This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a613030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a613030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: vE5q+h7beehObXKNV6C0Woof9EPb1stAQ0kvHkMDNkw=
Subject key identifier: F7:7B:35:7C:55:2A:A5:1B:DF:07:23:E5:0E:FC:78:67:7C:31:5D:BD
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 4BF541ADF89D6DF80AB1F77BC6169111DC8AA870
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a613030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 07 Nov 2025 14:00:02 +0000
ROA not before: Fri 07 Nov 2025 13:55:02 +0000
ROA not after: Fri 06 Nov 2026 14:00:02 +0000
asID: 137316
IP address blocks: 2402:7ac0:a000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 20:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:f5:41:ad:f8:9d:6d:f8:0a:b1:f7:7b:c6:16:91:11:dc:8a:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Nov 7 13:55:02 2025 GMT
Not After : Nov 6 14:00:02 2026 GMT
Subject: CN=F77B357C552AA51BDF0723E50EFC78677C315DBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:d3:11:a7:cb:9c:9c:8e:d9:5f:ee:cf:e0:
55:18:69:43:05:dd:9f:5d:55:fc:2b:23:5e:ff:a6:
85:de:f8:a7:bc:1c:bc:bf:de:e9:df:06:c7:0f:6c:
4b:a1:8b:93:d3:4d:1f:6f:52:c6:6f:51:59:cd:36:
c7:40:92:96:51:90:14:99:1b:67:82:04:8f:41:02:
55:f1:0a:72:61:b8:ab:0a:ca:7a:0a:ad:a5:1a:e8:
a2:87:cc:2d:a2:50:95:3c:45:25:44:ef:3f:92:3f:
25:66:5a:88:25:8f:8c:ba:b0:ba:e9:38:c6:22:38:
99:53:fa:fb:6a:f0:2c:bb:bc:ae:2b:ee:8b:08:c7:
40:d0:f0:cb:0c:07:4c:f0:60:04:0f:32:d1:65:4b:
2f:eb:a6:b6:9c:0e:06:cb:20:d0:4d:dc:e5:82:32:
9e:ae:40:a9:05:5e:cd:91:ad:5c:1b:35:7b:6f:e9:
01:2d:35:72:57:06:86:99:b6:ef:3a:65:1c:62:a8:
5b:00:db:22:81:12:2b:21:30:47:1a:bc:32:7c:4a:
93:ba:97:19:3c:84:44:8a:02:54:e3:83:2c:32:1f:
d3:15:59:82:b6:ba:7c:9b:9e:a1:cc:0f:b2:52:aa:
51:0e:7f:81:f6:70:fa:97:ce:22:53:3c:bb:fc:e6:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7B:35:7C:55:2A:A5:1B:DF:07:23:E5:0E:FC:78:67:7C:31:5D:BD
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a613030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:a000::/36
Signature Algorithm: sha256WithRSAEncryption
87:df:68:89:4d:6b:b0:48:74:df:5b:ee:a3:2f:df:ab:2d:d2:
67:9f:21:b2:c3:a7:7f:81:9f:eb:2e:ca:a1:d1:bf:5c:77:28:
69:48:f1:df:01:7b:c3:54:14:00:18:e9:85:3d:33:9e:1f:9d:
2b:58:a3:c1:95:66:50:4e:dd:7b:60:16:77:4a:16:fc:95:d8:
49:07:f0:60:1e:c2:29:c7:dc:82:13:55:34:fb:92:60:c3:ef:
4e:8c:dc:da:83:27:65:5a:f9:45:ce:5a:df:b5:af:8d:20:6c:
6c:8d:71:3f:49:cb:db:01:36:d3:00:83:a6:ef:26:48:04:9c:
04:8f:a6:fe:ca:13:e1:5e:a0:ef:66:9f:bf:3b:a6:4c:97:c0:
c2:ce:f7:bf:52:94:c2:1f:93:98:59:0d:1f:0e:47:1b:ba:fa:
0d:b2:3b:93:a3:2c:62:e5:08:b0:b2:e1:b4:e6:38:a6:5f:d4:
ef:a3:35:e9:d5:13:85:15:47:6c:5e:e3:37:20:18:4f:29:f5:
e8:ec:f7:22:08:9b:08:34:39:be:8d:2f:62:59:6c:22:a1:9d:
e5:3f:43:06:52:77:a3:ce:08:ad:93:61:bf:6d:83:84:80:a5:
84:88:6d:98:dc:0a:a4:82:33:d0:25:cd:96:4b:ed:f0:a9:72:
22:96:0a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:56 2025 by rpki-client