This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: cLkVLv+vK6mcj4WuUAKMOjuXWW7BFHPYNRSpLVGMP1U=
Subject key identifier: D3:E1:86:6B:06:B5:AA:13:40:0C:C6:63:6C:2C:08:D2:B7:82:21:8F
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 49DFD6ED820D0BC2330F297EEFDE48A5C41C3E6D
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
Signing time: Wed 28 Jan 2026 02:47:16 +0000
ROA not before: Wed 28 Jan 2026 02:42:16 +0000
ROA not after: Wed 27 Jan 2027 02:47:16 +0000
asID: 63859
IP address blocks: 2402:8780:1009::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:df:d6:ed:82:0d:0b:c2:33:0f:29:7e:ef:de:48:a5:c4:1c:3e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 02:42:16 2026 GMT
Not After : Jan 27 02:47:16 2027 GMT
Subject: CN=D3E1866B06B5AA13400CC6636C2C08D2B782218F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:c3:29:ab:df:e6:b9:52:b3:e3:d8:a7:50:
33:2f:ad:e5:9a:12:3f:94:11:ab:e1:c8:8b:49:b8:
fe:cf:1e:5c:5e:25:27:5e:dd:e2:05:b1:38:94:4d:
47:bf:fb:f3:08:86:57:c7:40:e9:f7:b6:2f:22:60:
da:a3:ba:9a:b1:13:42:9e:c2:2b:9d:f0:a5:1e:fb:
a3:e9:ca:17:a2:3f:5d:c8:e8:35:14:17:a9:25:5f:
97:d8:42:54:50:01:1d:f6:8e:89:ba:04:bd:e6:ad:
85:a9:59:dd:5e:7f:bd:e3:07:b6:f7:f3:a2:7f:0c:
62:4b:b3:03:30:40:3c:c3:36:e8:d5:21:de:5c:3e:
e5:c6:eb:28:a9:63:d4:46:74:fe:b6:4e:9c:1e:5d:
26:13:83:0a:9c:c0:b3:f4:0b:e3:92:10:1d:c8:d1:
12:73:b5:10:89:13:98:5c:70:7e:e8:db:e5:b8:d2:
23:23:cf:1e:e4:d2:a9:84:83:58:1c:de:91:50:4f:
a3:cd:44:dc:7d:96:bb:1a:3b:1e:fd:6e:3b:4f:90:
aa:32:37:c5:32:e5:2c:a4:7e:80:0b:48:1d:9c:39:
d1:e4:5e:13:bb:83:ab:2f:7b:ce:6c:3d:3f:db:5f:
f3:a5:02:e0:0e:bb:e8:aa:26:3b:9b:b8:17:e5:f0:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:86:6B:06:B5:AA:13:40:0C:C6:63:6C:2C:08:D2:B7:82:21:8F
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313030393a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1009::/48
Signature Algorithm: sha256WithRSAEncryption
b5:fa:82:e3:11:72:a8:83:cd:eb:e1:d6:2b:0d:ba:02:26:4c:
75:8e:1f:db:d6:cf:e9:3e:35:f3:4f:ef:1e:87:c8:82:60:8d:
25:e0:3c:35:1a:c4:15:ec:0b:35:0e:02:7e:33:d1:ed:0b:f8:
06:7d:fb:12:aa:14:65:86:23:12:e6:ac:e4:32:e1:fa:0f:18:
ce:63:7b:a9:ce:b8:28:c4:60:73:ab:46:08:0f:d2:d4:09:03:
71:cb:49:0c:02:dc:51:12:30:78:37:7f:39:d2:1b:5c:ba:b7:
62:09:22:b0:35:06:05:54:a7:4c:e6:8b:3a:77:c7:6d:57:21:
78:9d:15:41:87:e7:a1:f6:80:a2:a1:33:1b:8d:22:f3:e8:19:
4f:a5:72:5f:59:96:b3:25:83:ea:86:ca:e5:61:84:7f:11:a7:
e0:39:bb:d7:87:2e:20:95:7e:7e:b3:4b:36:0f:b3:29:ba:e1:
2d:9a:2d:69:65:28:63:18:45:1e:4e:f6:35:82:c2:7e:53:c8:
ed:ec:09:d5:60:21:a0:68:6a:50:30:ec:9a:9f:3f:80:46:e5:
66:d4:e6:7a:71:ed:6a:84:72:f4:5e:ad:a0:3c:cd:c7:0f:07:
eb:c3:3c:7a:d1:7f:7d:70:99:8a:39:83:7a:5e:97:e5:9b:14:
1a:60:df:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:35 2026 by rpki-client