This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
File: 3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (raw, json)
Hash identifier: da+6m2Ao8Np4pQ1E/E3mUNsxrZ/EVmn5FouVzksz9c8=
Subject key identifier: 1E:95:53:5C:4D:6D:9E:2D:F3:7C:08:AB:B2:D5:75:0A:2C:6D:F6:62
Certificate issuer: /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial: 6997E89135AE6CB60FFBF88F9DE1280F7519D74F
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
Signing time: Mon 01 Dec 2025 03:01:09 +0000
ROA not before: Mon 01 Dec 2025 02:56:09 +0000
ROA not after: Mon 30 Nov 2026 03:01:09 +0000
asID: 58381
IP address blocks: 163.53.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 08:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:97:e8:91:35:ae:6c:b6:0f:fb:f8:8f:9d:e1:28:0f:75:19:d7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Validity
Not Before: Dec 1 02:56:09 2025 GMT
Not After : Nov 30 03:01:09 2026 GMT
Subject: CN=1E95535C4D6D9E2DF37C08ABB2D5750A2C6DF662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:f0:35:35:92:f8:6d:44:1b:66:ae:51:73:
ea:04:b3:ab:97:69:f9:d8:3a:ef:60:ce:39:e1:b0:
4e:17:6d:fa:71:8b:16:82:6d:1a:70:36:21:97:07:
bb:c4:27:75:ed:db:ca:81:c6:a5:86:44:3b:6f:85:
64:b1:99:b8:d4:ad:1d:b1:7c:04:25:fb:f3:a0:1d:
7b:c0:49:46:a9:c5:a9:ed:9b:96:89:e4:8b:9a:ce:
1f:17:c4:d5:11:be:3a:a5:0f:83:c2:51:47:02:98:
b4:55:d6:79:fb:24:0e:96:14:b1:52:bd:12:bf:ea:
08:fe:ea:0e:17:57:e0:0a:4a:a1:85:65:56:93:ca:
15:86:d3:69:56:fe:55:d4:3e:01:83:a8:1e:4e:9b:
97:70:d9:cb:15:fc:45:2a:8b:49:2e:7e:c7:cd:41:
0c:d9:22:85:a4:7f:21:2c:9c:5c:57:21:67:e4:15:
17:61:8a:e8:d9:5a:cf:93:3d:60:d7:5f:ec:db:65:
90:f0:24:c7:a5:e5:67:21:ea:02:c4:73:59:6f:59:
98:f0:21:75:9c:08:f6:00:b6:54:72:1b:45:ff:85:
f1:f3:a6:80:20:61:e8:c0:72:0e:80:b6:ce:19:30:
43:ce:55:54:74:1b:fb:6c:4c:52:68:ac:47:b1:2c:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:53:5C:4D:6D:9E:2D:F3:7C:08:AB:B2:D5:75:0A:2C:6D:F6:62
X509v3 Authority Key Identifier:
keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.192.0/22
Signature Algorithm: sha256WithRSAEncryption
10:72:c5:ba:ec:f1:ef:c5:56:41:b8:92:c1:81:0e:4f:a0:b5:
5d:47:e2:6b:e0:74:05:7b:c5:a0:06:6c:4b:db:90:10:71:eb:
7a:19:13:0e:e1:7b:a0:0b:6a:74:25:32:2c:ff:f3:60:fc:7c:
1d:4b:c3:89:c5:73:29:8a:42:f8:d4:e6:27:c4:6d:07:f2:96:
28:99:ae:ab:17:37:45:d3:cc:c2:b2:fd:ce:44:e7:e3:c7:19:
8f:42:81:4c:12:f1:8f:45:bf:b0:0b:cd:4b:37:c8:92:9b:d4:
6f:b1:8c:29:bc:e8:24:0c:fe:43:0d:f1:33:d4:3b:d7:39:ee:
2f:f1:74:1e:5f:65:29:1a:95:af:80:df:70:a2:33:ac:45:3b:
78:b0:34:a7:12:f3:6b:47:5c:c5:f4:d2:d6:71:08:d0:bf:2a:
29:2b:88:86:49:0f:08:f5:62:06:15:66:ab:c1:7d:2e:49:d8:
f7:61:05:ea:89:71:e0:da:17:a2:c4:d2:99:42:ba:58:8b:b8:
fa:b9:f1:bd:72:34:bd:1d:fd:16:e4:db:49:10:06:53:9e:a9:
ff:83:7b:b3:fc:86:d6:9a:19:8e:ff:1c:69:53:b3:65:e5:ae:
a4:9e:9f:cb:a7:2d:4f:b7:83:2a:2e:40:3c:60:31:cd:88:af:
00:ab:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:26 2025 by rpki-client