This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa File: 323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa (raw, json) Hash identifier: KcWz3MUH1CSa4X6CQR7NX7PRUrbLZBKA938gX7QJU5U= Subject key identifier: 2C:D3:64:C8:A3:B4:5E:EF:FE:AB:67:87:E9:F7:47:D3:4C:53:12:84 Certificate issuer: /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Certificate serial: 4966EC5F6320D2DF3397C5A74222E483DBADCD94 Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa Signing time: Fri 07 Nov 2025 14:00:01 +0000 ROA not before: Fri 07 Nov 2025 13:55:01 +0000 ROA not after: Fri 06 Nov 2026 14:00:01 +0000 asID: 137316 IP address blocks: 2402:7ac0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:66:ec:5f:63:20:d2:df:33:97:c5:a7:42:22:e4:83:db:ad:cd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D Validity Not Before: Nov 7 13:55:01 2025 GMT Not After : Nov 6 14:00:01 2026 GMT Subject: CN=2CD364C8A3B45EEFFEAB6787E9F747D34C531284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:4f:b6:b3:46:bd:d4:b0:cf:e9:8a:2d:6a: ec:1c:4c:0f:b5:72:2e:5a:ae:fd:d8:4e:8a:27:9a: 68:f9:6c:8e:75:dd:90:92:17:45:ef:ba:37:41:23: 7b:d0:26:ca:27:26:80:17:36:7c:36:b9:69:b4:20: ca:83:a9:b6:b4:20:e3:ed:55:22:f2:02:59:83:13: 48:fa:b5:49:93:4a:5e:a1:15:47:b3:7b:6c:7f:8c: 70:a3:03:98:47:d3:23:85:b5:5b:c5:45:e7:c8:1e: 2a:55:00:c2:4f:ed:ca:6d:88:37:75:ef:8a:72:1d: 5a:af:05:85:3e:83:04:79:85:81:f4:6d:59:6e:c2: 60:f9:d5:28:56:b7:9b:e0:ca:e8:ff:cb:21:5a:da: 7b:f9:e6:a2:1e:20:c1:c9:68:d9:b9:e4:32:38:a3: f2:9d:0f:d2:49:a3:3d:73:00:89:78:a1:23:8c:3b: 2a:e0:35:77:de:31:0c:b3:37:57:a2:60:b6:8a:11: 67:d0:85:9d:a9:a9:55:ec:62:9f:9e:06:61:77:ea: 05:88:d6:b3:8f:8f:e4:3a:7b:52:ae:c6:ef:23:d5: 55:41:45:7e:2f:9c:42:ec:68:a7:92:89:34:96:fb: 12:a5:91:8c:ac:98:51:e1:d2:8a:c0:16:8b:e8:9b: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D3:64:C8:A3:B4:5E:EF:FE:AB:67:87:E9:F7:47:D3:4C:53:12:84 X509v3 Authority Key Identifier: keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a663030303a3a2f33362d3336203d3e20313337333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7ac0:f000::/36 Signature Algorithm: sha256WithRSAEncryption 94:ee:94:91:3d:95:e1:83:25:3a:51:4e:c2:d4:bb:c4:c3:5a: 2f:d7:e2:ee:9b:4c:1f:5e:dc:7c:a2:32:f7:b7:d1:5b:9c:8e: 37:53:e8:b2:09:d2:29:40:15:fb:7d:e7:f1:db:97:4c:01:88: fc:95:96:4e:f9:fb:1d:83:a0:e9:a4:50:42:27:8e:6d:ab:36: ca:6d:5c:f2:c4:65:53:2c:ea:62:15:de:26:ed:7f:a0:3e:9c: 29:27:d1:f1:9a:95:a7:64:2a:1a:c5:6a:37:25:d2:9b:5e:8d: 25:5d:10:19:35:55:99:e1:4c:0c:28:7e:ed:1d:4c:f7:db:e3: c4:30:1f:d5:37:37:29:bc:02:0c:75:57:d4:d6:0f:4d:ce:fd: 0a:68:9f:54:95:53:1e:1d:c2:e7:1a:cc:0a:dc:f9:e9:15:44: 9e:43:01:ff:22:21:74:cf:5c:23:99:b8:4a:90:44:1b:82:21: 8f:5b:28:5b:d8:e6:32:3c:f7:0a:46:b2:2f:af:bd:5c:83:66: 04:12:02:01:33:bf:f5:15:a2:65:00:7d:a2:55:4d:fd:84:67: 97:ea:88:1f:09:ea:32:49:2d:30:5a:20:d1:91:f1:10:78:e6: 23:9d:5a:5f:aa:47:bd:b1:3b:f9:fc:bd:bd:86:95:f9:06:56: 2a:db:e4:1d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUSWbsX2Mg0t8zl8WnQiLkg9utzZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZB NUEwNjY2RDAeFw0yNTExMDcxMzU1MDFaFw0yNjExMDYxNDAwMDFaMDMxMTAvBgNV BAMTKDJDRDM2NEM4QTNCNDVFRUZGRUFCNjc4N0U5Rjc0N0QzNEM1MzEyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5AE+2s0a91LDP6YotauwcTA+1 ci5arv3YToonmmj5bI513ZCSF0XvujdBI3vQJsonJoAXNnw2uWm0IMqDqba0IOPt VSLyAlmDE0j6tUmTSl6hFUeze2x/jHCjA5hH0yOFtVvFRefIHipVAMJP7cptiDd1 74pyHVqvBYU+gwR5hYH0bVluwmD51ShWt5vgyuj/yyFa2nv55qIeIMHJaNm55DI4 o/KdD9JJoz1zAIl4oSOMOyrgNXfeMQyzN1eiYLaKEWfQhZ2pqVXsYp+eBmF36gWI 1rOPj+Q6e1Kuxu8j1VVBRX4vnELsaKeSiTSW+xKlkYysmFHh0orAFovom8LtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQULNNkyKO0Xu/+q2eH6fdH00xTEoQwHwYDVR0j BBgwFoAUezWDSkcEx+2F1iIS/GLEb6WgZm0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2M0NjJhNS04Zjc0LTQyYWYtODgzYi01ZTg5ZWU1ZjJkZjMvMC83QjM1ODM0QTQ3 MDRDN0VEODVENjIyMTJGQzYyQzQ2RkE1QTA2NjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IzNTgzNEE0NzA0QzdFRDg1RDYyMjEyRkM2MkM0NkZBNUEw NjY2RC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYzQ2MmE1LThmNzQtNDJhZi04 ODNiLTVlODllZTVmMmRmMy8wLzMyMzQzMDMyM2EzNzYxNjMzMDNhNjYzMDMwMzAz YTNhMmYzMzM2MmQzMzM2MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQk AnrA8DANBgkqhkiG9w0BAQsFAAOCAQEAlO6UkT2V4YMlOlFOwtS7xMNaL9fi7ptM H17cfKIy97fRW5yON1PosgnSKUAV+33n8duXTAGI/JWWTvn7HYOg6aRQQieObas2 ym1c8sRlUyzqYhXeJu1/oD6cKSfR8ZqVp2QqGsVqNyXSm16NJV0QGTVVmeFMDCh+ 7R1M99vjxDAf1Tc3KbwCDHVX1NYPTc79CmifVJVTHh3C5xrMCtz56RVEnkMB/yIh dM9cI5m4SpBEG4Ihj1soW9jmMjz3CkayL6+9XINmBBICATO/9RWiZQB9olVN/YRn l+qIHwnqMkktMFog0ZHxEHjmI51aX6pHvbE7+fy9vYaV+QZWKtvkHQ== -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:57 2025 by rpki-client