This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
File: 323430333a666338303a3a2f33332d3333203d3e203633353031.roa (raw, json)
Hash identifier: 1tl51btakO1tmF3fruOX88w5ei0Cmv3tz+8xpKBuz2U=
Subject key identifier: AF:BE:FE:CB:CD:DE:1A:28:07:56:38:30:6A:1F:F0:91:67:61:08:0A
Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial: 351AF6DEBBA2FEC3FAE9CE9D83F3441E27CBA1AA
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
Signing time: Thu 05 Jun 2025 02:02:53 +0000
ROA not before: Thu 05 Jun 2025 01:57:53 +0000
ROA not after: Thu 04 Jun 2026 02:02:53 +0000
asID: 63501
IP address blocks: 2403:fc80::/33 maxlen: 33
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 07:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:1a:f6:de:bb:a2:fe:c3:fa:e9:ce:9d:83:f3:44:1e:27:cb:a1:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Validity
Not Before: Jun 5 01:57:53 2025 GMT
Not After : Jun 4 02:02:53 2026 GMT
Subject: CN=AFBEFECBCDDE1A28075638306A1FF0916761080A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0b:55:81:9e:96:de:d7:8a:70:2a:5f:a3:55:
20:54:d4:2e:4c:68:8e:67:5e:66:d0:92:19:f4:98:
d1:dc:1a:25:4f:33:1f:5e:5f:b2:79:72:31:60:96:
52:a4:7f:83:dc:cb:fc:5e:b5:b2:da:0b:ac:f9:70:
78:f1:a9:35:7a:eb:87:bb:6a:c1:2d:f8:09:91:5d:
6f:23:8d:7e:65:66:f0:45:18:38:33:85:9a:92:70:
1c:f7:e9:d0:d8:cf:6f:7e:26:b1:1c:7e:a4:24:d0:
6b:4c:3b:2c:2c:86:25:f3:2b:42:5d:0e:5b:96:6b:
9d:13:70:83:9d:2f:a0:0c:a5:03:19:31:7e:08:10:
ee:d5:0a:77:90:6d:0b:4b:36:ba:a9:05:1c:73:c7:
60:58:ad:a7:e8:0e:03:6c:b2:2f:46:18:66:2c:c6:
c0:13:c3:e0:44:47:ac:6c:c6:51:18:40:07:24:3e:
45:a9:1d:db:fb:b2:f9:87:45:02:b6:37:d6:d1:43:
9e:61:43:3a:a2:df:5d:c3:d2:23:49:bf:95:94:94:
0d:36:08:6e:0f:4d:90:cd:6a:a9:12:c0:18:17:d2:
b8:05:d9:cf:c5:fa:cd:87:9d:4d:d4:61:e2:6b:e3:
44:23:88:e0:9b:74:fc:9c:52:c4:7e:d3:b5:ee:e9:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BE:FE:CB:CD:DE:1A:28:07:56:38:30:6A:1F:F0:91:67:61:08:0A
X509v3 Authority Key Identifier:
keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/323430333a666338303a3a2f33332d3333203d3e203633353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2403:fc80::/33
Signature Algorithm: sha256WithRSAEncryption
77:3a:05:82:77:0b:11:d4:c3:58:49:87:45:a8:51:78:14:80:
db:8d:6b:e2:f8:8a:2a:a5:5e:1e:9b:18:f1:fc:f7:08:08:34:
6e:fc:2d:34:de:8d:52:02:26:ac:06:8d:20:02:38:a6:d6:f6:
45:bc:83:d2:ca:19:b7:5c:df:1f:c9:68:8e:0b:44:85:17:c6:
af:d3:96:07:c2:5d:28:af:15:9d:21:8f:23:c5:85:f2:66:9a:
26:53:32:34:1b:b3:65:fa:04:20:ed:be:e5:9e:b8:7d:df:05:
07:88:8d:e3:d4:65:0a:2e:a2:75:46:ad:1d:53:bd:72:9c:32:
0f:ff:ec:94:a3:b7:86:35:33:10:2f:e3:51:1b:4c:ed:b9:5e:
ea:da:19:b8:af:5a:1d:0d:53:ce:25:07:e1:b8:65:77:1d:a0:
1d:97:48:c4:d4:1e:a6:44:9d:52:45:c4:74:a7:5a:f3:54:17:
a8:f3:4f:6a:de:9c:a4:7d:06:e0:aa:1a:81:5a:94:f5:68:0b:
0c:d9:c3:3a:aa:cc:70:bf:9c:fd:54:10:3c:17:c7:46:54:10:
22:84:da:e6:c4:4d:1a:e7:59:16:96:a1:6e:33:66:c0:3b:e1:
d8:f1:34:b2:28:32:ca:16:91:97:27:b4:cc:2a:44:04:fc:43:
6b:96:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:51 2025 by rpki-client