hxWZiOPizIvUbY9v0W7tLWS4FcztZnt+ebPKCs8PPZmat1ZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkz9YxpvMAnOYaTkC5NuOAXSH/AIwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzQzMDMzM2E2MjM5MzAzMDNhMzEzNTMxNjYz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMzMzgzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDuQAV HzANBgkqhkiG9w0BAQsFAAOCAQEArDjLMaSvnntjVaq22oDjuyPPhpdPZLCoPOrW VM5NNNrCe51BeVRPAqJ4GZKuoH2bKRnaPHBEIBBdXQkD7cmeUM0YDfJLOuByOF2C oHpdPus8WegHO9Jhso10zh4p5pu3/uDe/J4E5B/+bemotlNYyBrt6tPdVJp9y9GU I0YDhne+yf++aMVWhJ0+ODmvCrGZDwHpyOBStzcQlLc6r+rQr+hbABlzA1gs0kmB gKlzqHP69D3FMNEY4lWf+qtdBRRQHmwSe2QFmZGA2OGgPn1Kp3eYJQo7yWbHAeTu yVt8sN//7VPZRyDY3ZuMtaxkieJ6EkfRezq4JDeTV5WWXT+DZg== -----END CERTIFICATE-----Generated at Mon Dec 8 20:50:36 2025 by rpki-client