This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
File: 3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa (raw, json)
Hash identifier: mWzhkuRRp6o1Au1AW0FJ/m2nQ9Sa4O9bV344gG0E6vo=
Subject key identifier: 2B:1F:95:13:83:13:3F:65:FF:3D:E5:49:83:F9:F1:CA:5F:FB:2D:AB
Certificate issuer: /CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Certificate serial: 08A1A5FE86C5293C02797FDC7F9BEE4251482B09
Authority key identifier: A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
Signing time: Wed 12 Nov 2025 08:03:04 +0000
ROA not before: Wed 12 Nov 2025 07:58:04 +0000
ROA not after: Wed 11 Nov 2026 08:03:04 +0000
asID: 153148
IP address blocks: 160.191.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl
rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 07:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a1:a5:fe:86:c5:29:3c:02:79:7f:dc:7f:9b:ee:42:51:48:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9D663C6EBCD250AA8927EA094627C9415DEE7FC
Validity
Not Before: Nov 12 07:58:04 2025 GMT
Not After : Nov 11 08:03:04 2026 GMT
Subject: CN=2B1F951383133F65FF3DE54983F9F1CA5FFB2DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:fa:6e:36:50:2f:1f:da:9a:c9:b8:0c:8e:
1c:fe:b0:db:23:85:9f:f6:45:b3:0d:6a:ac:2a:29:
ff:e0:ac:5b:0a:f1:a2:86:00:89:82:e8:1f:14:b4:
e9:b4:65:26:f5:0d:d2:8d:19:37:cb:6a:95:e0:cb:
ca:75:a7:a8:3c:77:66:fd:1d:fe:64:f6:30:db:ac:
80:d9:78:40:58:e8:71:31:4c:2c:ba:0b:54:0a:b4:
06:f3:84:4d:60:7a:61:5e:3d:06:55:79:9f:40:99:
1a:d2:1d:5b:5f:2f:10:09:02:c7:1b:81:3a:1d:9b:
41:0c:30:43:e3:01:68:53:77:56:18:d6:e9:dc:1b:
70:25:53:7d:69:e4:5a:e3:b4:3e:2c:38:2e:69:1d:
1c:08:1a:6a:b7:d1:7b:00:18:af:55:c0:7a:5b:58:
3b:82:09:df:63:c6:bb:5e:20:7e:98:b5:ff:60:b8:
10:40:09:9a:b0:48:7b:90:b4:ad:b8:12:df:0a:58:
55:d4:8d:19:84:ba:c7:3e:37:1e:0b:6c:71:05:54:
69:dc:e0:5e:4e:da:bf:bf:e7:de:fb:cf:5a:87:f7:
d1:bd:0f:51:82:0e:f2:4f:5c:9d:02:fb:49:92:ae:
fc:62:94:e2:f4:c3:64:9d:cb:ad:eb:0d:84:2a:de:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:95:13:83:13:3F:65:FF:3D:E5:49:83:F9:F1:CA:5F:FB:2D:AB
X509v3 Authority Key Identifier:
keyid:A9:D6:63:C6:EB:CD:25:0A:A8:92:7E:A0:94:62:7C:94:15:DE:E7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A9D663C6EBCD250AA8927EA094627C9415DEE7FC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/282a9bd9-166f-453e-b3c0-e6b3ef92a540/0/3136302e3139312e36342e302f32342d3234203d3e20313533313438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.64.0/24
Signature Algorithm: sha256WithRSAEncryption
04:dc:a4:d4:b2:6f:f8:12:37:eb:9b:aa:8d:6d:cb:d9:be:1e:
05:d8:9f:6d:1a:11:17:72:10:0f:9d:91:0e:e4:71:ac:e9:4e:
81:ca:e6:6b:c9:4e:2f:1e:d0:1f:1b:3c:81:47:f9:03:0b:c6:
81:0b:e4:ba:29:49:a4:c2:7e:b6:21:b6:b1:42:a4:8a:a5:9b:
ff:ae:9b:fc:80:35:bb:a2:24:39:1f:05:74:09:b0:3d:88:b4:
86:6c:3f:04:a9:d6:82:97:e9:8f:06:61:86:94:37:84:65:3e:
88:73:1f:54:41:19:e7:77:74:81:f4:fb:08:2a:e0:e9:04:39:
3a:8c:5a:d8:b8:d9:5e:45:97:51:52:97:59:ac:cc:3b:cf:8c:
a7:d9:2a:93:49:fc:3c:b3:be:39:b7:41:e4:e9:9f:08:e7:94:
a8:63:55:28:78:17:92:78:33:ac:aa:30:ba:53:71:c0:02:e9:
23:84:a5:bd:81:9f:1c:be:e9:19:29:9e:81:9d:86:64:77:09:
60:e7:b4:26:e8:b4:a1:f8:f3:41:69:47:b8:f4:df:ec:78:63:
47:7d:c3:70:b5:c1:e5:96:97:ae:9e:b5:8f:56:db:76:fb:de:
4a:c7:39:ee:49:d2:3b:75:90:c3:77:20:c8:f5:11:42:21:51:
cb:c8:0d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:28:38 2025 by rpki-client