This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa
File: 323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa (raw, json)
Hash identifier: vIO6PhCd4cB1k0BQaAZQv7MW8qfuF2ReRTB65p41S5s=
Subject key identifier: 90:01:86:F5:4A:2F:92:79:4F:68:00:67:5C:ED:27:8D:0E:FB:2B:51
Certificate issuer: /CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Certificate serial: 0298BE09718CAFC0A6A33B9623D72FD1B92AD10E
Authority key identifier: 73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa
Signing time: Fri 09 Jan 2026 09:02:33 +0000
ROA not before: Fri 09 Jan 2026 08:57:33 +0000
ROA not after: Fri 08 Jan 2027 09:02:33 +0000
asID: 150196
IP address blocks: 2001:df3:2540::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 08:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:98:be:09:71:8c:af:c0:a6:a3:3b:96:23:d7:2f:d1:b9:2a:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731DB67572B48A3A86F0475A0E21E1A27DFC6A8E
Validity
Not Before: Jan 9 08:57:33 2026 GMT
Not After : Jan 8 09:02:33 2027 GMT
Subject: CN=900186F54A2F92794F6800675CED278D0EFB2B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:5f:8f:c9:09:85:7b:4b:29:86:5f:63:aa:
bb:c8:fc:88:10:5e:3b:3d:a9:7a:07:cc:a0:e6:8a:
26:df:7d:7a:2f:ed:b4:46:78:09:d7:39:52:19:7c:
7c:20:76:24:97:b8:ff:bc:5a:c9:a3:4b:1a:5e:0c:
5b:2a:50:fe:64:d3:26:9f:aa:56:15:3b:a7:6d:02:
53:c8:b1:b3:31:aa:4d:31:44:cb:99:dd:e2:2a:81:
34:54:0a:96:0d:31:bf:f2:0f:e8:71:94:c1:73:bb:
24:4a:22:52:d1:0a:7b:32:6d:36:e2:a4:71:26:84:
39:04:6a:6d:67:45:68:6a:9b:e8:56:73:40:7f:7b:
64:1f:ad:ec:83:ef:b5:0a:a7:70:03:11:66:70:c2:
be:a3:d9:5f:60:c9:09:68:74:b4:d0:ad:da:32:2a:
ef:ee:cc:96:e7:d5:c5:7d:97:33:10:86:83:c0:01:
cf:1c:90:75:b2:ee:c9:fa:5f:93:02:6a:95:e2:87:
88:60:dd:93:d0:a7:c2:d5:c7:b1:18:b7:1c:bb:30:
d1:be:68:63:97:d1:5d:de:df:ad:f2:8d:b5:45:35:
b5:7a:73:99:f5:e1:89:e0:a8:27:00:b1:91:73:0c:
1d:7d:b7:48:72:3a:bc:1e:82:f9:fd:60:88:9d:57:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:01:86:F5:4A:2F:92:79:4F:68:00:67:5C:ED:27:8D:0E:FB:2B:51
X509v3 Authority Key Identifier:
keyid:73:1D:B6:75:72:B4:8A:3A:86:F0:47:5A:0E:21:E1:A2:7D:FC:6A:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/731DB67572B48A3A86F0475A0E21E1A27DFC6A8E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b75bfd0-a86c-4beb-9f99-aac33fb5e49f/0/323030313a6466333a323534303a3a2f34382d3438203d3e20313530313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2540::/48
Signature Algorithm: sha256WithRSAEncryption
66:05:27:ee:26:09:e3:dc:40:7f:d7:66:b9:3a:30:a6:cf:f1:
49:4f:b3:47:3d:cd:38:40:9a:73:44:5e:1b:27:75:22:56:39:
ae:5d:ab:18:a8:69:fe:0c:4e:cc:81:bc:12:76:6c:ec:78:f5:
3f:7d:16:2b:b7:0a:21:4a:d7:0b:86:d7:1c:b1:c0:53:5b:54:
bc:d8:47:fa:a3:7a:31:be:ac:09:d3:4e:c2:0b:2d:9c:8d:51:
b7:68:06:a0:ae:2d:7e:18:08:91:9c:6b:c0:60:46:d4:dd:b7:
a1:b8:0f:5c:32:9b:71:02:09:22:52:35:0f:cc:e9:56:2a:73:
cc:43:00:4e:82:93:07:e2:48:fd:3e:bd:dc:f6:01:a0:28:31:
4e:b0:2f:05:53:6d:6a:0b:ce:01:7a:69:74:3d:c5:7d:62:fe:
6a:f7:b5:13:4b:46:4d:54:9a:fe:46:bb:28:53:8e:62:7a:8b:
ff:38:b5:9f:a7:45:4a:dc:95:1c:8a:cf:5c:7d:0a:2c:80:51:
e5:2c:50:66:cb:5a:62:68:eb:da:a5:23:5d:61:5e:72:5d:6c:
d2:7f:7a:ab:14:a5:94:42:c8:fa:48:0d:85:4c:93:ac:5e:ae:
04:fe:45:d3:1c:17:a1:be:e3:e7:28:5a:02:7f:8e:d4:f0:c7:
d9:bd:34:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:41 2026 by rpki-client