This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
File: 32372e3132332e302e302f32312d3234203d3e20313339393338.roa (raw, json)
Hash identifier: 93zBrgb6m1LW3mW3NgO8+L8poGQYWz2Zyn5aV5wC7UU=
Subject key identifier: 4A:D1:50:D8:24:7D:A6:0B:A6:EA:F0:6C:82:BE:BC:1E:C3:5F:59:45
Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial: 43F411AB5538AFCD454804BCD07DF286E565AD74
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
Signing time: Wed 05 Nov 2025 05:00:02 +0000
ROA not before: Wed 05 Nov 2025 04:55:02 +0000
ROA not after: Wed 04 Nov 2026 05:00:02 +0000
asID: 139938
IP address blocks: 27.123.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 23:07:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f4:11:ab:55:38:af:cd:45:48:04:bc:d0:7d:f2:86:e5:65:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Validity
Not Before: Nov 5 04:55:02 2025 GMT
Not After : Nov 4 05:00:02 2026 GMT
Subject: CN=4AD150D8247DA60BA6EAF06C82BEBC1EC35F5945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:01:55:26:03:00:f2:69:f2:03:34:d2:eb:
0f:14:92:82:15:16:32:37:4c:d6:f3:a7:b8:fa:20:
30:01:93:94:27:ac:ce:77:65:57:17:aa:65:aa:33:
3a:99:5d:5a:22:67:95:93:25:4c:58:04:f4:99:8d:
c2:fd:af:c5:6c:75:8f:0b:bd:c1:87:2f:b2:4d:32:
89:ab:9a:fc:10:c0:43:d3:af:39:57:86:ae:9f:b2:
81:2e:12:20:76:0a:ee:cf:7c:0a:05:90:37:e1:06:
18:0a:8c:4c:78:7f:64:91:05:6c:f9:10:89:0d:78:
a5:9c:06:38:bc:45:ea:16:da:a2:bc:67:5b:ac:fa:
bf:ce:1e:01:00:37:a0:ee:f9:64:09:e0:6c:de:f1:
82:b1:3f:f4:99:ec:38:61:6c:7d:eb:96:31:a1:b5:
1d:39:97:a5:d0:0c:12:75:5c:48:39:0d:44:53:b7:
74:d8:3b:c7:6c:22:b4:9d:58:25:1c:6c:83:27:4e:
ae:44:fd:53:cf:04:0e:f6:93:5d:fa:99:52:2c:20:
75:e2:70:f4:51:5f:ad:1c:32:47:f8:6b:e5:59:5b:
56:4a:e2:2f:25:a6:8e:92:7e:0f:a5:ec:cd:29:09:
f2:c1:e6:74:20:19:71:7f:1f:86:c3:40:86:da:b8:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:50:D8:24:7D:A6:0B:A6:EA:F0:6C:82:BE:BC:1E:C3:5F:59:45
X509v3 Authority Key Identifier:
keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/32372e3132332e302e302f32312d3234203d3e20313339393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.123.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:6b:d5:f9:d8:69:9c:da:da:31:a6:c8:92:e9:44:1d:df:d2:
8a:d9:24:69:10:28:db:cd:1e:be:3d:63:9c:f0:65:c4:bd:12:
cc:86:79:b7:d9:82:85:53:ad:7e:75:e2:49:6d:4d:5e:1e:f9:
29:9b:df:ae:23:cb:c6:60:99:ba:a9:66:f8:50:ae:f6:6d:7b:
ba:d1:45:12:64:0a:d6:8e:93:36:22:79:45:99:08:a8:39:7c:
66:2c:ed:90:8c:41:ba:10:f4:16:c8:a4:de:84:66:e5:67:fa:
d2:47:b2:f6:9b:1b:7e:cd:b0:ef:3b:1e:db:71:9d:9d:a3:f2:
21:78:94:24:10:98:ff:d9:30:a4:8d:f6:f2:fe:26:21:04:14:
aa:64:07:c9:c2:30:ad:c3:57:40:ef:4a:b9:86:a7:c4:29:a7:
dc:ba:41:01:0c:bd:85:08:17:ef:32:5f:7f:05:d2:f1:6c:53:
2f:31:a4:fa:5f:68:5d:73:87:11:51:d6:0c:06:78:d8:1c:84:
5c:4b:64:35:d0:5d:13:14:3e:1f:b8:a0:94:d5:ec:58:a1:0b:
7e:a2:f5:ef:04:3c:13:59:eb:d7:69:9c:82:03:fb:93:5c:6f:
5e:96:cf:d6:21:86:fb:aa:0d:07:75:4d:05:19:21:3c:a2:c4:
95:70:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:11 2025 by rpki-client