This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa File: 323430363a616563303a3a2f34382d3438203d3e20313431363735.roa (raw, json) Hash identifier: AS7ErBWYOh3ltpqaacXCmV2CVPom+cE/4rFVdqtAK+c= Subject key identifier: 6E:D8:04:6C:A4:9B:D4:57:DC:87:9B:8A:7C:7C:C7:FB:F7:0E:1B:4D Certificate issuer: /CN=1952B074D19D5AB562D7EE537AD3059EA097353B Certificate serial: 7C0BB7420F1E039E50671352E6F342BCEF1005ED Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa Signing time: Thu 15 May 2025 02:41:26 +0000 ROA not before: Thu 15 May 2025 02:36:26 +0000 ROA not after: Thu 14 May 2026 02:41:26 +0000 asID: 141675 IP address blocks: 2406:aec0::/48 maxlen: 48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:0b:b7:42:0f:1e:03:9e:50:67:13:52:e6:f3:42:bc:ef:10:05:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B Validity Not Before: May 15 02:36:26 2025 GMT Not After : May 14 02:41:26 2026 GMT Subject: CN=6ED8046CA49BD457DC879B8A7C7CC7FBF70E1B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:9a:f5:8f:71:19:fc:52:cf:f1:41:34:47: f3:2f:8d:42:e6:df:36:1c:f7:3b:b4:15:d2:53:ec: 16:f0:cd:fd:f1:eb:df:04:ee:ab:97:22:86:9d:0d: 00:9b:04:23:3b:95:f1:99:ca:55:90:93:65:96:20: db:eb:d1:c0:78:5e:68:57:f4:c8:8f:45:8c:ec:0a: 62:9d:d9:55:81:ac:e8:18:0c:eb:15:2a:5a:76:62: 03:f6:08:6b:bc:f1:36:56:c1:c8:2e:8c:9b:2d:f6: 2d:f4:4b:60:cf:05:90:52:83:98:43:13:c5:a1:b4: d6:79:30:3e:aa:dc:47:af:92:73:f7:6d:c8:bb:46: b6:33:19:f5:4d:06:27:ac:fb:c0:02:d6:8d:8b:aa: 42:13:b4:12:b5:a9:cf:00:fe:56:a8:3f:fc:15:f8: 9c:1f:23:fb:e0:1d:db:b6:55:e5:2a:05:74:c6:48: 1b:2b:28:51:bf:9f:cf:61:a6:c5:8c:cb:85:43:9e: 28:e6:67:04:e7:78:b2:29:d2:0c:9d:d0:4d:18:d6: ec:7d:c5:2c:c6:b2:be:bd:b9:b8:76:a0:bb:26:60: 6b:74:12:be:ae:d6:f0:0e:60:c8:aa:96:66:b5:86: 97:d9:e4:98:d3:0e:df:b7:a0:bb:32:8d:e2:dc:80: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D8:04:6C:A4:9B:D4:57:DC:87:9B:8A:7C:7C:C7:FB:F7:0E:1B:4D X509v3 Authority Key Identifier: keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a3a2f34382d3438203d3e20313431363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:aec0::/48 Signature Algorithm: sha256WithRSAEncryption ad:77:48:18:5a:c0:3d:16:e2:6c:a0:52:b1:1e:b7:28:bc:86: a5:2e:39:cd:24:62:7b:c9:68:bd:39:94:e6:2e:89:4e:59:58: 6f:09:3e:04:03:05:77:dd:78:4d:97:27:e8:ea:34:eb:77:1e: b7:b5:88:38:b3:20:cd:5a:dd:97:be:bf:e7:90:98:ff:c0:d1: 36:09:21:6d:5e:74:ff:ea:0e:4f:5e:72:78:bd:1d:fb:51:d9: 53:13:d5:a2:f7:5c:f3:fc:dd:10:f9:b6:52:96:90:23:e4:5c: ff:05:e6:d7:05:51:4d:a0:67:2f:e9:26:b4:75:76:9c:53:1b: bb:be:b9:cf:d5:9e:8c:0e:b1:53:3f:11:82:26:77:b1:17:5f: 3f:ae:76:11:fb:b0:5f:f7:28:1d:e5:56:3e:d5:6b:c3:db:fe: 5f:86:10:e0:da:da:63:f2:6e:05:2f:39:a0:b5:bb:65:94:a5: 49:b1:fc:c5:d1:b1:b0:e7:de:bd:c2:fc:04:5c:04:70:f1:3c: bd:82:af:fd:7f:9b:eb:ee:2d:f1:8e:e6:6b:16:bf:cd:80:83: 07:f1:8c:f1:99:47:d9:2a:30:07:ed:09:92:9a:23:6e:ab:63: 8d:df:44:61:53:9a:fb:3b:68:bd:be:da:c5:74:9b:1b:ed:59: f4:46:4b:a5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUfAu3Qg8eA55QZxNS5vNCvO8QBe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVB MDk3MzUzQjAeFw0yNTA1MTUwMjM2MjZaFw0yNjA1MTQwMjQxMjZaMDMxMTAvBgNV BAMTKDZFRDgwNDZDQTQ5QkQ0NTdEQzg3OUI4QTdDN0NDN0ZCRjcwRTFCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0pr1j3EZ/FLP8UE0R/MvjULm 3zYc9zu0FdJT7Bbwzf3x698E7quXIoadDQCbBCM7lfGZylWQk2WWINvr0cB4XmhX 9MiPRYzsCmKd2VWBrOgYDOsVKlp2YgP2CGu88TZWwcgujJst9i30S2DPBZBSg5hD E8WhtNZ5MD6q3EevknP3bci7RrYzGfVNBies+8AC1o2LqkITtBK1qc8A/laoP/wV +JwfI/vgHdu2VeUqBXTGSBsrKFG/n89hpsWMy4VDnijmZwTneLIp0gyd0E0Y1ux9 xSzGsr69ubh2oLsmYGt0Er6u1vAOYMiqlma1hpfZ5JjTDt+3oLsyjeLcgBMvAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUbtgEbKSb1Ffch5uKfHzH+/cOG00wHwYDVR0j BBgwFoAUGVKwdNGdWrVi1+5TetMFnqCXNTswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGYyYzAyNS0xZDc2LTRhMzYtODE2MC1hOWU4YWZlMzU3OWYvMC8xOTUyQjA3NEQx OUQ1QUI1NjJEN0VFNTM3QUQzMDU5RUEwOTczNTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1MkIwNzREMTlENUFCNTYyRDdFRTUzN0FEMzA1OUVBMDk3 MzUzQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjJjMDI1LTFkNzYtNGEzNi04 MTYwLWE5ZThhZmUzNTc5Zi8wLzMyMzQzMDM2M2E2MTY1NjMzMDNhM2EyZjM0Mzgy ZDM0MzgyMDNkM2UyMDMxMzQzMTM2MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQGrsAAADANBgkq hkiG9w0BAQsFAAOCAQEArXdIGFrAPRbibKBSsR63KLyGpS45zSRie8lovTmU5i6J TllYbwk+BAMFd914TZcn6Oo063cet7WIOLMgzVrdl76/55CY/8DRNgkhbV50/+oO T15yeL0d+1HZUxPVovdc8/zdEPm2UpaQI+Rc/wXm1wVRTaBnL+kmtHV2nFMbu765 z9WejA6xUz8RgiZ3sRdfP652EfuwX/coHeVWPtVrw9v+X4YQ4NraY/JuBS85oLW7 ZZSlSbH8xdGxsOfevcL8BFwEcPE8vYKv/X+b6+4t8Y7maxa/zYCDB/GM8ZlH2Sow B+0Jkpojbqtjjd9EYVOa+ztovb7axXSbG+1Z9EZLpQ== -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:12 2025 by rpki-client