This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/38322e3135382e3132382e302f31392d3234203d3e2039333431.roa
File: 38322e3135382e3132382e302f31392d3234203d3e2039333431.roa (raw, json)
Hash identifier: kXLN0HaZu/PhLPiFi30mit71JHQuO6u1X5gZIB305jg=
Subject key identifier: F2:39:72:AB:28:3C:E0:CF:03:9C:58:F4:B2:67:20:9C:0F:8B:4E:A7
Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Certificate serial: 599C63ED5958FC44E3D3273C82D4C2A7981F0319
Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/38322e3135382e3132382e302f31392d3234203d3e2039333431.roa
Signing time: Thu 13 Nov 2025 06:23:03 +0000
ROA not before: Thu 13 Nov 2025 06:18:03 +0000
ROA not after: Thu 12 Nov 2026 06:23:03 +0000
asID: 9341
IP address blocks: 82.158.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 19:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9c:63:ed:59:58:fc:44:e3:d3:27:3c:82:d4:c2:a7:98:1f:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA
Validity
Not Before: Nov 13 06:18:03 2025 GMT
Not After : Nov 12 06:23:03 2026 GMT
Subject: CN=F23972AB283CE0CF039C58F4B267209C0F8B4EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:3c:49:b7:52:60:c2:6d:1d:a4:ce:69:ee:
65:70:a5:48:df:e3:44:25:27:2c:9c:9a:f8:72:c0:
87:2e:1c:42:f8:6d:93:c7:7d:1d:c9:3c:9f:3b:27:
03:fe:e7:83:1b:ee:20:c7:0e:a7:9a:13:59:8d:f4:
72:c0:05:76:08:c2:bf:98:47:a2:42:a7:99:f5:d9:
7a:2f:c0:d8:04:58:9a:b9:e0:f0:86:d1:dc:25:6e:
d2:38:fd:69:17:1b:61:be:94:0c:4e:cc:dc:28:87:
83:6f:12:da:58:46:9a:f6:f2:44:a5:e2:a9:94:9c:
a2:37:fa:36:ca:86:69:0f:4c:02:d5:65:99:74:2f:
96:04:87:6d:7e:aa:54:4a:9e:1a:ac:15:e1:36:63:
44:bf:9f:4f:ac:0e:39:f0:31:79:c8:ad:12:c7:02:
9a:2a:05:2b:23:61:f0:8b:9d:17:d0:61:08:00:7b:
27:29:59:fe:bd:7d:ef:2f:00:84:e6:51:ed:b1:10:
31:bd:87:68:21:1a:43:12:fe:10:3f:43:26:af:51:
2a:79:37:3a:1f:da:46:a6:e9:15:f9:c8:57:7f:b0:
03:3b:cb:43:2e:53:88:f8:20:44:1f:37:9e:48:59:
26:e8:e2:a1:21:1c:3b:40:18:5b:96:63:40:9c:4e:
45:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:39:72:AB:28:3C:E0:CF:03:9C:58:F4:B2:67:20:9C:0F:8B:4E:A7
X509v3 Authority Key Identifier:
keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/38322e3135382e3132382e302f31392d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.158.128.0/19
Signature Algorithm: sha256WithRSAEncryption
93:08:64:37:ac:95:3a:e0:86:27:b5:54:d7:77:45:79:6e:42:
74:f2:50:ee:2f:17:8f:dd:d6:39:22:34:a5:8d:ab:a7:7b:42:
b1:5d:db:08:81:75:6f:87:0f:ac:bf:8b:96:70:10:c5:cf:24:
f8:20:0f:4c:cf:25:43:c1:f5:d7:23:1a:87:19:f2:95:7b:a2:
75:c9:89:b4:3d:c1:38:fb:74:43:b2:6a:17:d0:ee:85:4f:9a:
d9:68:e6:96:69:c4:5a:fd:bd:4e:1b:7a:46:7b:2a:0b:b9:1e:
c0:e9:1f:6f:bb:e3:6b:7c:45:08:9f:b9:7d:87:49:e4:1d:9a:
ab:21:9e:88:58:85:bb:71:55:4e:e8:f3:1f:b0:39:d4:59:c5:
c2:7b:86:51:66:66:15:3f:ba:eb:db:31:fa:80:45:07:c5:9c:
b8:12:8a:c7:e8:ce:03:00:3a:e6:84:3a:35:4d:77:97:d7:48:
b7:59:ef:9c:80:28:16:4a:c0:f2:26:37:ae:d7:a9:05:d8:7c:
e4:ea:84:10:a1:8f:71:5a:cf:07:90:2e:64:be:b9:8a:1a:a8:
73:2b:5e:ae:fa:de:11:65:33:7b:5b:e4:89:78:27:3c:8c:d7:
fc:c6:41:77:8d:ea:82:a8:28:8f:a6:61:63:b2:4a:9a:b7:9e:
e1:37:b8:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:06 2025 by rpki-client