This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: Jtpz3rD9Yyq75ZXEV4fiIf87MNhg9y+hSwsJYEZnsqo=
Subject key identifier: D2:EB:EE:6A:EC:61:A6:76:75:85:FE:E6:E6:49:6F:FC:09:A5:71:C5
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 566A7E874C00155450AAA40F08E944DAE888643A
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa
Signing time: Wed 28 Jan 2026 02:47:43 +0000
ROA not before: Wed 28 Jan 2026 02:42:43 +0000
ROA not after: Wed 27 Jan 2027 02:47:43 +0000
asID: 63859
IP address blocks: 2402:8780:1014::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:6a:7e:87:4c:00:15:54:50:aa:a4:0f:08:e9:44:da:e8:88:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 02:42:43 2026 GMT
Not After : Jan 27 02:47:43 2027 GMT
Subject: CN=D2EBEE6AEC61A6767585FEE6E6496FFC09A571C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:ae:12:a4:a4:84:be:25:ff:9b:9e:7a:cb:
a3:0c:e4:fb:94:6b:3c:47:94:3d:55:4d:15:e8:54:
c3:44:c3:d1:05:d5:44:a2:a8:a1:31:a3:91:83:d9:
14:01:92:a3:bc:a7:b3:30:ce:9b:0f:1e:3c:56:a9:
bd:0e:3c:09:71:99:9a:fc:7b:b0:a1:09:2c:a9:39:
0e:0d:4a:1f:38:bd:8f:d4:cb:37:a7:1b:cb:c6:f8:
8d:b9:15:b4:9d:fa:9c:a8:81:0a:55:4b:5b:97:59:
01:b2:b8:85:00:92:d1:79:a3:10:7f:7f:e7:c1:4e:
fe:b3:c9:70:ac:be:3f:e7:8d:54:c6:b5:c0:4c:12:
4d:4d:54:69:5c:08:fe:e6:bc:de:26:ef:b5:2d:9a:
79:47:7d:60:3c:9a:3a:dd:4d:27:19:67:a4:af:97:
59:e8:36:a6:86:fa:e0:61:93:7f:23:37:15:fd:fe:
0d:33:d0:de:8e:99:21:f4:97:26:89:47:ec:06:97:
58:8d:d7:a2:51:0a:0b:c0:08:d4:ab:c4:fa:46:07:
92:8a:b5:3e:9a:cd:f8:c5:fa:6b:d6:85:65:d7:03:
38:2f:98:de:fd:98:62:ab:90:ff:dc:00:33:79:57:
c3:82:1d:24:86:0d:c5:46:d8:1e:82:db:da:ec:b2:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:EE:6A:EC:61:A6:76:75:85:FE:E6:E6:49:6F:FC:09:A5:71:C5
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313031343a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1014::/48
Signature Algorithm: sha256WithRSAEncryption
61:0b:75:c8:98:1a:b7:a1:1d:3c:b1:95:db:6d:f4:34:9b:da:
cb:0f:fe:3c:e8:ec:35:c3:b6:d9:a4:ad:4d:a0:d4:ac:87:72:
56:33:4f:dd:72:ab:09:77:b6:d3:4a:a8:88:e2:b0:31:df:4c:
ef:e5:63:d5:e7:4e:76:1a:d0:3d:18:6f:ff:4c:15:bb:2e:d2:
cf:37:44:9b:b7:64:8b:89:98:96:f1:c6:b3:80:81:9e:12:db:
34:3d:16:2a:df:6d:71:c5:cc:52:51:d7:88:a3:90:16:90:34:
47:b7:61:60:61:4e:62:f3:fa:49:a5:d8:96:f8:56:2f:e7:e0:
1d:de:ec:54:f8:d9:dd:8f:e6:e2:e3:0d:8a:97:8a:8b:7a:5a:
70:80:33:da:27:73:a1:cf:9e:d1:7b:4b:b0:d1:c5:b1:2b:6e:
6c:c1:37:28:68:52:97:62:8c:82:3a:40:c8:50:82:83:d4:94:
e7:66:a7:1b:42:56:b9:bf:04:bf:ac:e9:ab:4f:ea:85:7e:c4:
d3:dc:6f:5c:f8:14:55:5e:3d:6f:13:4e:f6:13:0b:1e:1d:d1:
c2:45:99:2f:46:5f:eb:57:86:40:13:66:2d:04:4c:0d:da:6d:
2b:07:8f:9c:d3:2a:dc:10:fc:37:6c:ea:50:68:af:dd:a8:b2:
53:c3:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:51 2026 by rpki-client