This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa
File: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (raw, json)
Hash identifier: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=
Subject key identifier: 0F:F6:22:28:3F:DB:91:EA:D0:A4:95:D2:B2:94:E3:9B:E9:C3:87:CA
Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Certificate serial: 79B66EB44B707451B1B5D98F6E54AE89E3E6C169
Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa
Signing time: Thu 22 Jan 2026 20:00:01 +0000
ROA not before: Thu 22 Jan 2026 19:55:01 +0000
ROA not after: Thu 21 Jan 2027 20:00:01 +0000
asID: 152373
IP address blocks: 157.15.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 03:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b6:6e:b4:4b:70:74:51:b1:b5:d9:8f:6e:54:ae:89:e3:e6:c1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8
Validity
Not Before: Jan 22 19:55:01 2026 GMT
Not After : Jan 21 20:00:01 2027 GMT
Subject: CN=0FF622283FDB91EAD0A495D2B294E39BE9C387CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:bc:b1:91:ea:26:21:18:89:c9:23:f5:65:
68:31:64:c5:5e:8e:cc:9e:a2:55:9b:57:e9:75:f6:
64:e1:d6:b9:69:d6:19:2c:ee:02:99:b4:9d:4e:be:
73:53:b1:3f:da:28:f1:25:97:a7:c5:66:85:e3:8f:
3e:05:48:86:42:66:14:8b:5e:34:b3:63:f7:dc:f1:
6d:65:0f:0c:f6:33:f0:8d:c1:db:ce:4f:22:40:fc:
1b:1f:ac:f5:46:81:d5:7e:ee:ff:fb:23:39:fa:f3:
59:d2:32:08:95:06:10:b6:7d:1d:7a:f6:df:e6:79:
29:46:91:f6:8f:33:45:3a:db:54:20:09:bd:4b:19:
94:c4:dc:ce:43:48:5b:fe:c8:d3:4c:45:6f:e1:c6:
67:79:6d:4f:13:63:d7:7b:e3:46:92:db:3e:12:86:
17:95:d8:fe:b6:a4:05:ad:75:dd:44:d8:c0:12:5f:
2d:4b:34:0c:14:5b:73:fe:e6:ba:d4:d6:b1:57:ba:
00:8e:de:4d:6e:58:6a:7e:b6:52:53:80:fe:e7:1d:
1a:27:7e:97:7f:86:53:51:3c:7f:6f:c3:26:ac:16:
53:c3:d1:2b:95:18:5f:f2:a2:8d:b4:ef:03:da:cb:
e8:dc:f0:e2:b7:c9:17:11:cf:a5:ed:23:a5:67:5c:
ec:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F6:22:28:3F:DB:91:EA:D0:A4:95:D2:B2:94:E3:9B:E9:C3:87:CA
X509v3 Authority Key Identifier:
keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.62.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8c:53:2a:ba:88:d3:61:76:06:c1:2e:6a:74:0f:19:3d:66:
3d:96:9c:e2:37:7d:4f:32:2c:9b:d0:7c:fc:59:78:be:40:3a:
4f:a3:04:50:8d:cc:7e:3c:ba:21:9f:2d:cb:ba:07:30:13:cc:
ea:74:12:b5:4b:e7:81:0a:1b:d2:5f:f6:32:37:2b:d4:7f:18:
f0:7a:17:c9:fc:6f:a2:e9:a9:38:26:8a:2d:5b:b7:b1:7b:26:
78:2a:28:21:fa:36:1a:09:71:74:17:08:36:52:79:fa:5a:0f:
ed:be:d3:f0:f2:e5:25:bf:5b:f3:69:6f:b3:fc:58:d9:dc:59:
d9:22:05:53:b5:17:53:b7:03:84:af:63:0a:fd:04:07:75:78:
d9:d3:84:bb:2e:b4:cb:a8:6c:a9:cd:58:83:a6:c5:41:63:23:
77:f2:8f:15:41:2c:d2:ff:2f:97:97:9d:e7:3d:c0:f6:06:b9:
6d:a0:c9:84:6f:a8:66:b4:2d:1b:6d:24:26:67:c0:de:28:a6:
5a:0a:37:a9:fd:35:42:34:87:92:4f:58:62:85:29:63:c7:48:
a6:2b:e8:10:69:87:ea:1e:a6:cc:5e:45:c6:4e:a5:93:0e:c7:
3d:51:80:61:f4:9a:00:02:68:08:fe:58:8a:1c:8d:14:39:65:
27:1e:85:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:41:30 2026 by rpki-client