This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa
File: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier: HKyeZGWabp6YfJUwjDFhsWbo0T55m8huqonU6rGdOys=
Subject key identifier: 53:58:F6:DC:92:B0:37:62:B4:AF:A6:63:80:1B:53:4A:9F:8C:9F:D2
Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Certificate serial: 43BB638746EDF2C582E0B32D54FEE154F21F426E
Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa
Signing time: Sun 18 Jan 2026 05:00:02 +0000
ROA not before: Sun 18 Jan 2026 04:55:02 +0000
ROA not after: Sun 17 Jan 2027 05:00:02 +0000
asID: 45305
IP address blocks: 157.66.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 21:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bb:63:87:46:ed:f2:c5:82:e0:b3:2d:54:fe:e1:54:f2:1f:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Validity
Not Before: Jan 18 04:55:02 2026 GMT
Not After : Jan 17 05:00:02 2027 GMT
Subject: CN=5358F6DC92B03762B4AFA663801B534A9F8C9FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:98:ef:f7:77:e6:eb:a7:62:a3:dc:9d:f7:
f6:d4:3b:f0:5c:bd:e0:97:10:b7:77:99:fc:db:c9:
12:bd:bb:18:b1:42:ba:59:06:a5:53:96:b1:14:f3:
cb:9c:9f:0c:db:d2:ee:9f:bf:4a:59:b3:de:67:fd:
88:44:33:30:85:2b:04:73:7c:24:50:c0:92:66:29:
bb:0a:bd:2e:64:8e:23:54:97:be:4a:da:64:29:e7:
5a:7b:77:56:0c:10:1f:df:22:66:f6:8f:ad:f3:a5:
38:3a:aa:d4:7d:5d:fd:9e:4b:f0:52:f4:da:14:c8:
a9:62:e2:57:28:b5:80:49:ab:26:8d:98:bd:36:4d:
68:90:16:ef:ee:2b:f8:31:2c:5f:c8:7e:a3:48:c4:
eb:52:56:24:6f:30:64:6f:18:33:ab:c0:88:e2:f4:
48:ff:aa:5c:d9:23:95:09:29:62:52:90:46:c1:63:
62:69:3c:44:8b:33:e9:3b:b7:11:56:d7:7a:9a:e1:
26:e2:74:39:0d:f9:66:30:10:68:6d:c9:06:30:1d:
ff:47:d3:32:cd:a7:a6:2d:ec:4a:4c:49:76:d5:d7:
6b:55:6c:23:07:fb:ae:cf:1c:a5:f8:a8:dc:e8:77:
3d:ba:24:61:29:1c:05:c9:91:18:cf:a2:05:a6:33:
ab:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:F6:DC:92:B0:37:62:B4:AF:A6:63:80:1B:53:4A:9F:8C:9F:D2
X509v3 Authority Key Identifier:
keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/3135372e36362e33382e302f32342d3234203d3e203435333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.38.0/24
Signature Algorithm: sha256WithRSAEncryption
65:86:9a:09:54:42:d3:44:d4:24:c0:af:4c:1e:f6:e2:9c:75:
cf:1d:4a:54:e1:4d:66:82:c2:0b:d8:b8:9d:3e:31:a4:5c:31:
b0:3b:8a:6b:70:ac:44:37:47:a2:9e:81:eb:64:d5:17:ce:5d:
75:aa:85:cd:5c:4a:ac:0c:a3:22:19:70:1a:39:e9:44:8d:ad:
a4:73:e8:a8:30:e1:22:94:7a:39:d7:4c:89:eb:30:df:04:1d:
30:0e:a7:b0:5b:15:4b:75:70:83:c7:f4:74:5d:87:5e:ec:4a:
73:50:d0:36:76:c4:f6:ed:93:49:81:47:2a:d6:cb:3c:ad:20:
a2:7e:5f:97:c0:45:4d:e1:69:d4:50:c6:9a:8b:86:70:6b:0a:
26:48:ff:53:65:d2:6e:71:17:ca:4c:b0:b0:7a:01:50:22:24:
83:ba:e1:22:85:e1:b7:b7:24:c1:9d:20:95:4b:1f:dd:5e:71:
74:3a:ba:30:6b:6f:68:d6:10:22:36:4b:50:f3:a0:e6:a8:57:
02:76:61:ca:81:b9:3c:44:5c:ce:0d:c2:c6:73:14:b6:b3:a2:
19:5a:d5:cb:99:31:10:d1:63:11:e4:b9:4c:1a:76:ab:1c:01:
b1:99:07:77:7b:14:4e:01:95:1a:2d:38:09:48:26:e4:7b:21:
46:61:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:44 2026 by rpki-client