This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: mn8CNzPntuzIh9ykEoLvol7d+gOHgPTC5fCQWZQ5dbs= Subject key identifier: 91:C1:F4:AB:AA:AE:CA:1E:48:D0:7B:54:09:1D:53:36:47:71:7C:D0 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 6914F83481BD20EDF95A6C4A949329CDAB4DB69C Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:51 +0000 ROA not before: Tue 11 Nov 2025 05:56:51 +0000 ROA not after: Tue 10 Nov 2026 06:01:51 +0000 asID: 153087 IP address blocks: 2404:97c0:b000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:14:f8:34:81:bd:20:ed:f9:5a:6c:4a:94:93:29:cd:ab:4d:b6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:51 2025 GMT Not After : Nov 10 06:01:51 2026 GMT Subject: CN=91C1F4ABAAAECA1E48D07B54091D533647717CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:72:43:f5:3c:9d:f2:d8:18:9a:de:db:b3:ba: b2:11:b6:07:9e:77:d0:55:75:65:82:68:22:96:55: 1e:c8:eb:be:09:c6:32:5d:68:5a:15:08:bd:5d:24: e5:a6:89:86:9c:06:2f:72:37:f8:f0:6d:10:57:3f: 4c:37:a0:e9:71:d9:2e:f6:22:11:b9:1d:a0:32:fe: 80:c8:ff:7c:a8:07:a3:a8:9c:29:a6:86:67:ff:93: bc:b0:3d:23:0b:6d:87:e0:c7:99:03:b4:ee:6b:04: cf:b1:a0:27:ce:50:a6:ab:9d:08:bc:28:33:dd:2f: a5:4a:e1:de:d4:c1:08:a6:b1:cb:0d:04:1a:ae:b2: 59:43:f5:e7:ef:2a:28:f5:6d:c1:9b:66:4f:bd:f3: 0c:c2:54:6b:43:60:2d:aa:70:0a:d3:a8:51:36:99: ad:6f:d0:69:28:ea:05:3e:f3:34:18:2e:79:47:62: 96:c2:78:92:4c:5e:a4:87:16:99:59:b4:83:c2:f1: 0a:6d:ec:d3:54:a3:b8:06:84:2e:46:73:dc:7e:b0: c9:58:fd:33:af:de:fb:83:03:d8:ba:a7:aa:9b:9c: 13:1d:ba:64:0d:3f:3f:76:a2:ed:2d:49:d0:20:b0: 09:a7:a9:45:56:8c:71:d0:6b:5f:ae:11:6f:5d:13: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C1:F4:AB:AA:AE:CA:1E:48:D0:7B:54:09:1D:53:36:47:71:7C:D0 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a623030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:b000::/36 Signature Algorithm: sha256WithRSAEncryption 61:16:00:81:8c:1a:85:ef:b7:6e:1d:55:b6:dd:bd:fc:fc:9f: f1:92:eb:de:b3:5d:80:3a:88:73:99:58:07:98:6c:f7:df:60: 89:81:d8:e0:0b:85:c0:98:1c:82:3a:6f:bd:5a:54:58:85:b9: b7:09:ea:b5:51:ac:53:b3:e6:d2:20:28:14:4f:a7:97:d7:60: fd:43:b1:a9:b0:a3:c6:41:c4:70:47:fb:0f:7e:e3:24:0e:1c: 96:50:a2:a9:5e:cd:5c:99:00:d6:dd:29:b6:fd:55:1d:64:96: 27:bc:94:6b:90:2c:f0:41:ac:dd:b0:b5:45:26:16:a8:e4:b9: 2c:0d:1e:68:55:87:f3:aa:41:92:7e:55:8c:40:d3:fc:be:bf: 93:4d:d1:ef:4b:97:14:4f:a0:26:5f:b6:08:64:91:73:25:37: cb:64:0d:a0:28:a7:5c:fa:d2:dc:f5:70:97:9a:e5:ba:ed:40: ac:66:5d:5d:ac:9e:07:ce:4a:88:3d:7d:eb:6b:a3:58:9b:98: 88:a7:c2:5d:78:46:62:e3:8e:56:e9:47:34:37:df:47:47:11: d6:28:c4:d6:06:10:95:a4:0e:29:af:d8:ff:5e:ac:c4:5e:eb: bd:e9:e3:b2:99:4e:cc:8c:5e:fd:95:af:d4:e2:d9:94:6f:db: 4b:99:91:d7 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUaRT4NIG9IO35WmxKlJMpzatNtpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTFaFw0yNjExMTAwNjAxNTFaMDMxMTAvBgNV BAMTKDkxQzFGNEFCQUFBRUNBMUU0OEQwN0I1NDA5MUQ1MzM2NDc3MTdDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfckP1PJ3y2Bia3tuzurIRtgee d9BVdWWCaCKWVR7I674JxjJdaFoVCL1dJOWmiYacBi9yN/jwbRBXP0w3oOlx2S72 IhG5HaAy/oDI/3yoB6OonCmmhmf/k7ywPSMLbYfgx5kDtO5rBM+xoCfOUKarnQi8 KDPdL6VK4d7UwQimscsNBBqusllD9efvKij1bcGbZk+98wzCVGtDYC2qcArTqFE2 ma1v0Gko6gU+8zQYLnlHYpbCeJJMXqSHFplZtIPC8Qpt7NNUo7gGhC5Gc9x+sMlY /TOv3vuDA9i6p6qbnBMdumQNPz92ou0tSdAgsAmnqUVWjHHQa1+uEW9dE6/3AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUkcH0q6quyh5I0HtUCR1TNkdxfNAwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjIzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfAsDANBgkqhkiG9w0BAQsFAAOCAQEAYRYAgYwahe+3bh1Vtt29/Pyf8ZLr3rNd gDqIc5lYB5hs999giYHY4AuFwJgcgjpvvVpUWIW5twnqtVGsU7Pm0iAoFE+nl9dg /UOxqbCjxkHEcEf7D37jJA4cllCiqV7NXJkA1t0ptv1VHWSWJ7yUa5As8EGs3bC1 RSYWqOS5LA0eaFWH86pBkn5VjEDT/L6/k03R70uXFE+gJl+2CGSRcyU3y2QNoCin XPrS3PVwl5rluu1ArGZdXayeB85KiD1962ujWJuYiKfCXXhGYuOOVulHNDffR0cR 1ijE1gYQlaQOKa/Y/16sxF7rvenjsplOzIxe/ZWv1OLZlG/bS5mR1w== -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:10 2025 by rpki-client