This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa
File: 323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa (raw, json)
Hash identifier: rUQSiT3dkKPXkOBoezZqlfXKo+zy3zNzDxs4QPbn2Js=
Subject key identifier: B4:A1:EF:43:AC:A6:32:50:C4:E9:79:C5:A6:4A:A1:16:FA:10:9C:41
Certificate issuer: /CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Certificate serial: 074C9CAF89C00E3A83EB436EF0DFE3EA73FD2234
Authority key identifier: E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa
Signing time: Wed 05 Nov 2025 11:55:13 +0000
ROA not before: Wed 05 Nov 2025 11:50:13 +0000
ROA not after: Wed 04 Nov 2026 11:55:13 +0000
asID: 135474
IP address blocks: 2406:f180:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 03:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4c:9c:af:89:c0:0e:3a:83:eb:43:6e:f0:df:e3:ea:73:fd:22:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E01F80F5B6C41210CA0370AEEFC9794EF0F0644A
Validity
Not Before: Nov 5 11:50:13 2025 GMT
Not After : Nov 4 11:55:13 2026 GMT
Subject: CN=B4A1EF43ACA63250C4E979C5A64AA116FA109C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:1c:0a:1a:10:f9:01:03:9e:5a:7b:61:4f:
ad:dc:28:37:2f:f1:bf:5e:45:62:9f:f4:50:69:ae:
22:8a:6d:94:c8:e7:81:dc:7b:71:7b:79:c8:1f:f5:
6a:b8:44:ec:b0:bd:8f:2f:da:10:c7:d9:fa:0e:d1:
86:0e:a2:f1:a6:9a:eb:2f:6a:75:b8:58:e7:36:38:
ea:18:99:62:70:58:47:dd:15:72:cc:c0:0e:fe:6c:
e6:50:8d:0f:04:e0:ae:98:58:73:eb:c6:bf:93:79:
42:27:89:5c:31:2f:2f:cf:b4:f1:fe:a1:3c:c0:f9:
6c:d9:88:1f:4a:ba:ff:f7:cb:9c:31:af:0f:fe:d8:
49:81:1b:28:cc:fb:23:67:4a:25:7a:80:b9:d6:e3:
8f:63:38:e7:07:63:2f:be:b2:58:ac:b7:f3:b7:c6:
d9:b5:75:d3:da:06:ac:c0:f4:fd:84:dd:ce:0b:ae:
71:af:1b:82:91:76:9e:2d:9e:06:7f:48:d1:5d:c0:
21:4f:7d:5c:d9:75:88:36:a9:ef:b4:89:0b:63:18:
7f:73:e9:b1:b6:a5:11:33:7d:ee:ae:8a:13:5c:b9:
50:da:c4:9b:9b:f6:b1:66:c3:fd:2a:26:1a:ee:0c:
bb:ab:92:0f:9b:7b:49:98:e6:f9:2d:d2:96:68:70:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A1:EF:43:AC:A6:32:50:C4:E9:79:C5:A6:4A:A1:16:FA:10:9C:41
X509v3 Authority Key Identifier:
keyid:E0:1F:80:F5:B6:C4:12:10:CA:03:70:AE:EF:C9:79:4E:F0:F0:64:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E01F80F5B6C41210CA0370AEEFC9794EF0F0644A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/323430363a663138303a31303a3a2f34382d3438203d3e20313335343734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:f180:10::/48
Signature Algorithm: sha256WithRSAEncryption
ba:7b:22:93:70:e7:47:f6:bb:06:05:31:8b:17:ad:42:43:87:
9b:f0:42:f4:38:b7:e1:68:90:01:bb:f7:0c:39:4f:78:b3:55:
50:1e:02:1e:eb:29:f9:53:d1:1f:b1:b9:df:0a:fb:d4:4d:9a:
49:a2:ee:65:23:3f:bb:67:8f:b3:94:d1:a2:f4:a5:42:d9:2b:
e6:80:d6:e1:f0:a5:04:71:7e:ea:3a:ef:8c:7f:84:80:83:41:
32:85:b7:f2:da:fd:f2:16:ac:85:a7:0c:dd:0e:e3:4b:22:56:
1a:ea:f0:88:c6:01:65:19:98:dc:5e:4b:8c:74:43:9c:0c:da:
74:d4:26:d3:e6:33:10:5e:4a:9e:dc:f8:95:72:c0:3c:94:02:
56:17:02:4e:9b:fb:42:32:6e:fe:47:f1:e5:77:45:58:c1:dc:
a9:e0:7a:4d:4b:f0:ca:13:1e:d9:4d:9f:d5:4c:81:75:53:64:
be:69:01:91:54:d6:eb:eb:3e:a0:5b:e3:0a:16:4b:f3:1a:ee:
19:e0:ed:71:93:1f:6e:53:eb:11:5e:8b:65:16:95:e7:64:b1:
2d:a1:d9:ca:e8:ad:42:a3:c7:3d:d8:71:20:9b:0a:0e:08:a4:
7d:a7:72:f0:ef:b7:55:83:ef:ae:b1:e7:f8:08:34:f6:a0:a9:
20:4c:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:51:20 2025 by rpki-client