This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: NvPPSaT8BwrSe2+lBxElFJmmu54GgVbBcHfUoGBsY20=
Subject key identifier: 26:A0:20:F3:73:D2:7F:AB:22:6C:BE:8A:52:FF:B9:B5:7C:1D:D8:51
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 15244884BD5F8958F91C819F1757B1C43B68C2DC
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
Signing time: Wed 28 Jan 2026 02:39:51 +0000
ROA not before: Wed 28 Jan 2026 02:34:51 +0000
ROA not after: Wed 27 Jan 2027 02:39:51 +0000
asID: 63859
IP address blocks: 2402:8780:1057::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:24:48:84:bd:5f:89:58:f9:1c:81:9f:17:57:b1:c4:3b:68:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 02:34:51 2026 GMT
Not After : Jan 27 02:39:51 2027 GMT
Subject: CN=26A020F373D27FAB226CBE8A52FFB9B57C1DD851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:d9:8a:ad:c4:4d:0d:85:b1:25:c1:46:08:
06:2a:c4:3c:b1:9b:31:47:17:cf:8e:db:9c:e7:0f:
1c:57:44:e5:c3:74:c8:e1:28:c0:b3:35:d9:fd:64:
10:b6:40:31:40:33:fc:a1:00:44:b1:6e:4e:da:fe:
54:9d:50:bf:d4:8b:ac:1f:70:55:29:f8:dc:09:06:
56:aa:8c:a3:84:5e:7b:a0:74:14:c1:72:1c:c4:95:
3a:c0:6c:3b:e4:23:d8:67:43:34:35:17:4b:33:7f:
40:24:a7:67:0c:b8:ce:9d:5f:fe:30:06:f7:f9:63:
82:41:96:39:82:32:5c:ac:64:91:ae:35:e3:6f:b0:
5b:7a:e8:01:88:3b:a3:57:50:5d:5a:3b:77:10:d2:
62:db:9e:cb:ba:06:fc:85:6d:62:62:42:c8:b5:05:
96:19:12:f7:77:f9:0f:b0:da:bc:b8:be:1f:0e:8c:
e9:c0:68:70:9b:2f:76:f7:bf:16:36:30:c7:66:86:
5f:3a:40:bf:36:92:24:53:73:8a:20:14:97:d5:65:
f9:15:65:78:24:c3:3e:73:c5:d1:19:1d:87:97:e1:
4f:78:96:eb:a4:ed:86:0e:9b:2d:7c:11:ac:6d:c1:
57:b8:5d:72:41:17:b9:d7:76:54:b2:8e:2d:a0:16:
5f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:20:F3:73:D2:7F:AB:22:6C:BE:8A:52:FF:B9:B5:7C:1D:D8:51
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035373a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:1057::/48
Signature Algorithm: sha256WithRSAEncryption
ec:a8:39:96:ff:b7:b5:62:26:bb:30:48:09:85:5a:65:9b:20:
a1:c7:c6:d9:28:24:e2:10:87:f1:f7:42:cf:22:bb:a2:5d:4a:
d3:50:7f:2a:7f:67:dd:7c:c2:ea:c4:2a:45:81:ae:ca:84:2f:
9e:2f:9c:94:cb:eb:cb:6a:62:13:fc:65:f3:ca:03:88:d3:06:
71:43:e9:e3:d9:71:c0:cd:9d:60:84:d8:f1:79:cc:ae:5b:d8:
a0:21:94:f2:17:39:3c:18:6b:24:d8:65:42:c2:a2:5b:e9:27:
05:dd:e2:97:ae:06:f3:72:d3:ad:0f:9d:98:ac:16:db:f6:a0:
30:2d:19:4d:75:13:d7:05:49:7e:0c:33:86:46:45:af:60:2b:
2f:64:db:9b:d4:43:24:1f:1f:c6:31:86:1c:f5:8c:d0:36:ca:
a1:6f:0e:20:08:53:9f:3d:46:dc:60:a7:3d:57:30:3b:3c:1d:
2f:7a:07:f3:c8:bb:45:cd:8a:8f:c0:f2:0c:37:26:d6:c0:bd:
59:8c:e5:fd:b8:db:46:df:e1:7e:5c:6d:c4:28:e4:9b:ce:bd:
8c:c9:7d:5b:eb:aa:db:4c:79:c7:f3:36:e8:c8:24:87:a0:55:
2d:80:38:6a:60:05:78:d6:95:0e:d0:50:04:97:94:c1:b3:f9:
dc:46:85:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:34 2026 by rpki-client