This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa File: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (raw, json) Hash identifier: mhHbC7IIWFFORZdV/WAdZvBGn0b08EabDQByz7GAvr4= Subject key identifier: F5:F2:2A:D5:35:B7:49:73:11:22:67:78:D8:56:B5:B8:04:CE:A7:54 Certificate issuer: /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Certificate serial: 7C8501D3D358C23008E117CCBDB7548A34D8B2CF Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa Signing time: Mon 02 Jun 2025 02:04:08 +0000 ROA not before: Mon 02 Jun 2025 01:59:08 +0000 ROA not after: Mon 01 Jun 2026 02:04:08 +0000 asID: 17996 IP address blocks: 2402:a600::/32 maxlen: 32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:85:01:d3:d3:58:c2:30:08:e1:17:cc:bd:b7:54:8a:34:d8:b2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Validity Not Before: Jun 2 01:59:08 2025 GMT Not After : Jun 1 02:04:08 2026 GMT Subject: CN=F5F22AD535B7497311226778D856B5B804CEA754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:59:79:e4:e8:ab:0b:1f:64:2b:29:52:9c: ad:30:5b:d8:fe:59:5f:d1:dd:73:d3:9d:ab:e3:28: 7d:10:0f:bf:73:86:84:a5:7e:a8:85:63:f3:60:c5: 9a:6d:b2:03:bd:f8:18:c9:6f:64:cc:16:73:a2:5b: ac:15:0b:e7:54:60:de:b8:75:2f:74:a1:fe:26:e6: f2:d6:9b:8a:3b:06:51:57:f0:d8:66:df:67:fc:34: 4c:3c:12:13:77:68:8a:f3:b8:cb:ad:36:66:3d:55: da:a3:78:41:46:06:eb:7e:9a:82:d7:a9:b7:61:53: 21:02:42:cf:0b:0b:bb:98:1a:cc:a4:d3:8b:af:15: 04:7e:9d:29:8e:2e:36:44:ee:fe:e1:76:6e:ee:82: 46:34:e4:35:4d:67:74:5d:94:65:d9:f8:a1:6b:7a: 09:f8:5e:3e:cc:db:85:74:d8:a9:45:ae:19:74:04: 67:79:76:7a:cb:5d:16:0e:81:c6:f2:29:26:8f:fc: fa:b6:52:ac:98:a0:18:39:25:aa:2f:48:12:4e:76: 02:25:7f:33:63:23:58:65:1a:2f:fe:f2:e7:4d:f9: e9:c4:1e:5c:13:ff:50:2e:19:61:c8:e7:51:67:11: 2c:df:0d:ac:68:46:b6:80:c4:9a:23:5a:04:5f:75: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F2:2A:D5:35:B7:49:73:11:22:67:78:D8:56:B5:B8:04:CE:A7:54 X509v3 Authority Key Identifier: keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/323430323a613630303a3a2f33322d3332203d3e203137393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:a600::/32 Signature Algorithm: sha256WithRSAEncryption 9f:fb:47:ef:8e:21:1b:52:54:9d:92:d9:80:91:04:6a:0b:9c: db:b0:f2:bc:07:9c:83:ae:57:03:2b:20:5f:f0:3d:6d:67:68: cb:08:f4:db:33:a8:27:06:95:a1:5e:1d:13:e9:ba:6d:b3:25: e7:c7:78:37:25:00:7c:dd:d6:01:ce:78:e0:01:be:21:37:6c: 01:9e:6b:5d:de:cc:44:7c:5c:7b:1c:67:99:f2:0c:b6:c3:c0: cd:b2:6c:83:e4:81:f8:61:3d:d0:f4:2f:5f:c2:93:9b:0e:3b: 01:76:be:b5:c0:03:8a:f0:b6:ff:e7:d7:a6:a1:79:83:b5:b1: 1d:60:e9:83:ec:fc:5e:c0:e6:7e:bd:0d:e4:43:34:bd:c0:db: 25:2a:08:ff:c9:30:fd:52:82:cf:f8:50:13:de:20:5c:52:74: 75:aa:f8:a1:48:e5:09:11:60:c3:d1:23:48:e1:04:66:6c:bd: d7:7f:a5:84:ad:d1:90:f2:ca:85:a6:d0:29:56:90:33:6e:82: 73:13:86:5e:42:66:55:8b:f8:bb:9d:da:d8:50:8f:76:c9:8b: fb:17:44:1e:25:c4:fa:c5:69:88:af:cb:75:6d:ae:2f:69:c6: 0b:c7:e6:63:e3:3d:fe:7b:ff:ee:61:8c:ce:24:10:9f:70:a4: 4b:f1:0c:2b -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgIUfIUB09NYwjAI4RfMvbdUijTYss8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB NDc4RkQxQzAeFw0yNTA2MDIwMTU5MDhaFw0yNjA2MDEwMjA0MDhaMDMxMTAvBgNV BAMTKEY1RjIyQUQ1MzVCNzQ5NzMxMTIyNjc3OEQ4NTZCNUI4MDRDRUE3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/Fl55OirCx9kKylSnK0wW9j+ WV/R3XPTnavjKH0QD79zhoSlfqiFY/NgxZptsgO9+BjJb2TMFnOiW6wVC+dUYN64 dS90of4m5vLWm4o7BlFX8Nhm32f8NEw8EhN3aIrzuMutNmY9VdqjeEFGBut+moLX qbdhUyECQs8LC7uYGsyk04uvFQR+nSmOLjZE7v7hdm7ugkY05DVNZ3RdlGXZ+KFr egn4Xj7M24V02KlFrhl0BGd5dnrLXRYOgcbyKSaP/Pq2UqyYoBg5JaovSBJOdgIl fzNjI1hlGi/+8udN+enEHlwT/1AuGWHI51FnESzfDaxoRraAxJojWgRfdQWVAgMB AAGjggIxMIICLTAdBgNVHQ4EFgQU9fIq1TW3SXMRImd42Fa1uATOp1QwHwYDVR0j BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4 RkQxQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDJmMmY4LTM1MTItNDNlNS1i ZTE3LWIxMWI1OGY5NjA4My8wLzMyMzQzMDMyM2E2MTM2MzAzMDNhM2EyZjMzMzIy ZDMzMzIyMDNkM2UyMDMxMzczOTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAqYAMA0GCSqGSIb3 DQEBCwUAA4IBAQCf+0fvjiEbUlSdktmAkQRqC5zbsPK8B5yDrlcDKyBf8D1tZ2jL CPTbM6gnBpWhXh0T6bptsyXnx3g3JQB83dYBznjgAb4hN2wBnmtd3sxEfFx7HGeZ 8gy2w8DNsmyD5IH4YT3Q9C9fwpObDjsBdr61wAOK8Lb/59emoXmDtbEdYOmD7Pxe wOZ+vQ3kQzS9wNslKgj/yTD9UoLP+FAT3iBcUnR1qvihSOUJEWDD0SNI4QRmbL3X f6WErdGQ8sqFptApVpAzboJzE4ZeQmZVi/i7ndrYUI92yYv7F0QeJcT6xWmIr8t1 ba4vacYLx+Zj4z3+e//uYYzOJBCfcKRL8Qwr -----END CERTIFICATE-----Generated at Wed Dec 3 14:47:08 2025 by rpki-client