This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa File: 323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa (raw, json) Hash identifier: vK7js0VcvkoTEio6OPE0bIxYoKi2WhD/AFizRZR03iE= Subject key identifier: 8A:37:10:65:F9:49:4A:8C:B7:DC:2A:AC:12:E3:58:73:45:18:7B:25 Certificate issuer: /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Certificate serial: 1FDD199B1B6FB15330C86C194715473EA8A0B6F5 Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa Signing time: Tue 11 Nov 2025 06:01:52 +0000 ROA not before: Tue 11 Nov 2025 05:56:52 +0000 ROA not after: Tue 10 Nov 2026 06:01:52 +0000 asID: 153087 IP address blocks: 2404:97c0:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:dd:19:9b:1b:6f:b1:53:30:c8:6c:19:47:15:47:3e:a8:a0:b6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Validity Not Before: Nov 11 05:56:52 2025 GMT Not After : Nov 10 06:01:52 2026 GMT Subject: CN=8A371065F9494A8CB7DC2AAC12E3587345187B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:a5:56:df:44:26:27:04:38:65:31:b5:67: 29:ca:cc:fa:51:37:79:6d:2b:7c:06:83:5a:df:c6: bb:1c:1c:5e:38:2a:a4:8a:f9:80:d3:aa:08:e4:62: 0d:c7:80:88:5d:f2:fd:95:15:00:01:d7:11:72:60: f8:2d:a1:73:bb:5c:89:f8:64:c9:d4:94:eb:49:f4: 01:c0:63:a1:89:77:13:54:c6:b6:29:52:e3:00:87: 0b:3a:55:6c:4d:94:33:c2:a8:28:9e:18:ae:76:b8: 48:3f:28:68:22:02:2d:3c:c2:5a:26:87:00:77:d7: 48:8a:17:ca:d4:5c:5d:de:7f:a1:a9:4e:6d:8b:fa: 60:e3:0f:66:99:14:a7:8e:69:ee:8c:ae:8a:44:0e: 2d:0f:15:58:cb:64:fc:d9:22:50:fd:df:12:cc:8b: 7f:58:d4:79:52:67:a6:4e:b9:b7:ff:04:86:22:46: 77:18:71:da:14:89:b9:19:55:f5:48:9a:43:74:87: 14:af:b3:b4:8a:8e:db:ae:33:d0:65:d8:3d:92:23: a8:1d:15:b6:da:34:9c:ac:b7:8f:76:0e:9a:38:21: 1d:5e:20:d4:ca:33:97:3b:8d:6a:b8:10:33:79:d1: b2:24:ff:4e:6b:b2:6c:fe:2c:ca:cc:17:24:e8:bd: db:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:10:65:F9:49:4A:8C:B7:DC:2A:AC:12:E3:58:73:45:18:7B:25 X509v3 Authority Key Identifier: keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a643030303a3a2f33362d3336203d3e20313533303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0:d000::/36 Signature Algorithm: sha256WithRSAEncryption bb:08:0c:b6:28:55:4c:1f:bd:9e:19:6f:8e:1b:e1:9b:af:cf: db:00:ed:7b:c1:6d:50:a2:86:89:10:ee:1b:63:67:16:55:86: c5:d2:6b:d3:eb:b8:ad:95:8a:c7:6d:99:32:0b:72:96:0c:b2: e2:dd:4f:17:1c:e9:e3:70:93:98:7b:d9:f3:91:38:89:6a:16: 6b:b6:2b:2e:15:d1:a6:3a:a3:24:2b:b2:4d:77:59:2f:97:5c: 7d:6a:b9:e6:e8:cb:30:8e:09:a8:07:fe:db:1c:6f:62:32:64: c0:1d:7a:e2:57:e2:bf:77:a5:4d:39:29:e1:00:ba:83:87:9d: ed:00:10:bc:71:17:c2:af:b8:d2:ea:d8:0e:63:6e:3f:d2:5c: bb:26:dd:7d:3b:40:07:2e:d8:44:7f:19:80:dc:83:d4:88:e1: 6a:14:b0:ca:e7:a8:48:ea:29:1a:e8:e5:79:51:26:fa:b8:fe: 83:3d:78:20:d6:d2:fb:4f:9e:50:3a:fc:fe:9f:d7:63:6f:c1: 5f:2a:8e:4e:c3:51:9f:dd:f6:f9:74:63:1f:60:60:36:52:0a: 74:17:3d:20:ad:28:31:c7:7d:ff:19:60:b5:e9:3c:ef:0b:ab: 72:2a:38:56:ca:17:9a:14:4b:42:03:d4:0a:4c:dd:3b:ef:3f: 2d:7b:f8:41 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUH90ZmxtvsVMwyGwZRxVHPqigtvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4 QzFENTE1ODAeFw0yNTExMTEwNTU2NTJaFw0yNjExMTAwNjAxNTJaMDMxMTAvBgNV BAMTKDhBMzcxMDY1Rjk0OTRBOENCN0RDMkFBQzEyRTM1ODczNDUxODdCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGqVW30QmJwQ4ZTG1ZynKzPpR N3ltK3wGg1rfxrscHF44KqSK+YDTqgjkYg3HgIhd8v2VFQAB1xFyYPgtoXO7XIn4 ZMnUlOtJ9AHAY6GJdxNUxrYpUuMAhws6VWxNlDPCqCieGK52uEg/KGgiAi08wlom hwB310iKF8rUXF3ef6GpTm2L+mDjD2aZFKeOae6MropEDi0PFVjLZPzZIlD93xLM i39Y1HlSZ6ZOubf/BIYiRncYcdoUibkZVfVImkN0hxSvs7SKjtuuM9Bl2D2SI6gd FbbaNJyst492Dpo4IR1eINTKM5c7jWq4EDN50bIk/05rsmz+LMrMFyTovdtvAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUijcQZflJSoy33CqsEuNYc0UYeyUwHwYDVR0j BBgwFoAUTfPbPaIdACIgITBzbkzLBIwdUVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMS80REYzREIzREEy MUQwMDIyMjAyMTMwNzM2RTRDQ0IwNDhDMUQ1MTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGM0RCM0RBMjFEMDAyMjIwMjEzMDczNkU0Q0NCMDQ4QzFE NTE1OC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODExLWJlNTAtNGNhYS05 Zjk2LTYzZDM3MjAzMTFkZS8xLzMyMzQzMDM0M2EzOTM3NjMzMDNhNjQzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTM1MzMzMDM4Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk BJfA0DANBgkqhkiG9w0BAQsFAAOCAQEAuwgMtihVTB+9nhlvjhvhm6/P2wDte8Ft UKKGiRDuG2NnFlWGxdJr0+u4rZWKx22ZMgtylgyy4t1PFxzp43CTmHvZ85E4iWoW a7YrLhXRpjqjJCuyTXdZL5dcfWq55ujLMI4JqAf+2xxvYjJkwB164lfiv3elTTkp 4QC6g4ed7QAQvHEXwq+40urYDmNuP9JcuybdfTtABy7YRH8ZgNyD1IjhahSwyueo SOopGujleVEm+rj+gz14INbS+0+eUDr8/p/XY2/BXyqOTsNRn932+XRjH2BgNlIK dBc9IK0oMcd9/xlgtek87wurcio4VsoXmhRLQgPUCkzdO+8/LXv4QQ== -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:52 2025 by rpki-client