This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: d4X0G1PCcjo4pU79OovEgrn/RZTilZubb8gOZdEdU1o=
Subject key identifier: B6:E7:BE:1D:25:9A:6B:AC:40:17:D5:F2:42:B6:68:F0:56:28:95:B9
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 2F994E1D4E15558DE7EB7315977E406C01D9AA69
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 07 Nov 2025 14:00:01 +0000
ROA not before: Fri 07 Nov 2025 13:55:01 +0000
ROA not after: Fri 06 Nov 2026 14:00:01 +0000
asID: 137316
IP address blocks: 2402:7ac0:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 20:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:99:4e:1d:4e:15:55:8d:e7:eb:73:15:97:7e:40:6c:01:d9:aa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Nov 7 13:55:01 2025 GMT
Not After : Nov 6 14:00:01 2026 GMT
Subject: CN=B6E7BE1D259A6BAC4017D5F242B668F0562895B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:2a:dd:5e:cb:00:16:81:76:c8:fd:40:26:
79:d8:65:72:9a:7c:0b:0d:e9:d5:b2:94:ec:04:4c:
23:98:e9:a0:74:ae:da:17:d9:6b:ef:66:2f:7e:13:
e6:7f:11:04:e6:57:86:d0:a2:2f:6a:f6:c7:cd:2d:
eb:f6:ae:d2:f6:d8:6e:d9:50:87:ee:e6:70:af:a9:
a5:cc:d2:08:60:e9:be:c8:77:ae:83:67:44:6e:08:
70:41:1b:a1:09:dc:ad:a3:b4:26:4c:a5:cd:22:77:
f7:f4:6e:80:72:56:2a:21:dd:b6:4f:e4:25:4b:72:
a7:d8:44:fe:43:b6:7f:1d:c0:e8:bc:d2:28:a2:f5:
5c:23:42:0d:e5:53:41:f5:0c:78:ed:70:fb:cb:2c:
c3:78:b1:2b:0f:55:08:f0:56:fe:fa:e5:53:7d:ff:
37:f1:0a:4d:a5:31:39:48:a9:87:e1:3d:4c:ed:0b:
43:43:4c:eb:a9:a1:9d:dd:9e:43:69:c1:bc:9e:c5:
dd:bd:24:85:b6:cc:20:17:23:59:28:07:07:7a:28:
44:0f:84:39:0a:ed:b2:92:e8:13:5f:b4:de:07:37:
64:72:09:71:41:03:fd:59:fe:60:1d:b0:e7:78:ba:
5d:19:e9:74:05:52:ec:06:c9:da:c6:a9:7a:06:d3:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:BE:1D:25:9A:6B:AC:40:17:D5:F2:42:B6:68:F0:56:28:95:B9
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a373030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
53:86:e1:d0:50:61:f6:27:80:6b:56:3e:fa:0d:82:6a:60:c2:
21:ed:9f:7b:54:77:9e:0f:37:d2:9f:bf:2d:04:31:8f:1d:b8:
c2:85:7b:1c:f8:29:de:e7:ef:ef:5c:68:26:ae:96:63:77:6f:
07:1a:98:0b:fb:d1:b7:7b:08:7e:f1:14:0f:86:d6:62:5a:6e:
1e:1d:4a:c9:33:e7:e7:1a:d2:29:e5:9e:88:81:bd:b7:91:26:
dd:d9:cd:34:c4:2d:e2:d3:65:a1:f1:1e:c8:34:98:11:5b:83:
04:f4:b0:ad:2a:01:0f:31:f8:e6:68:7e:99:43:28:4a:f9:fb:
e9:85:be:94:97:85:f5:5d:35:23:5c:06:d1:7a:3f:c2:89:24:
75:45:0c:3a:fd:08:f1:c3:2b:7f:b5:1e:a0:5b:66:e0:a8:14:
bc:8b:8f:01:b3:ed:77:83:93:dc:97:28:4c:f6:b9:00:ef:dd:
46:e6:64:25:b7:fb:a9:f9:34:2d:0a:6d:1b:93:b7:67:10:76:
7f:90:ac:b8:67:b6:77:16:2b:1a:02:63:0c:3e:44:e9:21:f8:
36:c3:ea:2a:04:8f:e6:ed:54:03:aa:6c:67:fc:b6:bb:82:19:
f5:b3:ce:93:86:c0:64:5b:a8:3c:b6:60:1b:7a:0b:40:bc:f5:
10:64:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client