This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
File: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (raw, json)
Hash identifier: cEu0EjirS4vOm7fpY+AgTseXh1mis9QznqiCF2QTlk4=
Subject key identifier: 88:A0:FA:F1:39:69:77:4B:2B:5B:6A:9C:E1:B8:05:A1:21:EB:EF:78
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 46D44EF87ABAB5127CADF2A4AAD58DA9F5AC8DE8
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
Signing time: Sun 18 Jan 2026 15:00:00 +0000
ROA not before: Sun 18 Jan 2026 14:55:00 +0000
ROA not after: Sun 17 Jan 2027 15:00:00 +0000
asID: 131705
IP address blocks: 2406:5c40:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 02:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d4:4e:f8:7a:ba:b5:12:7c:ad:f2:a4:aa:d5:8d:a9:f5:ac:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Jan 18 14:55:00 2026 GMT
Not After : Jan 17 15:00:00 2027 GMT
Subject: CN=88A0FAF13969774B2B5B6A9CE1B805A121EBEF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:1f:aa:0a:b6:4f:49:e6:28:e8:d0:39:8d:
30:66:dc:b8:f4:5c:be:d9:f7:d8:84:8e:9f:e6:f5:
c0:36:b1:7f:01:ae:8b:d1:1d:50:22:3c:a7:61:c3:
fb:8c:59:7f:ca:1c:18:aa:f6:72:b9:b9:96:a5:2f:
34:11:4c:65:be:da:8a:4d:de:22:8a:23:32:bd:f1:
97:b7:3c:dc:18:4c:89:be:48:a2:8e:06:89:d8:da:
cb:e6:7f:ce:11:4e:6f:3d:af:23:1c:02:3c:04:b1:
00:47:b5:1f:4a:39:04:a4:18:0a:d3:29:49:31:3f:
9a:8a:9d:ea:1c:95:e3:e6:1d:1b:74:43:95:b8:50:
13:30:a1:d1:21:fe:6d:a7:a4:49:b0:4c:45:a1:b5:
94:35:4c:94:9c:8c:57:94:12:0d:b9:2b:94:f8:08:
2d:77:c2:36:ab:16:7c:e8:4a:e4:cc:c0:f0:f3:f4:
56:8d:88:c2:f9:15:b7:ac:84:57:80:62:24:8d:25:
f9:b0:2d:06:30:aa:ad:51:4f:c6:c7:4c:85:51:11:
09:b1:68:d4:6a:6f:70:d7:9f:99:6d:2e:4d:14:72:
db:d4:0c:ce:7c:fb:0a:74:cf:f0:ea:3b:75:27:72:
aa:b7:42:be:48:b2:7c:ef:4d:b1:12:18:23:c9:e1:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A0:FA:F1:39:69:77:4B:2B:5B:6A:9C:E1:B8:05:A1:21:EB:EF:78
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2406:5c40:8888::/48
Signature Algorithm: sha256WithRSAEncryption
87:44:38:64:07:20:36:30:50:2b:96:81:09:06:e2:56:7b:ae:
f6:f0:4a:87:e5:6c:e5:9c:a8:36:30:83:e5:00:2f:6f:55:1c:
10:44:99:55:b4:2d:2c:6e:b7:ee:05:3c:38:f7:99:43:e8:07:
93:d0:ad:51:f1:06:2b:45:9c:e7:3b:3f:2d:ce:cc:d1:9f:95:
c4:4d:04:65:ba:77:57:a0:df:63:83:48:70:f9:a8:50:5c:59:
bb:a1:7b:29:ab:52:26:26:d5:2c:7b:ed:e6:e2:e5:f9:5d:65:
2f:43:06:e5:ec:93:61:29:48:6d:4d:9e:b1:c9:c8:f7:9e:29:
35:eb:cc:7c:fe:58:15:a6:fb:9a:20:d1:73:56:af:fb:c1:d3:
59:c9:d2:c9:19:86:f0:ad:9d:8b:c8:72:6f:f6:c3:75:2e:8a:
be:e4:84:3b:96:21:3e:d1:67:cc:51:b2:a1:34:d5:50:99:82:
d5:5f:6c:7e:c3:1d:8c:c8:23:fc:0b:47:6e:e6:1f:45:5f:23:
06:a7:08:ed:8f:16:81:1c:1e:28:9b:ea:69:f0:4d:15:bd:62:
70:f9:99:6f:7a:ad:88:29:59:20:da:2f:d0:89:d0:f4:58:e8:
85:5d:9f:d0:55:e4:c3:a2:bd:78:a3:9b:cd:fe:e8:77:21:08:
1b:d7:59:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:57:32 2026 by rpki-client