This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa File: 323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa (raw, json) Hash identifier: r8kueNNplcxuo46V5qLU1iHF6gh3FpYkabilTHHFETs= Subject key identifier: DC:F2:03:73:EC:F6:17:87:24:EB:27:5A:86:ED:A7:45:62:2B:D3:25 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 404EF2D70F22387B02CCD2EA1A92B24E8945BAFF Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa Signing time: Fri 14 Nov 2025 01:40:09 +0000 ROA not before: Fri 14 Nov 2025 01:35:09 +0000 ROA not after: Fri 13 Nov 2026 01:40:09 +0000 asID: 58389 IP address blocks: 2404:fd00:34::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4e:f2:d7:0f:22:38:7b:02:cc:d2:ea:1a:92:b2:4e:89:45:ba:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 14 01:35:09 2025 GMT Not After : Nov 13 01:40:09 2026 GMT Subject: CN=DCF20373ECF6178724EB275A86EDA745622BD325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b2:38:3b:26:c9:b9:55:34:d7:65:6e:c7:75: 58:c3:61:c1:7b:6c:16:ce:73:fc:0f:6c:8e:2f:52: c3:8b:32:a8:5d:b8:69:a1:f4:89:0d:79:5a:4b:66: d3:b9:02:21:e0:ee:c4:84:9b:bd:41:76:2f:eb:5b: 6f:e9:1e:e6:3e:15:3e:48:ef:30:49:a9:ec:f9:f5: 30:7c:cd:b2:71:cf:10:96:aa:7d:8f:82:bc:33:fb: 17:b2:c0:7f:d6:bb:dc:48:02:81:f1:6f:c1:93:5d: b8:be:b9:aa:70:03:46:f6:a0:44:bd:83:15:cf:24: a5:7f:ca:9a:67:0c:17:8b:cd:34:9e:4d:8b:b1:fc: 58:b2:ad:20:11:85:0b:72:e5:22:97:b4:82:72:3f: 7c:4d:15:c8:4c:0f:07:8d:09:7e:9a:e2:3a:5b:f9: 92:49:d1:6a:1e:8b:35:53:66:a4:97:c9:d4:64:e3: 61:f4:06:61:11:71:d8:91:b6:d9:b8:e9:80:db:22: f6:e4:bd:8a:ed:fc:46:07:e6:1b:40:13:92:90:ea: 06:f6:7d:57:05:4b:6f:3d:da:6b:da:b9:cf:8f:05: eb:f6:de:70:bd:7d:98:36:df:41:85:71:70:f1:04: 89:d1:eb:b5:57:12:19:91:48:36:14:57:1d:4b:62: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:03:73:EC:F6:17:87:24:EB:27:5A:86:ED:A7:45:62:2B:D3:25 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33343a3a2f34382d3438203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:34::/48 Signature Algorithm: sha256WithRSAEncryption 60:01:23:f1:ce:f6:6f:07:70:6d:a2:d6:b2:56:c2:3d:14:17: 82:a1:51:15:36:e2:cf:8c:ef:d6:0f:7b:05:b4:12:4b:ed:c1: 5d:89:73:d1:20:2e:11:7e:b3:fb:7f:31:6b:ac:7e:5f:89:62: 63:b6:79:dc:e0:b0:6f:ca:49:49:ad:48:f0:a0:63:01:ce:1e: a0:0b:88:99:86:0d:d3:c8:23:60:7e:ac:3d:a2:c2:e0:94:5b: 5d:44:1c:2d:1e:c6:11:e5:f9:ec:7a:85:15:9f:c4:b0:d9:4f: 12:d9:2a:c7:17:de:b3:79:9f:cf:96:08:bb:88:79:c7:03:e4: c4:8b:2c:a4:c6:fc:31:c2:df:23:db:29:5c:c7:4f:fb:49:d1: 77:be:99:a1:84:00:9e:6d:ed:1b:ea:81:5a:6b:e1:96:1f:27: 03:36:7f:db:16:5d:aa:9c:cc:d3:10:2b:d8:04:41:c0:f7:d8: 40:06:d8:e9:fb:d0:62:67:a0:62:ea:0c:b1:83:b6:f0:95:99: 28:2f:20:13:42:af:96:30:a8:49:77:3a:4d:69:bb:b8:2f:8c: 59:1e:a1:08:d1:3d:0c:f5:73:59:40:fe:59:3f:a3:37:df:ae: 43:64:0b:2a:6e:c1:f6:45:36:3e:27:ea:43:98:1e:cb:2c:fc: 7e:0d:64:16 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUQE7y1w8iOHsCzNLqGpKyTolFuv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTExMTQwMTM1MDlaFw0yNjExMTMwMTQwMDlaMDMxMTAvBgNV BAMTKERDRjIwMzczRUNGNjE3ODcyNEVCMjc1QTg2RURBNzQ1NjIyQkQzMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7sjg7Jsm5VTTXZW7HdVjDYcF7 bBbOc/wPbI4vUsOLMqhduGmh9IkNeVpLZtO5AiHg7sSEm71Bdi/rW2/pHuY+FT5I 7zBJqez59TB8zbJxzxCWqn2Pgrwz+xeywH/Wu9xIAoHxb8GTXbi+uapwA0b2oES9 gxXPJKV/yppnDBeLzTSeTYux/FiyrSARhQty5SKXtIJyP3xNFchMDweNCX6a4jpb +ZJJ0WoeizVTZqSXydRk42H0BmERcdiRttm46YDbIvbkvYrt/EYH5htAE5KQ6gb2 fVcFS2892mvauc+PBev23nC9fZg230GFcXDxBInR67VXEhmRSDYUVx1LYh07AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU3PIDc+z2F4ck6ydahu2nRWIr0yUwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzMzNDNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AADQw DQYJKoZIhvcNAQELBQADggEBAGABI/HO9m8HcG2i1rJWwj0UF4KhURU24s+M79YP ewW0EkvtwV2Jc9EgLhF+s/t/MWusfl+JYmO2edzgsG/KSUmtSPCgYwHOHqALiJmG DdPII2B+rD2iwuCUW11EHC0exhHl+ex6hRWfxLDZTxLZKscX3rN5n8+WCLuIeccD 5MSLLKTG/DHC3yPbKVzHT/tJ0Xe+maGEAJ5t7RvqgVpr4ZYfJwM2f9sWXaqczNMQ K9gEQcD32EAG2On70GJnoGLqDLGDtvCVmSgvIBNCr5YwqEl3Ok1pu7gvjFkeoQjR PQz1c1lA/lk/ozffrkNkCypuwfZFNj4n6kOYHsss/H4NZBY= -----END CERTIFICATE-----Generated at Thu Dec 4 20:29:17 2025 by rpki-client