This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
File: 3230332e38332e32382e302f32332d3234203d3e203538333738.roa (raw, json)
Hash identifier: /XG3071XWZMkpDs317+jcskExZ2YMBWnbeGIwYNHihY=
Subject key identifier: 0F:E4:2D:E2:B1:DD:E4:4D:1C:54:95:5F:32:09:0D:8A:E2:A6:30:39
Certificate issuer: /CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Certificate serial: 4884B219B9D6DA282594E5B25E9240F0C0EEFAE8
Authority key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
Signing time: Tue 16 Dec 2025 08:00:02 +0000
ROA not before: Tue 16 Dec 2025 07:55:02 +0000
ROA not after: Tue 15 Dec 2026 08:00:02 +0000
asID: 58378
IP address blocks: 203.83.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 18:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:84:b2:19:b9:d6:da:28:25:94:e5:b2:5e:92:40:f0:c0:ee:fa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F33127B2252454B491C5DC9FE3937C56F28F8066
Validity
Not Before: Dec 16 07:55:02 2025 GMT
Not After : Dec 15 08:00:02 2026 GMT
Subject: CN=0FE42DE2B1DDE44D1C54955F32090D8AE2A63039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6b:d6:f2:cf:c3:a9:e9:9a:01:5f:36:d7:ab:
c2:8e:49:46:9c:72:04:f0:22:8c:73:10:bc:35:7f:
02:40:e8:c5:3b:59:cb:a1:57:2b:f9:0a:a6:b4:57:
34:ec:29:ea:e2:b3:e3:56:9c:14:58:33:ce:1b:74:
33:cf:e7:65:9c:79:ef:1b:c1:fa:b7:00:ca:61:1b:
2c:e9:1f:25:40:81:80:56:2b:8e:c4:fc:2c:b6:4f:
e0:1b:62:3c:ba:fe:69:f1:7a:16:30:98:26:85:43:
8b:8b:2c:ee:3f:e9:a3:36:6b:cc:c6:b0:94:c9:5e:
a6:24:4e:eb:b6:d8:30:b4:54:ff:63:40:23:c5:a5:
51:4e:d1:dd:8a:21:82:ea:72:6a:b8:69:4c:7c:17:
51:1b:4b:68:fa:21:78:45:5c:e5:d1:17:49:1c:80:
25:e0:1d:c6:b4:e4:30:ac:d3:b6:28:f7:51:9a:c7:
65:72:6d:a3:a1:45:8a:61:e7:fe:3e:e0:70:67:31:
e3:ca:15:27:13:c8:74:33:52:aa:48:38:55:75:61:
50:e2:1e:45:e1:74:c8:77:ce:10:6b:d5:03:5c:f7:
f6:ac:ef:42:9e:68:4b:8c:ef:e8:3e:2c:6f:86:b7:
26:e5:c6:ca:2e:bb:6e:f2:d9:d5:0a:04:8a:bd:7e:
34:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E4:2D:E2:B1:DD:E4:4D:1C:54:95:5F:32:09:0D:8A:E2:A6:30:39
X509v3 Authority Key Identifier:
keyid:F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/3230332e38332e32382e302f32332d3234203d3e203538333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.83.28.0/23
Signature Algorithm: sha256WithRSAEncryption
61:ec:21:6e:69:72:74:0f:0d:fa:11:41:2e:56:59:22:95:55:
7d:0f:47:c6:89:7e:55:5e:ec:62:e1:46:a4:41:d4:74:46:52:
9e:33:e0:b6:fe:f8:33:a2:d6:f7:c6:c1:a8:a5:82:1e:e2:ba:
bd:4d:5c:90:56:48:dd:ce:e6:0e:a5:de:d1:fe:9e:fd:3c:a8:
ad:ab:c0:76:29:45:c5:37:35:7b:b4:9c:11:88:dd:92:35:e0:
fe:1e:4b:d3:c4:8e:b4:a6:05:7b:94:54:82:38:dc:6f:f7:26:
64:af:cc:44:b0:c6:87:48:e1:78:5d:0b:ad:a7:29:d1:e1:c4:
21:70:42:64:34:05:85:df:39:2a:1d:b5:5e:7b:13:49:f8:c4:
0d:46:60:73:06:87:5b:1d:7a:04:74:53:93:93:c2:ef:a1:e8:
ec:82:23:97:25:37:83:ed:fe:64:b4:78:2d:2d:7c:05:92:17:
2f:ea:0d:02:76:d5:f3:e1:fb:e7:12:09:03:14:a2:03:93:f2:
8b:8a:cd:fe:46:23:32:8f:3d:3a:e1:79:4d:4b:72:9e:e7:d2:
3a:c7:7d:b8:43:cb:89:d5:3c:c9:b9:2d:bd:ea:f1:f6:11:da:
d8:4e:07:44:f1:bc:11:d0:fc:7f:0c:f8:ad:1f:ae:8a:fa:fa:
12:a9:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:27:47 2025 by rpki-client