This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa File: 323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa (raw, json) Hash identifier: 6HcO277GaZjOXm+v7uG2zFEFfYSJW1GGuV0jc8PjIjo= Subject key identifier: 8D:29:95:3F:9D:7C:86:C7:A3:ED:F7:08:4F:E8:B9:03:BE:DB:63:F5 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 76AF0130910E285639301D52D4445CEB016F6A88 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa Signing time: Tue 11 Nov 2025 01:17:00 +0000 ROA not before: Tue 11 Nov 2025 01:12:00 +0000 ROA not after: Tue 10 Nov 2026 01:17:00 +0000 asID: 58389 IP address blocks: 2404:fd00:10::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:af:01:30:91:0e:28:56:39:30:1d:52:d4:44:5c:eb:01:6f:6a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 11 01:12:00 2025 GMT Not After : Nov 10 01:17:00 2026 GMT Subject: CN=8D29953F9D7C86C7A3EDF7084FE8B903BEDB63F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d5:f5:43:8c:02:41:df:1c:b7:eb:0e:7f: d7:cb:1d:18:0d:01:b9:10:bc:f7:0d:5d:72:41:37: 6d:a3:0c:3d:f9:80:b7:ba:e9:8c:16:48:87:2a:a3: 3d:41:92:de:75:c9:8c:bb:67:5c:61:db:b3:0d:6c: e9:f7:de:0f:fa:cb:59:ff:38:88:f4:13:33:f6:ec: 81:29:b4:b9:ed:45:4c:e1:f4:81:65:25:30:07:0d: de:f6:57:0b:95:59:b6:08:3a:97:05:71:ba:66:aa: 97:2e:c5:b2:84:6c:7e:7e:2d:34:6a:be:99:df:59: 3d:1c:f1:a2:27:0d:7c:ec:15:50:a1:57:5c:90:f3: 60:83:cb:73:75:45:52:f6:09:68:79:e7:7c:bc:a3: 55:47:7b:67:88:92:2f:24:72:8b:0f:73:28:f2:15: 58:5f:26:29:65:d4:c4:78:63:e6:6f:84:68:cb:5f: e4:21:20:af:c5:87:3d:e4:57:c8:ef:4e:ae:95:6c: 7e:d2:b7:18:3e:1d:be:e0:43:89:77:31:fc:0a:ed: a7:8b:05:fb:f7:c5:72:3c:80:c9:b7:af:a6:63:1a: bf:3b:8e:c4:2f:1a:58:b2:a2:1a:f7:c4:70:7d:0a: fb:81:aa:f7:ed:9f:70:cd:6d:1d:2a:e3:50:09:61: c9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:95:3F:9D:7C:86:C7:A3:ED:F7:08:4F:E8:B9:03:BE:DB:63:F5 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a31303a3a2f34382d3438203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:10::/48 Signature Algorithm: sha256WithRSAEncryption 18:8e:3f:22:51:44:a2:90:c1:98:71:aa:ac:1b:42:c8:19:53: 3a:87:5e:8f:11:1a:ac:ce:ea:72:b4:dc:d0:76:45:ff:2f:d2: e6:f0:8d:14:3a:ae:6e:c9:4d:dd:16:f7:3c:9e:29:1f:0f:da: 08:22:8f:d9:65:1d:24:aa:42:e6:c6:3c:b4:69:c4:f3:79:48: 98:49:5a:b8:36:83:f7:db:39:5c:98:3b:1b:5c:68:98:4a:f1: bf:ba:79:6d:c7:fa:7c:db:97:14:f5:9e:d9:87:40:d4:3d:cf: 4c:2c:9c:7c:28:ce:27:19:a5:a2:06:60:3e:eb:d2:b0:83:2d: 63:34:a9:7b:a2:d5:3c:a4:72:fd:87:75:d2:40:9a:3a:a4:78: 71:d3:39:98:60:50:b2:08:b3:b9:14:06:f2:57:93:f0:50:93: 53:f0:3d:58:45:1d:e5:8a:ab:75:40:10:54:54:a8:76:8f:e9: 11:54:c0:3d:d4:af:b9:78:5c:2f:ff:b7:ab:bc:ae:3b:9f:65: b4:ad:d9:94:c0:d7:38:dd:4d:a4:bd:fc:d4:7e:ae:aa:9e:8c: ca:f5:c4:2c:b4:b0:95:71:2e:2a:c3:c0:d6:cd:c7:13:0c:50: c4:5e:04:1f:dd:69:84:81:d6:cf:9e:41:32:f0:29:31:da:bb: f3:29:95:0b -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUdq8BMJEOKFY5MB1S1ERc6wFvaogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTExMTEwMTEyMDBaFw0yNjExMTAwMTE3MDBaMDMxMTAvBgNV BAMTKDhEMjk5NTNGOUQ3Qzg2QzdBM0VERjcwODRGRThCOTAzQkVEQjYzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmdX1Q4wCQd8ct+sOf9fLHRgN AbkQvPcNXXJBN22jDD35gLe66YwWSIcqoz1Bkt51yYy7Z1xh27MNbOn33g/6y1n/ OIj0EzP27IEptLntRUzh9IFlJTAHDd72VwuVWbYIOpcFcbpmqpcuxbKEbH5+LTRq vpnfWT0c8aInDXzsFVChV1yQ82CDy3N1RVL2CWh553y8o1VHe2eIki8kcosPcyjy FVhfJill1MR4Y+ZvhGjLX+QhIK/Fhz3kV8jvTq6VbH7Stxg+Hb7gQ4l3MfwK7aeL Bfv3xXI8gMm3r6ZjGr87jsQvGliyohr3xHB9CvuBqvftn3DNbR0q41AJYckXAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUjSmVP518hsej7fcIT+i5A77bY/UwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzEzMDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AABAw DQYJKoZIhvcNAQELBQADggEBABiOPyJRRKKQwZhxqqwbQsgZUzqHXo8RGqzO6nK0 3NB2Rf8v0ubwjRQ6rm7JTd0W9zyeKR8P2ggij9llHSSqQubGPLRpxPN5SJhJWrg2 g/fbOVyYOxtcaJhK8b+6eW3H+nzblxT1ntmHQNQ9z0wsnHwozicZpaIGYD7r0rCD LWM0qXui1Tykcv2HddJAmjqkeHHTOZhgULIIs7kUBvJXk/BQk1PwPVhFHeWKq3VA EFRUqHaP6RFUwD3Ur7l4XC//t6u8rjufZbSt2ZTA1zjdTaS9/NR+rqqejMr1xCy0 sJVxLirDwNbNxxMMUMReBB/daYSB1s+eQTLwKTHau/MplQs= -----END CERTIFICATE-----Generated at Thu Dec 4 20:27:44 2025 by rpki-client