This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa
File: 323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa (raw, json)
Hash identifier: vzxPnkksVZcJ0CZ9tDZ5dyPi1kCAeq8TKScOR0f2w9Y=
Subject key identifier: 10:59:3A:01:92:60:F4:97:95:D2:EA:99:76:04:0C:02:CC:E7:01:42
Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Certificate serial: 5DEAA0B60E702CD9D3D55FB144C1F9E0C689549D
Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa
Signing time: Wed 28 Jan 2026 02:40:02 +0000
ROA not before: Wed 28 Jan 2026 02:35:02 +0000
ROA not after: Wed 27 Jan 2027 02:40:02 +0000
asID: 63859
IP address blocks: 2402:8780:105a::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ea:a0:b6:0e:70:2c:d9:d3:d5:5f:b1:44:c1:f9:e0:c6:89:54:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4
Validity
Not Before: Jan 28 02:35:02 2026 GMT
Not After : Jan 27 02:40:02 2027 GMT
Subject: CN=10593A019260F49795D2EA9976040C02CCE70142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:7a:91:d2:31:62:6e:6a:cd:06:6f:fb:07:
49:fe:e5:65:c6:9b:62:55:ad:85:3c:66:45:ca:bf:
4d:bb:b6:1d:8e:46:cd:38:0b:3b:28:e4:8f:a2:87:
77:ab:d0:72:35:88:59:fb:86:3a:ac:8b:ac:96:50:
2a:ff:e5:8d:40:05:fc:59:b7:c3:3a:41:b6:25:dd:
a5:61:dd:6a:2d:c9:6a:73:43:cf:ec:8c:ad:dc:19:
b3:36:17:b6:70:a2:14:e1:31:44:c6:9a:b1:7f:8f:
52:73:0a:23:33:9d:ca:37:ba:47:0e:75:2b:bc:09:
72:f3:e5:84:94:b5:61:ea:d7:a7:8b:c8:d0:07:16:
14:6a:c9:0d:0d:02:e3:3f:e3:57:53:ae:65:f7:c7:
36:52:9a:ce:60:0e:a3:3a:48:eb:ad:ec:f8:ee:df:
09:11:54:90:7f:e1:5b:82:7f:71:98:b0:9a:d2:4c:
cd:d0:32:6a:bc:78:47:c0:33:3c:9f:e9:23:12:77:
4e:c6:d9:6d:cb:43:ad:8d:3b:32:ed:00:7f:74:36:
1c:fc:f9:60:9e:99:24:d5:12:9b:39:90:72:e8:e9:
31:48:65:a6:9e:de:6c:91:03:8d:0a:02:5e:64:ea:
60:44:5f:48:f3:05:e2:cc:ad:d5:82:22:aa:3b:cd:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:59:3A:01:92:60:F4:97:95:D2:EA:99:76:04:0C:02:CC:E7:01:42
X509v3 Authority Key Identifier:
keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/323430323a383738303a313035613a3a2f34382d3438203d3e203633383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:8780:105a::/48
Signature Algorithm: sha256WithRSAEncryption
48:29:48:26:8d:47:82:d8:55:ea:8c:ba:fd:97:64:39:be:c2:
a2:7b:f7:25:98:4e:3d:a6:7b:80:5d:a6:cb:92:93:60:e1:b5:
87:56:4f:74:56:ec:19:dc:31:d0:40:ea:ea:25:fd:74:68:5e:
e3:d6:87:de:cf:d5:38:24:ce:1c:7b:aa:f3:f5:34:2f:a2:33:
db:b9:15:57:77:ca:a6:d9:1c:3d:27:4d:18:ce:70:c3:bb:f4:
50:d5:52:e0:4d:5d:0b:46:bd:9e:8c:b7:78:38:2b:1f:c8:97:
fe:c3:7e:d2:5b:41:71:37:3f:4e:5a:e3:54:d7:51:5c:4f:01:
62:6d:62:c8:35:0d:c0:e4:21:da:85:1a:92:e1:bb:ff:1f:97:
07:98:ef:79:27:20:48:5f:49:9d:32:fc:49:d2:74:6b:eb:8b:
54:79:83:5b:de:65:7b:ed:75:be:3e:f1:86:b3:0c:1d:14:45:
11:02:10:f2:b3:28:28:90:6b:1f:c0:9d:cc:e2:8a:ab:68:56:
8a:ef:b3:4d:28:1b:ec:e5:d6:91:2f:93:2e:c7:6e:70:b6:ad:
cc:d3:c5:fc:ec:f3:55:2f:35:41:2e:b0:00:95:c8:f3:5a:c1:
3b:a3:d1:db:dd:c9:f3:19:75:16:ce:68:c1:54:87:51:81:5b:
1c:5a:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:50 2026 by rpki-client