This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa File: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (raw, json) Hash identifier: yvbmRN5GX0Kxoc+90gun4y0Zq8jLX00f2pb/Z/G8CGA= Subject key identifier: 70:46:DF:79:01:0B:40:47:06:25:5D:8A:13:49:22:AE:5A:87:E9:D9 Certificate issuer: /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Certificate serial: 1ADE8E1E2BB568A41FCDD03D8EE57DF6ACC07217 Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa Signing time: Fri 05 Dec 2025 17:54:13 +0000 ROA not before: Fri 05 Dec 2025 17:49:13 +0000 ROA not after: Fri 04 Dec 2026 17:54:13 +0000 asID: 4382 IP address blocks: 2403:b900:2020::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 03:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:de:8e:1e:2b:b5:68:a4:1f:cd:d0:3d:8e:e5:7d:f6:ac:c0:72:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C Validity Not Before: Dec 5 17:49:13 2025 GMT Not After : Dec 4 17:54:13 2026 GMT Subject: CN=7046DF79010B404706255D8A134922AE5A87E9D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:1d:ad:5f:25:3f:1a:d5:0c:21:3b:9f:86: 10:91:54:bd:0e:d7:b1:51:e3:f0:df:80:fc:f3:69: 13:fe:ae:c3:9e:29:ce:b0:38:33:26:c5:01:8a:fe: a2:bd:9d:11:0d:9b:2e:94:10:67:32:d3:bf:8f:e2: cc:8e:9f:d0:34:02:a9:84:34:9f:e5:15:9b:a9:0b: 45:9c:87:ca:76:20:e9:cb:02:fd:2a:9e:01:58:bc: 3d:52:f4:3f:c1:be:4e:9f:3e:b5:c1:d6:bf:9b:b7: 95:09:33:0a:cf:f3:94:4e:7d:f7:1f:7b:e9:3c:2e: 91:11:8d:ec:33:7a:b7:0e:4e:cf:5e:f7:db:92:80: 6f:53:e9:2e:d4:f6:d8:07:85:2b:da:d3:09:35:c6: de:8f:b8:a4:9f:6a:2b:99:60:9c:72:0c:d4:07:2b: 1c:cb:24:db:f8:f2:4c:44:64:b0:e9:3c:b2:2a:b0: 1d:7f:cc:82:7d:ec:ca:12:d7:69:79:f3:25:e8:69: c5:13:d7:34:b8:6b:66:e1:fe:45:93:29:51:e9:0a: f4:39:02:cc:f7:45:1f:4f:77:59:a1:7b:ad:95:7a: 96:3c:3e:4e:61:7e:22:78:f9:0f:33:f4:8e:e0:86: 75:57:41:13:b3:da:f3:2c:04:5a:a4:0a:72:47:47: d7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:DF:79:01:0B:40:47:06:25:5D:8A:13:49:22:AE:5A:87:E9:D9 X509v3 Authority Key Identifier: keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b900:2020::/48 Signature Algorithm: sha256WithRSAEncryption 7c:02:f4:f3:23:e3:90:53:eb:65:82:a4:fc:f3:4f:55:fd:af: c3:04:b1:8b:6e:a6:a2:c4:cb:95:23:d3:49:f3:0d:dd:4b:3f: 93:aa:87:b6:67:4d:5b:86:d8:11:c4:f1:46:32:e3:6d:c4:c9: c9:0b:76:12:c1:f4:f0:bd:86:20:dd:df:e7:9f:b6:5b:50:fd: 52:6c:bb:b7:47:b8:8d:fa:01:d1:5e:be:08:3a:53:5f:e0:e6: 96:74:36:f0:40:7b:57:f9:31:f1:6f:c3:87:71:61:1c:9e:65: e0:67:80:37:07:c8:85:87:4c:6e:f1:24:dc:e2:b7:2c:54:8f: af:d2:1a:9a:91:ea:ac:0d:66:01:12:02:15:3b:02:2e:a3:d7: af:e9:bf:6b:4f:10:71:f4:96:4d:f5:10:df:40:04:63:87:f0: d5:a3:e3:b2:ff:2d:96:9b:ad:ab:3f:cd:05:73:f2:52:0c:9a: ca:5d:81:77:68:cf:7e:02:7b:19:dd:08:8c:5b:cf:77:9d:e3: 80:1a:64:a6:be:22:26:3f:54:11:a3:4c:ec:19:74:98:2f:83: 07:07:88:c6:0c:62:9b:d0:1e:2b:51:9c:a6:c5:fe:29:f4:ba: 30:fc:d0:85:99:ee:cf:65:f7:0f:74:a7:b8:96:29:5a:ef:2a: 8e:d7:0b:50 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGt6OHiu1aKQfzdA9juV99qzAchcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx RUZEQTkzQzAeFw0yNTEyMDUxNzQ5MTNaFw0yNjEyMDQxNzU0MTNaMDMxMTAvBgNV BAMTKDcwNDZERjc5MDEwQjQwNDcwNjI1NUQ4QTEzNDkyMkFFNUE4N0U5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrh2tXyU/GtUMITufhhCRVL0O 17FR4/DfgPzzaRP+rsOeKc6wODMmxQGK/qK9nRENmy6UEGcy07+P4syOn9A0AqmE NJ/lFZupC0Wch8p2IOnLAv0qngFYvD1S9D/Bvk6fPrXB1r+bt5UJMwrP85ROffcf e+k8LpERjewzercOTs9e99uSgG9T6S7U9tgHhSva0wk1xt6PuKSfaiuZYJxyDNQH KxzLJNv48kxEZLDpPLIqsB1/zIJ97MoS12l58yXoacUT1zS4a2bh/kWTKVHpCvQ5 Asz3RR9Pd1mhe62VepY8Pk5hfiJ4+Q8z9I7ghnVXQROz2vMsBFqkCnJHR9dXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUcEbfeQELQEcGJV2KE0kirlqH6dkwHwYDVR0j BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE QTkzQy5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05 MDczLWFkMTQwMTFhYzNiMi8wLzMyMzQzMDMzM2E2MjM5MzAzMDNhMzIzMDMyMzAz YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDMzMzgzMi5yb2EwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQDuQAg IDANBgkqhkiG9w0BAQsFAAOCAQEAfAL08yPjkFPrZYKk/PNPVf2vwwSxi26mosTL lSPTSfMN3Us/k6qHtmdNW4bYEcTxRjLjbcTJyQt2EsH08L2GIN3f55+2W1D9Umy7 t0e4jfoB0V6+CDpTX+DmlnQ28EB7V/kx8W/Dh3FhHJ5l4GeANwfIhYdMbvEk3OK3 LFSPr9IampHqrA1mARICFTsCLqPXr+m/a08QcfSWTfUQ30AEY4fw1aPjsv8tlput qz/NBXPyUgyayl2Bd2jPfgJ7Gd0IjFvPd53jgBpkpr4iJj9UEaNM7Bl0mC+DBweI xgxim9AeK1GcpsX+KfS6MPzQhZnuz2X3D3SnuJYpWu8qjtcLUA== -----END CERTIFICATE-----Generated at Mon Dec 8 20:52:16 2025 by rpki-client