This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa
File: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (raw, json)
Hash identifier: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=
Subject key identifier: 20:8E:B1:61:48:1C:31:80:F2:8F:6C:C4:96:97:3A:19:9B:ED:AA:66
Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial: 1D337DEFC9793940A8BF20B1F5AD117C4B2267A4
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa
Signing time: Thu 13 Nov 2025 05:02:29 +0000
ROA not before: Thu 13 Nov 2025 04:57:29 +0000
ROA not after: Thu 12 Nov 2026 05:02:29 +0000
asID: 153157
IP address blocks: 160.191.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 21:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:33:7d:ef:c9:79:39:40:a8:bf:20:b1:f5:ad:11:7c:4b:22:67:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Validity
Not Before: Nov 13 04:57:29 2025 GMT
Not After : Nov 12 05:02:29 2026 GMT
Subject: CN=208EB161481C3180F28F6CC496973A199BEDAA66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:c7:9f:9c:cc:e6:89:39:01:61:ce:e3:72:
c9:53:3c:4f:15:c2:93:ce:a5:84:59:1d:2d:33:39:
db:75:29:d6:a1:b2:be:fc:61:9f:f5:3b:97:ab:a2:
f1:eb:fc:8e:dd:42:95:22:d2:b5:87:30:be:fc:76:
3b:1b:6f:b8:67:fc:58:24:2a:f0:bf:83:27:fc:d3:
f5:cd:02:c2:f0:df:7d:56:b8:8f:25:fc:f1:47:ce:
0b:c0:28:3f:d4:85:ec:07:56:6e:f5:8e:2c:01:2d:
4e:84:86:e1:6a:e7:2b:cb:9c:56:cd:7a:07:10:95:
ba:a7:16:42:f0:01:59:4b:3d:10:6c:cb:74:8f:1e:
45:31:e5:b1:78:15:3b:fe:6f:35:4e:f3:3d:bc:b2:
e6:41:9b:a5:42:54:23:05:b9:cc:5d:05:e3:f6:a0:
7b:c4:72:ba:dc:6f:ee:c6:ee:01:6f:49:23:b7:7a:
36:4d:2e:cf:0d:98:06:d9:58:bf:72:d7:88:c6:5d:
16:06:31:0d:9b:a4:4d:4d:f0:7f:f1:c4:54:dd:65:
e5:3d:dc:60:be:bc:24:65:bc:2b:fb:5f:c3:82:a9:
cb:a1:20:4c:d1:79:45:5a:16:ea:c4:19:20:36:f4:
bb:e1:f8:03:ff:97:01:5f:9d:62:ef:2f:22:c7:9f:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8E:B1:61:48:1C:31:80:F2:8F:6C:C4:96:97:3A:19:9B:ED:AA:66
X509v3 Authority Key Identifier:
keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.191.199.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f5:50:f8:d7:a5:d0:59:6c:4a:69:97:22:28:e0:57:f8:58:
a0:be:eb:dd:75:1d:7d:8d:cd:34:01:1c:19:6f:c7:ae:d6:6b:
94:4a:d7:72:d3:34:6d:41:0d:42:be:4c:d3:9c:1a:59:8d:fe:
9b:08:31:15:ba:93:4e:df:89:96:1c:2a:11:41:12:57:f8:e5:
fd:f3:d5:f3:45:9e:21:8d:ab:f1:c1:18:fe:c2:a0:94:7b:d1:
47:05:8a:99:ff:8c:9b:76:12:3b:6c:e2:b7:4d:13:de:f3:3a:
2e:cd:10:16:da:09:02:b3:ab:6e:b3:91:96:1a:03:78:5e:4e:
df:c2:b2:0d:2b:2d:46:43:ac:50:d2:b3:b5:eb:c8:8c:59:b5:
14:25:a7:b8:33:6d:82:de:ac:a8:a4:41:7a:2c:60:ee:29:4d:
5c:5b:1a:e1:f8:fd:66:41:bf:69:06:ac:76:96:9d:a8:9e:b0:
c7:42:7b:42:a0:9d:79:f0:58:f1:be:7a:66:86:47:cc:79:3e:
8b:f3:05:bc:bc:7f:08:5b:50:57:8b:2d:d8:c0:79:49:c2:c0:
fa:00:7f:7a:76:c8:07:82:b5:a7:e3:47:63:73:30:b2:2a:64:
92:e3:38:d1:17:77:37:d4:0c:b3:06:81:b8:86:97:c2:fe:c0:
60:c9:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:42:04 2025 by rpki-client