This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa
File: 3135372e31352e36362e302f32342d3234203d3e20313532333737.roa (raw, json)
Hash identifier: fxONR0UgQfuA8uLufmdVhYcok48YZDVOTWo+bGUHEd4=
Subject key identifier: 3B:06:E9:BA:3A:33:B2:67:F4:4A:73:2A:A5:EE:2A:D7:71:5B:04:5C
Certificate issuer: /CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Certificate serial: 40EB091F6BA4C993E52429AE31B8D64FCF7C2372
Authority key identifier: 35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa
Signing time: Mon 22 Dec 2025 07:02:34 +0000
ROA not before: Mon 22 Dec 2025 06:57:34 +0000
ROA not after: Mon 21 Dec 2026 07:02:34 +0000
asID: 152377
IP address blocks: 157.15.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 12:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:eb:09:1f:6b:a4:c9:93:e5:24:29:ae:31:b8:d6:4f:cf:7c:23:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B
Validity
Not Before: Dec 22 06:57:34 2025 GMT
Not After : Dec 21 07:02:34 2026 GMT
Subject: CN=3B06E9BA3A33B267F44A732AA5EE2AD7715B045C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:bb:cb:96:8b:fc:1d:c4:98:b8:19:ec:87:
fe:09:3a:65:61:12:af:60:24:a9:34:0a:7f:f5:1a:
83:37:23:18:6c:3b:8d:b1:fd:f5:fe:f5:02:bb:4a:
b2:88:37:2a:bf:7f:1f:cb:f2:ba:48:6d:f2:3b:77:
2c:61:57:88:d8:d1:cd:d8:db:c5:33:7e:33:49:f7:
36:23:c3:61:ca:29:8b:2a:21:89:da:f6:a9:ac:2b:
72:dc:ee:42:14:d5:c4:63:95:e2:3b:7f:43:0f:c2:
5e:0a:fb:3a:8d:17:7b:cf:23:c8:10:c4:94:0f:e1:
03:d8:00:c8:ff:c4:b9:72:4f:b9:dd:5f:17:54:03:
e6:fc:68:16:21:7f:4d:13:67:fa:e6:f2:20:71:7c:
e2:9d:30:41:e0:f9:13:4f:7f:e8:a2:50:29:2e:67:
d1:d5:d9:4e:1d:d2:b6:87:06:22:27:14:94:68:46:
6e:3c:8a:ff:b7:3e:d1:32:9d:71:72:f8:19:92:46:
77:72:75:1b:09:e2:7f:65:cd:32:66:ca:4e:ff:23:
62:4a:23:9c:14:41:50:e0:ee:26:7c:8f:53:7d:84:
4e:6c:d2:20:74:11:d2:90:37:eb:8a:c3:f6:aa:00:
7d:95:7d:b0:db:5a:1b:57:79:b3:cc:ef:bd:55:18:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:06:E9:BA:3A:33:B2:67:F4:4A:73:2A:A5:EE:2A:D7:71:5B:04:5C
X509v3 Authority Key Identifier:
keyid:35:0B:AE:86:CA:7B:54:F1:B9:E5:3A:C6:0E:E2:BA:A5:15:63:F6:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/350BAE86CA7B54F1B9E53AC60EE2BAA51563F67B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32342d3234203d3e20313532333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.66.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e2:cd:2e:60:5a:7b:22:8f:b7:6a:82:d1:3f:11:c4:77:a7:
a9:78:47:a3:1e:86:ec:f0:25:71:e4:94:a0:16:d2:78:a4:7d:
1a:7d:61:dc:15:f4:b3:cf:e8:06:04:c3:8e:7c:97:19:f8:3a:
34:53:87:0d:56:fb:b5:52:09:b6:5f:47:af:62:71:dd:4a:ba:
d0:18:c7:8a:db:00:05:31:69:c6:d2:b0:9e:62:10:01:2a:0f:
59:aa:f6:3f:3b:68:8a:84:ea:b8:7b:e2:37:ac:82:1f:a7:e2:
d0:20:e0:24:58:bb:87:9b:40:37:3c:ef:3b:9e:4e:93:32:01:
3b:e6:43:c4:8c:f1:d4:85:ca:27:48:0e:d6:d9:77:bc:4e:56:
eb:05:7f:93:0f:53:c7:38:7b:05:e4:38:58:a3:4e:76:c0:cc:
03:2c:39:ad:79:96:ec:a1:7a:13:09:8a:b8:f2:00:ec:48:20:
8c:11:6c:dc:79:97:dd:b0:12:86:90:eb:82:5a:59:7d:5d:e3:
84:3b:30:90:4a:8e:f6:cf:c9:8e:c2:83:ed:33:66:33:9d:db:
80:e5:8b:43:fa:89:d5:d1:0e:56:da:32:34:1d:b3:34:5e:f1:
4f:92:1c:0a:a2:33:8b:cb:df:03:cf:34:37:b6:d6:50:73:f2:
12:08:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:12:53 2026 by rpki-client