This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa File: 323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa (raw, json) Hash identifier: ri4nrvglv2bSljdZyCWQdxtL/0yY0v4eIHhcZScLNhc= Subject key identifier: 60:62:B5:AB:22:89:B4:70:75:2F:59:8A:36:93:E7:B8:2C:BD:9D:CB Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 4B63B76583E0C2F3D65D627B9A96B555E78B2B88 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa Signing time: Fri 14 Nov 2025 07:24:12 +0000 ROA not before: Fri 14 Nov 2025 07:19:12 +0000 ROA not after: Fri 13 Nov 2026 07:24:12 +0000 asID: 58389 IP address blocks: 2404:fd00:36::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:63:b7:65:83:e0:c2:f3:d6:5d:62:7b:9a:96:b5:55:e7:8b:2b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Nov 14 07:19:12 2025 GMT Not After : Nov 13 07:24:12 2026 GMT Subject: CN=6062B5AB2289B470752F598A3693E7B82CBD9DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:00:41:ca:c7:af:30:89:fd:ec:23:71:26: 0b:6d:9b:53:e8:cd:3d:2d:8e:2c:d7:6e:6a:a9:b3: f4:f2:74:03:46:be:f4:1f:97:ef:db:8d:08:32:01: af:48:57:88:21:6a:ee:16:89:d4:42:f4:e0:88:18: 7f:38:c2:5a:2d:a2:43:2d:f2:59:ab:10:7e:b8:d6: 55:b3:62:f4:3b:f4:e7:ae:b4:67:c1:e6:22:8b:d3: e8:f0:02:4e:e9:f0:8c:87:94:3e:fd:d7:e1:08:00: c7:54:ec:8c:7a:74:cb:c2:64:38:04:7b:eb:b3:ac: bf:4f:51:ee:94:a8:06:bd:9e:44:05:47:d6:6a:c4: 18:4e:be:7a:37:bc:05:28:bd:cf:a5:e0:03:c9:bd: a7:c9:de:d5:ce:62:8f:e3:fa:19:3c:90:9d:2f:03: b9:df:2e:30:ce:07:48:79:7c:47:b5:dd:f5:5f:6e: ac:ef:db:7d:bd:44:b7:50:c9:32:9c:44:c0:f6:cc: 1a:33:5e:df:49:f7:9a:f6:ff:fb:6d:41:00:e5:a1: c6:0f:fc:cc:22:25:a9:e1:4f:b5:de:ff:f1:3e:5b: 48:2f:88:2e:74:87:3f:35:70:9d:54:d0:76:ea:89: af:a6:37:f0:01:7e:21:7c:1d:e1:93:77:9e:4b:8a: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:62:B5:AB:22:89:B4:70:75:2F:59:8A:36:93:E7:B8:2C:BD:9D:CB X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/323430343a666430303a33363a3a2f34382d3438203d3e203538333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:fd00:36::/48 Signature Algorithm: sha256WithRSAEncryption 42:d6:a9:fd:f2:ff:3d:87:72:fd:09:a6:48:00:ff:bd:7e:84: e3:1d:50:1f:9c:17:90:4a:f4:32:20:98:ee:de:6e:fd:a9:7f: f8:29:80:1a:2f:c7:b3:92:f2:a8:0f:b8:ca:d4:28:0e:3d:96: 71:df:0f:fc:93:02:54:6f:82:b9:fe:bb:ce:db:21:75:fe:f0: 11:1f:a2:45:b4:f5:65:8a:8b:f9:0b:55:3a:d7:57:92:d7:85: 16:e8:3c:a9:e3:73:44:ab:7d:6e:ec:7e:0e:db:28:1b:53:82: c0:15:3e:3b:73:04:87:91:c4:5e:1b:3d:7f:e0:89:95:3f:64: ef:9f:a4:00:4a:ac:b9:64:31:c8:29:25:02:ce:02:03:82:43: d3:f4:77:e4:e2:41:b1:54:79:7f:7e:8f:6c:0a:0c:5d:b2:93: bf:80:d2:e8:57:45:d1:30:85:3b:84:ee:a8:41:06:77:4b:08: 90:40:29:60:13:88:71:b4:0e:af:71:63:4b:23:fe:ca:66:b4: 79:6f:d9:ec:69:81:f0:ba:df:28:af:39:7d:b3:83:f2:c0:74: 22:35:b6:a4:7c:d2:cd:f0:50:56:82:84:0b:db:8a:ad:4e:48: b9:53:d9:24:13:f3:ab:32:2f:6a:0d:3c:be:70:9c:85:d7:6b: e8:1a:5b:7a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUS2O3ZYPgwvPWXWJ7mpa1VeeLK4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTExMTQwNzE5MTJaFw0yNjExMTMwNzI0MTJaMDMxMTAvBgNV BAMTKDYwNjJCNUFCMjI4OUI0NzA3NTJGNTk4QTM2OTNFN0I4MkNCRDlEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA5wBBysevMIn97CNxJgttm1Po zT0tjizXbmqps/TydANGvvQfl+/bjQgyAa9IV4ghau4WidRC9OCIGH84wlotokMt 8lmrEH641lWzYvQ79OeutGfB5iKL0+jwAk7p8IyHlD791+EIAMdU7Ix6dMvCZDgE e+uzrL9PUe6UqAa9nkQFR9ZqxBhOvno3vAUovc+l4APJvafJ3tXOYo/j+hk8kJ0v A7nfLjDOB0h5fEe13fVfbqzv2329RLdQyTKcRMD2zBozXt9J95r2//ttQQDlocYP /MwiJanhT7Xe//E+W0gviC50hz81cJ1U0Hbqia+mN/ABfiF8HeGTd55LioXpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUYGK1qyKJtHB1L1mKNpPnuCy9ncswHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMyMzQzMDM0M2E2NjY0MzAzMDNhMzMzNjNhM2Ey ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzgzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkBP0AADYw DQYJKoZIhvcNAQELBQADggEBAELWqf3y/z2Hcv0JpkgA/71+hOMdUB+cF5BK9DIg mO7ebv2pf/gpgBovx7OS8qgPuMrUKA49lnHfD/yTAlRvgrn+u87bIXX+8BEfokW0 9WWKi/kLVTrXV5LXhRboPKnjc0SrfW7sfg7bKBtTgsAVPjtzBIeRxF4bPX/giZU/ ZO+fpABKrLlkMcgpJQLOAgOCQ9P0d+TiQbFUeX9+j2wKDF2yk7+A0uhXRdEwhTuE 7qhBBndLCJBAKWATiHG0Dq9xY0sj/spmtHlv2expgfC63yivOX2zg/LAdCI1tqR8 0s3wUFaChAvbiq1OSLlT2SQT86syL2oNPL5wnIXXa+gaW3o= -----END CERTIFICATE-----Generated at Thu Dec 4 20:26:27 2025 by rpki-client