This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa
File: 3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa (raw, json)
Hash identifier: 1t/YY4k/2f409jhOunWIVWLeQdkIptD7DDSdwQQxlp4=
Subject key identifier: 53:5B:12:7A:13:BE:AB:3B:F3:F8:F8:62:EF:57:FE:4B:22:DC:7D:94
Certificate issuer: /CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D
Certificate serial: 4AF579186810F7F0830ACD96133B6C956AF4345C
Authority key identifier: 63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa
Signing time: Tue 02 Dec 2025 04:07:51 +0000
ROA not before: Tue 02 Dec 2025 04:02:51 +0000
ROA not after: Tue 01 Dec 2026 04:07:51 +0000
asID: 136873
IP address blocks: 157.66.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl
rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 19:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f5:79:18:68:10:f7:f0:83:0a:cd:96:13:3b:6c:95:6a:f4:34:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D
Validity
Not Before: Dec 2 04:02:51 2025 GMT
Not After : Dec 1 04:07:51 2026 GMT
Subject: CN=535B127A13BEAB3BF3F8F862EF57FE4B22DC7D94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:fe:47:5c:29:de:63:f0:b3:b7:b1:f9:c2:
13:02:96:7b:30:24:4b:f2:72:b1:1c:8c:84:53:c2:
4c:3f:20:f2:46:af:31:24:a1:3a:c1:98:e2:7b:fc:
92:4a:61:8d:c7:26:32:8f:48:54:58:a8:ac:f8:70:
23:ae:17:af:a3:d3:c5:13:db:35:f9:65:ae:02:80:
8f:e9:11:d4:f1:7d:2a:96:12:43:d5:02:88:0f:51:
62:b6:c3:fe:61:be:24:08:dc:42:60:20:62:cf:44:
55:20:de:e2:32:89:a1:ae:e8:5d:95:24:d4:b2:b0:
c9:22:3c:d2:b8:37:a2:72:db:96:0c:79:39:2e:3a:
33:85:5c:a3:7b:8d:5f:3d:12:1d:72:81:ea:bf:8e:
18:19:c6:73:2f:4d:8c:a0:3f:c4:43:17:f2:f8:ae:
0c:cc:08:dc:7c:d2:7c:04:7f:f8:7c:66:d5:8b:31:
ce:89:1a:08:69:7e:aa:2e:c1:98:2b:87:20:0e:46:
c8:fa:66:cd:a3:5b:71:f7:89:62:5d:09:67:84:f8:
fd:30:f7:94:b1:cc:a1:e1:47:09:10:98:45:8b:bf:
7d:3c:26:71:dd:d1:12:0a:c6:d2:f1:7a:c1:bf:ef:
b6:f9:95:97:a4:7b:82:00:5f:19:4e:4c:37:90:83:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:12:7A:13:BE:AB:3B:F3:F8:F8:62:EF:57:FE:4B:22:DC:7D:94
X509v3 Authority Key Identifier:
keyid:63:C4:BF:4B:1C:27:C3:40:5E:E7:CA:1D:54:3C:1F:03:BE:F1:2F:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/63C4BF4B1C27C3405EE7CA1D543C1F03BEF12F7D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132382e302f32342d3234203d3e20313336383733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.66.128.0/24
Signature Algorithm: sha256WithRSAEncryption
19:41:08:19:10:89:80:c8:5c:bf:f2:83:5d:95:d3:5e:ef:7c:
f0:78:84:18:0a:0e:30:a2:a3:86:8e:06:fa:42:ed:0f:06:f3:
7d:9c:a4:59:7c:3d:50:e8:ea:1d:ec:7f:3a:42:98:a1:cb:e7:
b4:37:16:35:24:b8:9a:ab:82:0a:cf:a2:63:8f:f6:44:d4:64:
c6:32:bb:28:60:0e:a9:6d:2b:75:bb:31:ea:90:5b:2d:5f:d2:
6a:50:1b:66:58:8e:36:29:9b:46:df:92:6c:5f:e8:c9:ea:99:
9e:57:fb:2b:46:32:51:69:38:2e:11:b9:c8:ac:08:f7:98:99:
08:d4:ab:1b:4f:64:ac:f6:0f:95:6b:55:fc:59:bd:58:d8:be:
59:12:06:24:87:d5:03:37:e7:97:56:7b:a4:fa:b5:3c:37:df:
76:a8:7d:e0:b4:c0:1a:a2:3b:68:2a:43:6f:35:33:76:b1:e7:
7e:df:fa:af:a6:67:e5:6c:5f:23:41:92:79:8d:81:a1:1d:e1:
da:70:3f:13:a9:e9:73:8a:c1:a9:49:d9:0d:39:83:09:e2:d3:
9d:f6:bb:af:7e:5b:3c:65:ee:b6:60:8e:17:98:d7:5d:ac:88:
4b:f3:38:b8:8e:8f:02:9d:2b:46:46:fc:31:4a:85:97:4a:43:
1c:78:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:25:32 2025 by rpki-client