This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
File: 323430303a636438303a3a2f33322d3438203d3e203539323831.roa (raw, json)
Hash identifier: SDDhhLbIPIon66Bn4BSdn8Fj3IQ8y3DGAekRQSKZURg=
Subject key identifier: 34:04:93:92:BE:91:79:1C:BA:64:DD:E9:BD:0C:E9:FD:F7:0C:3F:EA
Certificate issuer: /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial: 4C7867984623A15051FD5A452B984A431123ABA0
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
Signing time: Wed 14 Jan 2026 08:00:00 +0000
ROA not before: Wed 14 Jan 2026 07:55:00 +0000
ROA not after: Wed 13 Jan 2027 08:00:00 +0000
asID: 59281
IP address blocks: 2400:cd80::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 10:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:78:67:98:46:23:a1:50:51:fd:5a:45:2b:98:4a:43:11:23:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Validity
Not Before: Jan 14 07:55:00 2026 GMT
Not After : Jan 13 08:00:00 2027 GMT
Subject: CN=34049392BE91791CBA64DDE9BD0CE9FDF70C3FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:19:79:5e:e7:65:a0:64:c8:d5:e3:65:cd:
f7:30:93:2a:f2:b3:85:4d:12:11:bb:27:a5:22:a6:
d7:72:f8:91:2a:3b:02:c0:e5:84:7e:70:ad:bf:90:
3f:16:99:c6:5a:8b:3f:31:82:a6:19:7d:db:57:53:
57:a8:16:ad:d9:85:44:ff:a6:eb:c8:d5:24:53:c5:
f6:5f:95:c2:29:f4:d7:f2:4f:c9:1a:a1:52:b2:9b:
e7:60:a8:f7:e2:b2:f1:35:6c:c4:60:bd:70:fb:00:
19:2a:d9:42:bc:f8:7b:ce:f5:d1:48:36:fc:40:62:
b2:3c:91:8c:24:42:9e:fe:d5:d7:07:0b:3d:96:eb:
21:ee:87:85:82:7c:be:9e:a2:b7:79:89:dc:13:25:
a9:79:85:d1:4c:e4:02:88:3b:0e:89:f9:ae:b1:fe:
90:e8:df:02:48:b1:ea:1d:8d:bf:b4:a2:23:c1:53:
97:2c:c5:16:d4:00:43:9d:c5:57:6e:6a:2a:95:b2:
86:c8:a2:34:18:90:c3:ec:20:7e:e3:8c:07:54:3e:
d1:ce:ab:1f:7b:fa:a1:6a:f5:a8:7f:77:df:88:62:
7e:f0:88:d0:2a:f9:8c:b4:bf:0d:a5:ca:b0:32:2f:
bb:c5:c4:81:22:12:c1:b1:f8:0e:01:b7:f2:6a:73:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:04:93:92:BE:91:79:1C:BA:64:DD:E9:BD:0C:E9:FD:F7:0C:3F:EA
X509v3 Authority Key Identifier:
keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/323430303a636438303a3a2f33322d3438203d3e203539323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:cd80::/32
Signature Algorithm: sha256WithRSAEncryption
2a:02:a4:89:6a:2f:51:d7:bd:95:fb:99:a0:e4:41:e4:5f:77:
26:fe:00:8c:41:c7:28:de:ad:d4:53:8a:8c:1f:16:19:29:d0:
35:6d:88:4f:4e:bb:0f:38:0f:d2:94:df:7a:04:7e:02:a7:9e:
2d:cf:29:5e:2d:70:08:16:27:07:f5:9d:66:3a:41:10:0c:86:
21:93:65:30:6d:fb:41:63:db:89:74:f5:48:6b:5d:25:1c:fa:
b7:15:f0:55:e7:93:58:a1:d1:94:f7:0b:07:a8:9e:7d:9e:7d:
b5:34:14:18:e7:0e:bc:2a:bb:9c:88:7f:86:db:79:91:ac:02:
a6:1f:f1:ab:5d:1e:95:d5:bd:f2:be:6c:5a:e2:fe:47:3a:42:
8f:3b:5e:ab:27:77:d8:f5:5b:63:67:0e:25:a8:fb:29:87:50:
c2:e1:07:08:ef:a3:b3:73:8f:60:aa:4f:ee:b9:db:57:9a:cd:
35:7d:8d:eb:09:8d:49:50:79:da:8c:61:06:92:43:10:58:98:
b7:e8:f7:01:2f:04:96:99:eb:e1:a8:f9:31:d1:08:be:4d:b9:
dd:d2:db:ad:6b:22:35:b6:66:d3:1b:d5:3f:3a:d4:f0:9d:57:
95:94:78:7b:13:8f:21:37:15:9a:e3:d8:04:77:f3:f4:24:f4:
e8:c5:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:56:44 2026 by rpki-client