This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa File: 323430363a323134303a3a2f33322d3438203d3e203234323032.roa (raw, json) Hash identifier: p3sc5JCZxSC+hdqWbo6JJdIFh1HtM6tVkFkCKEfAzPI= Subject key identifier: 9C:13:B6:50:1B:F9:63:05:20:24:40:E6:EF:2D:5A:9F:2A:B2:F8:26 Certificate issuer: /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Certificate serial: 75EA0EB6097DBD06E8E0BE42A532DFAB9E106B12 Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa Signing time: Sun 26 Oct 2025 06:02:24 +0000 ROA not before: Sun 26 Oct 2025 05:57:24 +0000 ROA not after: Sun 25 Oct 2026 06:02:24 +0000 asID: 24202 IP address blocks: 2406:2140::/32 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 14:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ea:0e:b6:09:7d:bd:06:e8:e0:be:42:a5:32:df:ab:9e:10:6b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Validity Not Before: Oct 26 05:57:24 2025 GMT Not After : Oct 25 06:02:24 2026 GMT Subject: CN=9C13B6501BF96305202440E6EF2D5A9F2AB2F826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:14:d1:6f:65:3f:83:a6:ef:80:96:82:cd: 9f:2d:22:b3:20:b6:47:50:69:bd:7b:46:7e:a0:27: cc:ab:73:78:65:e2:5e:8b:41:07:4c:59:1e:5d:d4: 1b:80:a6:68:ba:9a:45:37:f8:d8:9b:a2:f6:25:32: 5e:25:f0:57:87:1b:83:bc:64:a8:dc:07:5a:14:cc: 4b:df:91:c5:cf:46:e3:d5:19:81:82:d9:86:65:e9: f3:2a:c1:bc:97:d9:11:5b:75:d9:b5:2a:89:a2:8f: ff:8f:31:d4:f6:ee:51:47:52:ec:e3:d0:5a:b1:30: 27:dd:25:48:2f:c1:fe:e4:2c:c0:66:cc:52:68:30: b3:a7:00:69:cc:d5:07:82:57:6d:3f:0c:e3:39:97: 35:a8:c7:bf:93:f4:18:e9:e7:d6:79:76:5f:a7:d1: 18:52:a2:88:94:34:41:80:aa:57:61:98:5a:cc:67: 99:8d:d3:95:59:44:1f:47:89:02:cb:bc:f8:7e:03: c7:a4:a6:22:a9:d9:73:f8:5f:0c:8d:53:ca:3b:08: 85:c7:a9:3d:d6:85:b7:ea:87:7a:dc:d5:b2:62:1c: 0e:8d:88:97:65:72:74:58:46:69:f2:68:62:29:06: 49:94:92:9c:60:1e:9b:8b:c4:1d:c5:7a:34:72:6b: d5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:13:B6:50:1B:F9:63:05:20:24:40:E6:EF:2D:5A:9F:2A:B2:F8:26 X509v3 Authority Key Identifier: keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/323430363a323134303a3a2f33322d3438203d3e203234323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 73:dc:8e:ce:d2:9b:5e:30:a7:84:77:d1:28:22:6e:34:45:65: a8:3c:34:8a:b8:d3:d5:22:43:fd:c2:db:29:98:0c:c8:49:17: 80:17:38:6b:0a:d2:1c:4e:47:ee:ec:7d:e8:79:a2:66:7a:31: ff:35:0c:e6:85:d7:de:b1:a0:a2:81:d0:ad:7f:dc:7c:e7:ff: 88:f1:9a:f0:ba:6c:74:1c:f9:64:07:a9:50:fc:15:b1:62:fc: 2c:ae:a1:80:bf:33:a6:60:f0:21:e0:cb:3f:dc:e2:1a:a2:3e: 5f:18:76:c4:11:07:e1:18:8d:25:8a:2e:25:73:8a:b1:76:92: 3f:11:4d:da:80:66:c5:d3:36:37:19:57:8d:ee:82:96:9c:93: 29:13:37:62:d6:3b:f2:17:4f:1f:65:7a:bf:34:a7:3d:01:1f: 75:6f:2d:40:e6:08:ac:48:a4:07:11:75:26:fc:02:b5:e2:08: cb:3b:ef:9e:ed:35:22:c6:b2:6e:f2:64:f8:c9:cf:5d:b2:a6: 11:27:5f:9c:3f:d3:27:3a:bd:4f:f5:cb:e7:19:be:76:18:c8: 04:5c:26:05:d3:2d:33:fe:f8:b5:3b:ab:53:8f:61:c0:42:7b: b7:c9:e9:87:fe:5a:df:a6:5e:f7:c5:bb:23:af:73:cc:a7:6c: 0f:43:7c:fa -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUdeoOtgl9vQbo4L5CpTLfq54QaxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5 NTNGMDc0QzAeFw0yNTEwMjYwNTU3MjRaFw0yNjEwMjUwNjAyMjRaMDMxMTAvBgNV BAMTKDlDMTNCNjUwMUJGOTYzMDUyMDI0NDBFNkVGMkQ1QTlGMkFCMkY4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbhTRb2U/g6bvgJaCzZ8tIrMg tkdQab17Rn6gJ8yrc3hl4l6LQQdMWR5d1BuApmi6mkU3+NibovYlMl4l8FeHG4O8 ZKjcB1oUzEvfkcXPRuPVGYGC2YZl6fMqwbyX2RFbddm1Komij/+PMdT27lFHUuzj 0FqxMCfdJUgvwf7kLMBmzFJoMLOnAGnM1QeCV20/DOM5lzWox7+T9Bjp59Z5dl+n 0RhSooiUNEGAqldhmFrMZ5mN05VZRB9HiQLLvPh+A8ekpiKp2XP4XwyNU8o7CIXH qT3Whbfqh3rc1bJiHA6NiJdlcnRYRmnyaGIpBkmUkpxgHpuLxB3FejRya9WxAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQUnBO2UBv5YwUgJEDm7y1anyqy+CYwHwYDVR0j BBgwFoAU+VnYgxRLC/voDpjATua29pU/B0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMC9GOTU5RDg4MzE0 NEIwQkZCRTgwRTk4QzA0RUU2QjZGNjk1M0YwNzRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk1OUQ4ODMxNDRCMEJGQkU4MEU5OEMwNEVFNkI2RjY5NTNG MDc0Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5LTdlZTgtNGE4My04 MDA0LTIzNGQ5MTRhMGZkNC8wLzMyMzQzMDM2M2EzMjMxMzQzMDNhM2EyZjMzMzIy ZDM0MzgyMDNkM2UyMDMyMzQzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBiFAMA0GCSqGSIb3 DQEBCwUAA4IBAQBz3I7O0pteMKeEd9EoIm40RWWoPDSKuNPVIkP9wtspmAzISReA FzhrCtIcTkfu7H3oeaJmejH/NQzmhdfesaCigdCtf9x85/+I8Zrwumx0HPlkB6lQ /BWxYvwsrqGAvzOmYPAh4Ms/3OIaoj5fGHbEEQfhGI0lii4lc4qxdpI/EU3agGbF 0zY3GVeN7oKWnJMpEzdi1jvyF08fZXq/NKc9AR91by1A5gisSKQHEXUm/AK14gjL O++e7TUixrJu8mT4yc9dsqYRJ1+cP9MnOr1P9cvnGb52GMgEXCYF0y0z/vi1O6tT j2HAQnu3yemH/lrfpl73xbsjr3PMp2wPQ3z6 -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:47 2025 by rpki-client