This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435333233.roa
File: 3138322e31362e3235332e302f32342d3234203d3e203435333233.roa (raw, json)
Hash identifier: rnW674Nfaq+nd+C3AdFWIPPv9a7ZGDzKn3MFfHaiNyU=
Subject key identifier: B5:DA:0B:8A:C1:BE:A1:48:EC:ED:38:E5:EA:8E:B8:49:22:83:D1:4E
Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Certificate serial: 3CB73933AA4CD2ED126415BF69876B34C6EBE304
Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435333233.roa
Signing time: Fri 30 Jan 2026 06:18:12 +0000
ROA not before: Fri 30 Jan 2026 06:13:12 +0000
ROA not after: Fri 29 Jan 2027 06:18:12 +0000
asID: 45323
IP address blocks: 182.16.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 03:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b7:39:33:aa:4c:d2:ed:12:64:15:bf:69:87:6b:34:c6:eb:e3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE
Validity
Not Before: Jan 30 06:13:12 2026 GMT
Not After : Jan 29 06:18:12 2027 GMT
Subject: CN=B5DA0B8AC1BEA148ECED38E5EA8EB8492283D14E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:e9:f0:48:dc:fd:21:53:bb:bb:70:b9:ca:
41:17:a3:a7:ff:aa:00:88:32:70:50:ee:47:19:f6:
7d:ae:53:97:39:b6:8e:76:34:b0:0e:4c:b4:41:4f:
24:87:4f:8e:1a:11:d2:78:a9:d3:ee:bc:4d:bc:de:
37:9a:62:36:a9:80:89:38:32:d8:1f:b6:bc:7f:33:
ed:8a:c0:0b:8d:43:15:1b:6b:01:1b:2a:9f:a7:74:
ce:0d:64:4e:bb:b7:fb:23:f4:12:77:a6:e5:71:d2:
87:92:a1:eb:fc:16:9d:7a:ec:82:76:4f:63:d3:93:
e0:9e:49:b1:ff:d7:e8:1f:e3:82:86:0a:28:99:c8:
74:52:26:7a:d0:a4:df:88:7f:29:b3:22:8d:26:64:
a8:82:cb:0a:36:2e:57:4a:be:20:62:05:df:20:b4:
76:84:f7:eb:f7:97:3e:da:ba:8f:09:23:52:61:2e:
6e:fd:61:e4:78:c1:0e:99:0b:49:48:0d:f7:5d:59:
b1:b1:0a:64:78:4b:73:e9:a0:2c:1f:ba:37:6c:b6:
fe:8f:3a:e9:00:da:0e:fc:83:8b:09:ab:f3:8b:b9:
5a:2e:14:10:1e:3a:12:32:e0:63:23:9b:43:ba:ca:
24:21:f7:d8:42:a8:3c:53:6f:e1:9d:ce:e4:13:e0:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DA:0B:8A:C1:BE:A1:48:EC:ED:38:E5:EA:8E:B8:49:22:83:D1:4E
X509v3 Authority Key Identifier:
keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3138322e31362e3235332e302f32342d3234203d3e203435333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.16.253.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:72:e3:91:9a:65:ee:74:56:b6:38:4d:18:bc:4f:cb:58:0d:
66:56:eb:da:19:5d:50:6a:26:e1:6a:d3:59:15:4e:62:f3:2a:
c4:f9:ef:40:a6:de:5e:b0:ee:4c:5a:df:a8:6c:59:47:d6:8d:
93:6c:14:77:02:f0:48:f0:33:a7:34:ff:ff:a0:11:22:7b:b9:
80:c7:60:b4:fb:ca:d6:7c:1a:1e:3f:22:98:58:61:4d:e5:64:
00:c8:e6:ab:34:cd:c7:7d:68:31:bd:7f:0c:1b:45:3e:e2:c8:
f9:10:59:c1:02:62:18:3b:cf:b6:58:d4:4e:b6:92:ee:b1:2a:
32:2d:b4:b1:e3:2f:90:55:90:0d:ed:87:fe:c1:a9:a6:57:f6:
9b:52:44:b3:e1:08:ab:5f:13:c4:23:36:82:92:79:72:58:5f:
ac:ed:4d:5c:cd:d8:69:1b:f1:f0:b4:2c:c3:c6:ce:d3:2f:18:
3e:8b:9d:9a:f2:06:36:48:b9:b9:43:ef:11:d7:f9:b4:fc:a8:
38:c0:e6:21:af:b0:23:66:19:2f:56:3a:6a:33:6d:79:89:69:
5e:24:1c:ed:56:6f:31:3a:ee:b4:f5:a5:d4:2e:da:bd:9b:3b:
9e:8d:d2:b5:e8:02:12:1e:b5:7c:b5:b1:51:0e:41:af:33:19:
dc:3a:e9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:36 2026 by rpki-client