This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa
File: 323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier: OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=
Subject key identifier: 76:C3:28:A6:B4:4A:55:FA:03:78:4D:DD:59:85:40:0C:4B:88:B2:6C
Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial: 72D80BC6694F6CCF6CCB7145E124E25241B57333
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa
Signing time: Tue 11 Nov 2025 06:01:50 +0000
ROA not before: Tue 11 Nov 2025 05:56:50 +0000
ROA not after: Tue 10 Nov 2026 06:01:50 +0000
asID: 153087
IP address blocks: 2404:97c0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 07:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d8:0b:c6:69:4f:6c:cf:6c:cb:71:45:e1:24:e2:52:41:b5:73:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Validity
Not Before: Nov 11 05:56:50 2025 GMT
Not After : Nov 10 06:01:50 2026 GMT
Subject: CN=76C328A6B44A55FA03784DDD5985400C4B88B26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:9f:3e:85:dd:8d:98:e3:a0:1b:ba:60:f7:
3f:68:e8:0b:7b:b4:0d:c0:e3:30:49:90:f3:26:84:
a6:25:f3:23:96:cc:cc:00:d2:e7:26:be:11:07:cc:
c6:08:90:93:4c:f9:9f:ea:5d:05:7d:c4:00:29:67:
61:e4:73:5d:84:83:4f:a3:a5:a5:de:e8:7c:29:00:
b2:c1:fb:d0:12:e4:7c:a1:9e:da:20:ed:26:48:6e:
81:84:ef:c4:5a:4b:c5:d3:77:49:54:b0:f9:65:2b:
f9:ce:37:af:ef:bd:5c:5d:5c:85:22:98:6d:53:54:
91:ef:f7:9e:55:b3:4f:a0:23:10:11:a3:33:6b:bc:
74:56:cc:e8:1c:d5:95:3f:34:68:81:8a:9f:b7:c4:
bc:8d:d5:07:a5:52:b7:9b:22:05:96:d7:8a:65:d3:
b7:f0:72:37:94:36:af:1e:aa:e7:cb:d1:64:ab:e3:
6b:13:23:64:7b:e5:2f:b2:89:d0:44:c6:5d:ab:5f:
d7:e2:45:c4:c9:05:4e:7f:84:a5:81:3d:21:bd:80:
f9:1b:c1:76:68:63:85:a5:25:d1:c0:62:05:34:27:
dc:05:5c:ed:b6:79:cf:f6:e5:4d:26:61:69:b2:e7:
4c:98:91:5d:21:b5:0b:7c:2d:3e:52:6f:de:a9:d4:
00:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C3:28:A6:B4:4A:55:FA:03:78:4D:DD:59:85:40:0C:4B:88:B2:6C
X509v3 Authority Key Identifier:
keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:97c0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
8e:90:f3:97:b2:d6:30:55:3c:46:2f:fb:c1:a5:78:e1:2f:2f:
74:a7:1c:a9:df:9a:27:c4:a5:f9:ae:1b:e3:97:10:6e:e1:a9:
09:16:24:c7:76:cd:3e:54:dc:f0:6d:0b:ff:8e:25:50:c2:2f:
63:15:63:46:7a:b6:34:ad:8d:46:b0:40:10:11:43:3b:5d:6d:
d3:a8:f1:13:2c:55:ec:b4:0f:48:ae:ef:e2:74:82:ee:12:ea:
3a:84:ca:2c:92:04:5c:a2:d9:6e:04:29:dd:21:ff:de:43:18:
77:39:b9:48:c4:0e:03:f4:81:ee:9a:71:c6:8d:05:f7:1a:8e:
61:15:28:fd:c2:1c:ed:5b:83:7f:ad:8c:d9:d2:d7:d3:3d:ad:
2c:b6:6b:ca:2a:6e:3b:05:d8:14:91:92:45:64:d9:36:5a:69:
69:8c:8c:46:ea:6f:d8:ee:15:ad:98:e9:b2:bb:ed:b1:a6:9e:
7c:bb:eb:1a:a7:33:d5:d0:68:6d:f9:64:4a:0f:05:ee:12:bf:
8d:a8:66:06:ff:05:68:87:a7:f5:86:a9:af:d2:7f:b6:97:69:
c8:a3:83:65:3e:99:e8:b0:1c:df:97:95:26:19:b8:85:f6:ab:
41:fa:22:1c:90:f0:50:dc:51:65:89:25:05:81:5a:e9:fc:82:
b6:97:48:22
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUctgLxmlPbM9sy3FF4STiUkG1czMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4
QzFENTE1ODAeFw0yNTExMTEwNTU2NTBaFw0yNjExMTAwNjAxNTBaMDMxMTAvBgNV
BAMTKDc2QzMyOEE2QjQ0QTU1RkEwMzc4NERERDU5ODU0MDBDNEI4OEIyNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+Z8+hd2NmOOgG7pg9z9o6At7
tA3A4zBJkPMmhKYl8yOWzMwA0ucmvhEHzMYIkJNM+Z/qXQV9xAApZ2Hkc12Eg0+j
paXe6HwpALLB+9AS5Hyhntog7SZIboGE78RaS8XTd0lUsPllK/nON6/vvVxdXIUi
mG1TVJHv955Vs0+gIxARozNrvHRWzOgc1ZU/NGiBip+3xLyN1QelUrebIgWW14pl
07fwcjeUNq8equfL0WSr42sTI2R75S+yidBExl2rX9fiRcTJBU5/hKWBPSG9gPkb
wXZoY4WlJdHAYgU0J9wFXO22ec/25U0mYWmy50yYkV0htQt8LT5Sb96p1ADpAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUdsMoprRKVfoDeE3dWYVADEuIsmwwHwYDVR0j
BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy
MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE
NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05
Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhMzkzMDMwMzAz
YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk
BJfAkDANBgkqhkiG9w0BAQsFAAOCAQEAjpDzl7LWMFU8Ri/7waV44S8vdKccqd+a
J8Sl+a4b45cQbuGpCRYkx3bNPlTc8G0L/44lUMIvYxVjRnq2NK2NRrBAEBFDO11t
06jxEyxV7LQPSK7v4nSC7hLqOoTKLJIEXKLZbgQp3SH/3kMYdzm5SMQOA/SB7ppx
xo0F9xqOYRUo/cIc7VuDf62M2dLX0z2tLLZryipuOwXYFJGSRWTZNlppaYyMRupv
2O4VrZjpsrvtsaaefLvrGqcz1dBobflkSg8F7hK/jahmBv8FaIen9Yapr9J/tpdp
yKODZT6Z6LAc35eVJhm4hfarQfoiHJDwUNxRZYklBYFa6fyCtpdIIg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 17:39:09 2025 by rpki-client