This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
File: 323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier: 3LFDdqYh4K2fY0TB1x/Z0Y/tnScj8iUj1KZp5+O19OA=
Subject key identifier: C3:0E:2E:A2:F8:13:31:6E:3D:B7:EB:14:1E:C6:A4:55:0E:C6:32:D7
Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial: 6202008B30E3917CB7F77B60B264F2F55E42BEC5
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
Signing time: Fri 07 Nov 2025 14:00:02 +0000
ROA not before: Fri 07 Nov 2025 13:55:02 +0000
ROA not after: Fri 06 Nov 2026 14:00:02 +0000
asID: 137316
IP address blocks: 2402:7ac0:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 20:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:02:00:8b:30:e3:91:7c:b7:f7:7b:60:b2:64:f2:f5:5e:42:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Validity
Not Before: Nov 7 13:55:02 2025 GMT
Not After : Nov 6 14:00:02 2026 GMT
Subject: CN=C30E2EA2F813316E3DB7EB141EC6A4550EC632D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:2f:fd:ad:79:e1:44:f0:a3:bb:93:51:08:
db:fc:52:47:62:6b:d6:65:ad:19:00:7b:99:db:2c:
d8:34:98:06:49:08:cf:00:2d:7a:f9:be:32:49:e3:
ed:43:03:1a:e8:22:45:66:b5:1a:30:7d:1c:57:93:
8e:c8:0f:5e:26:f9:4b:55:f1:cb:06:4a:b7:bc:8b:
3c:dd:34:59:0f:c2:a0:82:77:4c:12:71:17:5c:24:
a3:4e:62:19:38:ee:ff:38:37:eb:e3:66:47:5f:07:
cd:00:a6:19:a8:5c:1a:4e:c1:99:e9:e5:b0:65:47:
41:72:34:d4:65:37:3e:a5:6b:62:5a:1b:51:6a:81:
d2:69:db:b7:e3:d8:ec:7e:05:93:5b:fe:61:4d:9e:
89:33:81:1c:f2:6b:0f:95:1e:bd:34:3c:ec:a1:ff:
84:62:1c:ed:2b:99:f9:fc:ab:11:3b:7b:a1:76:3e:
c4:a0:8d:33:45:44:11:95:e2:ad:1c:2b:eb:ce:23:
f0:33:12:46:a6:37:7b:11:b9:13:4b:02:eb:3e:b2:
37:20:97:e0:e9:2e:e4:47:d6:b8:eb:8a:b4:0e:a7:
3d:89:e7:0c:c9:bc:99:02:c0:7c:7a:c8:d2:37:50:
e6:34:fc:48:49:09:78:90:45:37:2a:60:7d:3d:97:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:2E:A2:F8:13:31:6E:3D:B7:EB:14:1E:C6:A4:55:0E:C6:32:D7
X509v3 Authority Key Identifier:
keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:7ac0:c000::/36
Signature Algorithm: sha256WithRSAEncryption
a9:07:eb:27:0f:f7:7a:83:9a:df:1f:61:b6:09:85:54:3e:e8:
e1:21:f8:ce:40:1d:58:08:59:6c:c1:79:d7:cf:11:2f:47:53:
e2:92:0d:bc:c6:c7:92:23:a9:71:e6:f5:d5:91:8d:c4:48:81:
6c:99:7a:ec:f8:2a:7f:b1:e0:f6:42:44:33:f6:7b:2c:39:10:
6c:c2:35:72:9a:50:a6:de:69:01:77:41:96:6d:7b:f9:29:ca:
ff:3b:1d:12:48:54:c3:2b:0c:0f:cf:b6:62:67:4d:f0:5c:4d:
99:17:5a:75:13:a7:ae:91:64:0d:8f:c7:53:e4:07:76:8c:87:
ce:bc:3f:b3:67:f5:b0:4a:b9:e9:d7:87:3f:82:e7:8b:ad:fe:
e7:67:53:a6:3f:f4:90:e4:d0:c9:b3:66:ee:4c:ac:16:4e:5e:
88:54:bb:b7:ab:df:3b:05:59:3e:55:09:08:62:c8:e6:f3:63:
19:98:a3:c3:85:b7:87:08:3f:3f:14:c2:95:e3:52:97:3b:89:
c8:99:1f:dc:5e:ed:fe:0f:eb:a2:d2:f8:72:e7:81:dd:be:42:
5d:d0:d4:45:f4:84:72:e9:bb:97:65:84:4a:6a:ca:a2:73:55:
c4:fa:f1:1d:2c:6f:e8:00:50:f0:6f:d6:26:26:2b:fb:ec:6d:
b8:9a:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:58 2025 by rpki-client