This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa File: 323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa (raw, json) Hash identifier: dFQhxxhIxqRHu+YRpdoF0va5NYJwS4I6YJDx/CCdh1g= Subject key identifier: 43:23:F0:A5:E0:78:24:86:16:99:D3:8A:73:0D:B5:CF:2F:21:FD:E7 Certificate issuer: /CN=30C39359651C33B59AC32BC46831980108960568 Certificate serial: 37F60454AF4AF6043FB804318E70D42862B60884 Authority key identifier: 30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa Signing time: Wed 17 Sep 2025 03:00:01 +0000 ROA not before: Wed 17 Sep 2025 02:55:01 +0000 ROA not after: Wed 16 Sep 2026 03:00:01 +0000 asID: 137297 IP address blocks: 2001:df3:d700::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f6:04:54:af:4a:f6:04:3f:b8:04:31:8e:70:d4:28:62:b6:08:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30C39359651C33B59AC32BC46831980108960568 Validity Not Before: Sep 17 02:55:01 2025 GMT Not After : Sep 16 03:00:01 2026 GMT Subject: CN=4323F0A5E07824861699D38A730DB5CF2F21FDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:0a:39:d5:18:0f:d4:4e:4a:70:b9:b5:95: 06:e1:1e:dd:e4:ae:d0:25:60:06:93:f3:d7:95:b0: fc:94:13:72:af:27:ed:16:03:94:89:3a:35:84:2b: df:ab:0d:6b:14:e2:16:46:22:6f:8f:e8:80:5b:be: e7:ab:8c:12:88:1c:73:00:38:56:0f:19:c7:8e:f8: 15:15:e7:be:cc:f7:6d:da:d6:78:9a:0b:37:52:4d: bd:85:a6:f4:8b:3c:54:72:75:d1:e0:53:e9:e2:7b: 34:71:65:75:68:75:17:21:98:f5:94:60:08:4b:78: f6:02:f5:6b:e4:f3:22:56:cc:8d:f7:7f:58:ec:3f: 49:71:16:fc:ef:bf:ed:43:41:15:c5:7e:fa:2a:59: e7:53:7a:70:92:77:cc:b1:25:00:ec:94:40:57:ee: d5:85:1c:d9:ad:65:90:5e:32:1a:cb:21:30:34:99: f8:e4:15:2a:c8:05:78:52:e8:ef:f9:62:6e:70:11: 8c:61:18:46:06:5f:ef:a3:9e:61:9e:9d:83:6a:c6: 85:1e:79:9a:e6:2d:f0:a8:87:dc:df:b0:9b:27:ab: 1e:8b:5f:e8:41:a1:7c:d0:f9:3c:08:b1:da:67:e4: 80:d3:1b:b4:f1:2f:4c:4b:c6:90:52:92:da:24:48: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:23:F0:A5:E0:78:24:86:16:99:D3:8A:73:0D:B5:CF:2F:21:FD:E7 X509v3 Authority Key Identifier: keyid:30:C3:93:59:65:1C:33:B5:9A:C3:2B:C4:68:31:98:01:08:96:05:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/30C39359651C33B59AC32BC46831980108960568.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30C39359651C33B59AC32BC46831980108960568.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957996f5-a934-4b44-8547-19ec37cf7c14/0/323030313a6466333a643730303a3a2f34382d3438203d3e20313337323937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:d700::/48 Signature Algorithm: sha256WithRSAEncryption 46:dd:68:66:c9:3f:9a:32:1a:d1:2d:39:7c:0b:2c:2c:3c:5f: 4e:9e:f4:10:2c:f5:19:52:4e:5a:e1:f2:bc:f8:86:c8:63:d9: 62:e7:8f:15:3a:81:19:19:49:27:ed:48:89:c8:63:ca:db:5b: c2:23:28:a7:27:5c:dc:66:5c:aa:1d:c8:83:38:f7:4e:5f:f8: be:94:62:12:3e:c7:66:32:94:55:8d:bb:aa:3b:9d:5f:b4:10: 7a:44:a1:ae:67:40:1b:1a:a6:c6:bf:5e:02:11:f5:3a:9c:e8: ce:82:ac:46:ad:6c:cf:a0:49:7c:9e:9b:79:6b:2c:c1:e9:d1: 07:08:0b:d8:5a:57:27:c5:88:d9:7e:dc:84:fa:06:20:d6:4d: c7:6f:3c:b5:da:51:67:8c:1f:f6:da:9b:83:d9:10:c1:cd:c9: e1:69:92:31:16:f5:ca:b9:d5:24:b0:ba:89:99:29:7a:3e:e2: 74:34:0e:a8:b1:b2:7f:b3:99:05:d1:c9:dc:a6:a2:70:dc:91: b6:0a:a5:2c:69:21:82:2e:df:7f:4f:ed:47:df:82:2f:7d:a0: 6d:8a:4f:d9:06:b8:6b:e9:45:ff:82:7f:4f:e6:63:50:4f:c0: 1f:5b:df:e2:7b:9a:98:fa:85:a3:60:63:99:70:1a:96:ad:c3: 3e:42:ce:f7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN/YEVK9K9gQ/uAQxjnDUKGK2CIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEw ODk2MDU2ODAeFw0yNTA5MTcwMjU1MDFaFw0yNjA5MTYwMzAwMDFaMDMxMTAvBgNV BAMTKDQzMjNGMEE1RTA3ODI0ODYxNjk5RDM4QTczMERCNUNGMkYyMUZERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTgo51RgP1E5KcLm1lQbhHt3k rtAlYAaT89eVsPyUE3KvJ+0WA5SJOjWEK9+rDWsU4hZGIm+P6IBbvuerjBKIHHMA OFYPGceO+BUV577M923a1niaCzdSTb2FpvSLPFRyddHgU+niezRxZXVodRchmPWU YAhLePYC9Wvk8yJWzI33f1jsP0lxFvzvv+1DQRXFfvoqWedTenCSd8yxJQDslEBX 7tWFHNmtZZBeMhrLITA0mfjkFSrIBXhS6O/5Ym5wEYxhGEYGX++jnmGenYNqxoUe eZrmLfCoh9zfsJsnqx6LX+hBoXzQ+TwIsdpn5IDTG7TxL0xLxpBSktokSEelAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQyPwpeB4JIYWmdOKcw21zy8h/ecwHwYDVR0j BBgwFoAUMMOTWWUcM7WawyvEaDGYAQiWBWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTc5OTZmNS1hOTM0LTRiNDQtODU0Ny0xOWVjMzdjZjdjMTQvMC8zMEMzOTM1OTY1 MUMzM0I1OUFDMzJCQzQ2ODMxOTgwMTA4OTYwNTY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBDMzkzNTk2NTFDMzNCNTlBQzMyQkM0NjgzMTk4MDEwODk2 MDU2OC5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1Nzk5NmY1LWE5MzQtNGI0NC04 NTQ3LTE5ZWMzN2NmN2MxNC8wLzMyMzAzMDMxM2E2NDY2MzMzYTY0MzczMDMwM2Ez YTJmMzQzODJkMzQzODIwM2QzZTIwMzEzMzM3MzIzOTM3LnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEN 89cAMA0GCSqGSIb3DQEBCwUAA4IBAQBG3WhmyT+aMhrRLTl8CywsPF9OnvQQLPUZ Uk5a4fK8+IbIY9li548VOoEZGUkn7UiJyGPK21vCIyinJ1zcZlyqHciDOPdOX/i+ lGISPsdmMpRVjbuqO51ftBB6RKGuZ0AbGqbGv14CEfU6nOjOgqxGrWzPoEl8npt5 ayzB6dEHCAvYWlcnxYjZftyE+gYg1k3Hbzy12lFnjB/22puD2RDBzcnhaZIxFvXK udUksLqJmSl6PuJ0NA6osbJ/s5kF0cncpqJw3JG2CqUsaSGCLt9/T+1H34IvfaBt ik/ZBrhr6UX/gn9P5mNQT8AfW9/ie5qY+oWjYGOZcBqWrcM+Qs73 -----END CERTIFICATE-----Generated at Wed Dec 3 15:51:10 2025 by rpki-client