This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
File: 323430353a633934303a3a2f33322d3332203d3e20313430303132.roa (raw, json)
Hash identifier: 0Ch00VaMiPntZrLpBaDMR1Y+kpCG3oxMGYz3YYRWkbY=
Subject key identifier: 3D:C2:95:4D:3B:F1:D2:69:2D:E1:3C:4E:31:DA:20:DA:C8:D5:D7:7F
Certificate issuer: /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial: 5F64489411131702BB22D6AC98F9DF84DB960563
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
Signing time: Tue 10 Jun 2025 04:00:01 +0000
ROA not before: Tue 10 Jun 2025 03:55:01 +0000
ROA not after: Tue 09 Jun 2026 04:00:01 +0000
asID: 140012
IP address blocks: 2405:c940::/32 maxlen: 32
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 16:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:64:48:94:11:13:17:02:bb:22:d6:ac:98:f9:df:84:db:96:05:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Validity
Not Before: Jun 10 03:55:01 2025 GMT
Not After : Jun 9 04:00:01 2026 GMT
Subject: CN=3DC2954D3BF1D2692DE13C4E31DA20DAC8D5D77F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:c0:92:1c:8d:da:e9:43:87:41:17:f0:b7:
e4:a8:ae:6b:ff:0f:43:7c:30:61:69:1a:6a:c5:8c:
05:9a:f4:30:b5:f3:2a:a7:3b:7b:07:35:2b:56:3c:
fb:b3:f1:8a:47:de:35:a8:f6:91:ef:6f:c1:7e:03:
a6:c2:a1:2a:c6:5d:e0:37:45:fd:14:be:74:70:35:
b1:69:66:ec:e5:09:74:81:dd:79:20:4d:71:57:54:
1d:54:0b:14:94:04:a2:77:11:85:7a:c3:94:61:e1:
b4:c9:82:12:23:8d:49:f1:de:89:04:c9:83:83:a6:
1d:81:07:9d:61:59:3e:06:9c:e0:5c:38:67:79:48:
5e:71:f3:82:ab:23:0c:d0:6f:43:ed:e3:33:5c:e3:
44:f3:73:3a:33:e7:80:f8:6b:fd:cc:87:a6:98:1e:
ad:34:5c:63:8d:15:94:21:96:80:b8:f9:e5:4b:9a:
3d:5b:a4:cc:97:98:5f:c9:08:2c:c8:bf:2a:90:9c:
53:ea:1f:83:83:0a:d9:26:d5:0e:8b:d4:ff:68:2a:
cb:dd:e5:76:dd:9e:72:9b:e3:ee:86:f2:dd:2f:f2:
6a:db:0e:2a:bf:4c:0e:20:5e:eb:bd:e1:f0:86:19:
23:8d:20:8d:4b:3f:71:18:a4:29:24:17:1f:31:47:
8b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:95:4D:3B:F1:D2:69:2D:E1:3C:4E:31:DA:20:DA:C8:D5:D7:7F
X509v3 Authority Key Identifier:
keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/323430353a633934303a3a2f33322d3332203d3e20313430303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2405:c940::/32
Signature Algorithm: sha256WithRSAEncryption
2c:32:c1:19:9b:85:60:7b:a8:28:07:0f:33:b2:d2:57:a7:3b:
0f:98:f1:48:d8:80:4a:95:9a:4c:5d:6c:90:7c:55:f4:a8:fc:
65:2d:34:a3:2e:ea:d6:71:7f:71:20:8f:27:14:53:7f:99:cf:
1c:9e:25:9c:37:c5:47:bd:24:0f:eb:41:74:ad:39:e8:39:83:
d8:d4:62:3b:b2:d1:9b:a2:00:2c:b7:4f:74:ee:0a:32:89:38:
f4:11:2a:7e:50:c0:10:c9:bd:3a:a8:f4:1e:04:40:7f:7a:9a:
88:4c:8a:57:e9:46:04:6d:d2:fd:a8:52:fb:c8:d9:65:92:cb:
c3:35:86:b1:9f:0b:f7:7c:3e:ec:bf:4b:2d:be:e1:9a:9a:a3:
82:d5:90:56:d8:04:8f:c1:33:66:33:ff:38:2c:c4:62:96:dc:
d0:e5:84:f3:b0:3c:75:02:39:72:b4:e2:a0:9e:75:05:b8:f1:
d6:dc:3c:e8:3f:f8:96:2d:0e:f8:5b:e3:dd:fc:18:81:99:b4:
15:6f:95:6b:03:df:9d:c6:c3:9d:9d:5e:3c:22:ca:ab:0a:88:
14:d6:8b:72:f5:5a:ee:ff:6b:c3:a4:20:9d:8f:98:70:47:52:
11:ad:f4:70:f2:ea:bb:b3:8f:ac:5c:47:8c:58:cc:78:2b:6e:
24:38:01:7a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUX2RIlBETFwK7ItasmPnfhNuWBWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2
QjkxMTY1QTAeFw0yNTA2MTAwMzU1MDFaFw0yNjA2MDkwNDAwMDFaMDMxMTAvBgNV
BAMTKDNEQzI5NTREM0JGMUQyNjkyREUxM0M0RTMxREEyMERBQzhENUQ3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay8CSHI3a6UOHQRfwt+Sormv/
D0N8MGFpGmrFjAWa9DC18yqnO3sHNStWPPuz8YpH3jWo9pHvb8F+A6bCoSrGXeA3
Rf0UvnRwNbFpZuzlCXSB3XkgTXFXVB1UCxSUBKJ3EYV6w5Rh4bTJghIjjUnx3okE
yYODph2BB51hWT4GnOBcOGd5SF5x84KrIwzQb0Pt4zNc40Tzczoz54D4a/3Mh6aY
Hq00XGONFZQhloC4+eVLmj1bpMyXmF/JCCzIvyqQnFPqH4ODCtkm1Q6L1P9oKsvd
5XbdnnKb4+6G8t0v8mrbDiq/TA4gXuu94fCGGSONII1LP3EYpCkkFx8xR4vJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUPcKVTTvx0mkt4TxOMdog2sjV138wHwYDVR0j
BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG
MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx
MTY1QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyYWM5ZTYzLTk4OTAtNDIyZS04
OGRjLTdjYjZkZGFjMjJmYS8wLzMyMzQzMDM1M2E2MzM5MzQzMDNhM2EyZjMzMzIy
ZDMzMzIyMDNkM2UyMDMxMzQzMDMwMzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFyUAwDQYJKoZI
hvcNAQELBQADggEBACwywRmbhWB7qCgHDzOy0lenOw+Y8UjYgEqVmkxdbJB8VfSo
/GUtNKMu6tZxf3EgjycUU3+ZzxyeJZw3xUe9JA/rQXStOeg5g9jUYjuy0ZuiACy3
T3TuCjKJOPQRKn5QwBDJvTqo9B4EQH96mohMilfpRgRt0v2oUvvI2WWSy8M1hrGf
C/d8Puy/Sy2+4Zqao4LVkFbYBI/BM2Yz/zgsxGKW3NDlhPOwPHUCOXK04qCedQW4
8dbcPOg/+JYtDvhb4938GIGZtBVvlWsD353Gw52dXjwiyqsKiBTWi3L1Wu7/a8Ok
IJ2PmHBHUhGt9HDy6ruzj6xcR4xYzHgrbiQ4AXo=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:50:44 2025 by rpki-client