This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
File: 323430333a666338303a3a2f33322d3332203d3e203633353031.roa (raw, json)
Hash identifier: Q/RsRX8i7WhRynidtM9vkDe+JbBl3vcKmm5GmcuQCUQ=
Subject key identifier: 09:03:E3:DE:43:C7:4D:2F:12:B3:CD:99:82:7C:C3:62:12:50:8A:4F
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 75A0FAE3F5AA576D0A8891633030A9C64C2AC5FF
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
Signing time: Thu 05 Jun 2025 02:02:53 +0000
ROA not before: Thu 05 Jun 2025 01:57:53 +0000
ROA not after: Thu 04 Jun 2026 02:02:53 +0000
asID: 63501
IP address blocks: 2403:fc80::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 07:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a0:fa:e3:f5:aa:57:6d:0a:88:91:63:30:30:a9:c6:4c:2a:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Jun 5 01:57:53 2025 GMT
Not After : Jun 4 02:02:53 2026 GMT
Subject: CN=0903E3DE43C74D2F12B3CD99827CC36212508A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:66:f8:dc:77:63:9a:d1:2e:40:4d:be:2c:
9d:61:41:a1:72:57:49:55:8b:ab:23:78:42:0b:94:
9c:19:2b:7b:06:03:9a:bb:30:39:65:23:1e:5b:be:
b4:47:2e:38:aa:c0:1b:11:64:ab:28:f2:06:53:ef:
f9:7b:03:37:38:7c:40:6c:67:57:2a:6a:10:94:b5:
09:85:da:d3:d8:d8:37:6e:2f:69:52:c2:05:aa:da:
13:21:87:bc:e3:b6:1b:54:3d:ee:f2:4a:13:68:a5:
89:f6:5f:f2:65:f5:0f:9f:a4:7b:3a:d0:d8:fb:43:
7b:bc:99:a3:48:04:aa:45:9b:a4:b5:0d:dc:d3:4a:
a8:cc:4b:8f:dd:25:31:cc:e2:d5:da:77:a3:5c:ec:
47:dc:52:63:15:6b:29:97:d5:5c:ae:83:60:a5:64:
d0:af:a9:37:0a:af:e3:34:c4:61:aa:13:94:7d:f5:
02:6f:59:f8:d3:c5:4c:86:fe:73:c2:5f:e6:13:76:
f5:a5:b5:fd:28:38:8c:7c:f4:07:02:85:84:4a:25:
e1:38:cb:d7:29:34:81:04:b6:99:86:a9:60:24:5a:
56:15:5c:3a:d1:f5:27:22:be:7b:82:9f:cc:9b:d1:
97:d7:37:93:63:ec:01:91:20:cc:2c:76:9d:91:b7:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:E3:DE:43:C7:4D:2F:12:B3:CD:99:82:7C:C3:62:12:50:8A:4F
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33322d3332203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
03:ba:98:1f:e0:37:9b:de:61:42:c7:28:37:cb:d8:aa:d1:18:
ff:ff:d9:19:2f:2a:02:25:c3:a3:c2:37:7f:fc:94:37:4e:f8:
a0:23:f8:2d:8d:0a:a3:8e:da:28:c4:09:89:21:8b:fc:c8:52:
9b:99:19:8d:95:8c:27:ba:a0:0d:f2:d3:4b:81:27:fe:37:cb:
18:6b:ce:ed:62:14:ee:1b:77:90:f7:06:5f:b7:92:bd:8d:bc:
89:17:34:06:31:b0:98:2f:3f:5d:15:0f:13:1e:77:ba:88:a4:
ca:a4:39:5b:00:cc:3e:5a:ec:d7:fe:2a:ef:e5:17:8e:01:18:
c8:3c:0e:e5:43:e3:d1:13:79:01:0c:1c:03:cd:69:35:50:fe:
d8:e3:26:76:c4:cb:53:cb:72:9b:d5:31:cf:9c:85:f5:85:a2:
c9:e0:d5:35:2c:b5:f3:7c:dd:16:b1:62:5e:98:eb:2b:fc:38:
6a:01:77:04:19:f7:32:9c:21:7d:17:f4:9e:da:47:5c:05:07:
56:b8:39:54:ad:e9:f9:9b:57:af:bf:34:37:a0:82:03:4d:22:
5b:3e:ae:62:f7:ff:56:c5:58:8d:5d:7f:a6:08:1e:cd:ca:2b:
b7:11:a3:31:44:3c:b3:6c:29:2f:99:50:aa:60:bd:7f:12:29:
a1:73:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:52 2025 by rpki-client