This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
File: 3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa (raw, json)
Hash identifier: zoZa3tLUvTTpmYIJTx5LfPwbAyo/gY5JwiU6TWgDs78=
Subject key identifier: 1D:65:25:21:29:07:F0:40:51:E7:84:73:02:A8:A1:EC:22:87:69:E7
Certificate issuer: /CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Certificate serial: 948D624884CFB3DAF44EA57CA2B2175EF5F63C
Authority key identifier: 83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
Signing time: Thu 27 Nov 2025 16:43:47 +0000
ROA not before: Thu 27 Nov 2025 16:38:47 +0000
ROA not after: Thu 26 Nov 2026 16:43:47 +0000
asID: 142393
IP address blocks: 150.107.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 16:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
94:8d:62:48:84:cf:b3:da:f4:4e:a5:7c:a2:b2:17:5e:f5:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6
Validity
Not Before: Nov 27 16:38:47 2025 GMT
Not After : Nov 26 16:43:47 2026 GMT
Subject: CN=1D6525212907F04051E7847302A8A1EC228769E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:e8:42:7f:54:0c:92:fa:5d:ca:fe:2f:93:
38:a8:78:d3:7b:3f:d8:18:41:5d:bb:40:85:b4:1a:
8d:60:76:04:4a:9c:04:f7:5a:ac:03:92:52:45:a4:
8e:2d:cd:ea:35:51:5d:16:b3:fb:bf:7d:7a:9c:cf:
2e:81:b5:27:db:05:cb:32:61:7e:35:31:96:b7:be:
11:4a:bc:14:01:97:29:78:00:36:11:7a:1d:51:30:
6a:01:c1:65:71:10:7f:66:33:f2:a8:ea:e2:65:94:
b2:05:76:6a:34:98:be:59:2e:01:7d:ea:27:18:0f:
62:42:93:46:c2:f1:f7:92:d9:45:1d:63:08:ef:7c:
95:7b:ba:02:75:a7:af:3c:8e:d3:ad:84:45:8f:29:
d4:e3:15:3b:4f:e9:da:ce:79:b9:f5:1a:3b:ff:fa:
d0:c2:a3:d6:29:02:e1:43:1a:4f:b3:1e:84:4f:79:
ea:b8:11:2a:a6:49:ec:ed:c3:ac:59:7a:1b:c8:a8:
4b:17:95:21:cc:dd:ca:4f:15:eb:4d:b0:2e:14:aa:
4b:3f:84:76:90:b5:af:a3:67:90:85:aa:2f:2b:47:
1a:7c:de:bc:1d:ec:74:47:07:04:6d:65:0f:46:f7:
47:4d:1d:f5:bc:28:ad:24:8b:c4:d4:e3:cc:40:3b:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:65:25:21:29:07:F0:40:51:E7:84:73:02:A8:A1:EC:22:87:69:E7
X509v3 Authority Key Identifier:
keyid:83:D3:98:6C:5C:BD:56:BD:0C:E9:03:D1:B5:1E:AD:65:D1:1D:33:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83D3986C5CBD56BD0CE903D1B51EAD65D11D33A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83d0786d-3d3e-45b7-9665-8d474fd14aea/0/3135302e3130372e3130342e302f32332d3234203d3e20313432333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.104.0/23
Signature Algorithm: sha256WithRSAEncryption
46:55:3a:4e:88:4c:e2:29:3c:2d:70:6b:16:2e:27:9f:ce:4e:
fd:ff:1e:ee:2d:fd:e9:10:0f:0b:ea:70:8e:e0:b9:d7:79:fe:
b9:7f:f9:57:80:52:cb:10:a3:07:3b:c1:8b:73:27:52:f8:7b:
7c:3e:4e:63:5d:ca:ae:6e:6a:3c:0d:3f:fe:c4:f4:c7:60:86:
09:eb:a7:56:f9:16:4e:2b:2d:a8:6e:7f:5d:8a:83:4e:a6:49:
2f:49:9b:ba:30:5f:d6:ae:32:05:78:5c:8b:9e:bd:90:e8:1a:
37:b0:8b:7e:97:e8:00:38:d4:d2:ee:70:d6:8f:8c:22:01:1d:
f5:fe:02:fb:46:c9:a5:da:0d:0a:62:49:3f:c8:e2:e9:18:f8:
d9:0b:57:e7:b4:b4:9f:7a:fe:ab:78:fd:f7:81:9d:59:9c:dc:
1b:52:33:7e:ad:ee:d9:10:19:73:00:e6:13:c2:cc:11:41:0e:
d0:3c:c6:89:fc:47:59:03:eb:aa:ce:4b:d7:f4:d7:11:ef:cc:
48:fd:b7:69:12:05:d7:39:f9:fe:7f:78:82:c7:36:c6:1e:1a:
cb:61:59:6b:a0:8c:f6:c8:f5:5b:a4:ea:15:04:4e:d5:4a:38:
73:df:a9:5f:c3:b7:9e:e7:73:21:d5:47:dc:8e:61:e1:2c:2f:
54:f1:b8:06
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAJSNYkiEz7Pa9E6lfKKyF1719jwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVE
MTFEMzNBNjAeFw0yNTExMjcxNjM4NDdaFw0yNjExMjYxNjQzNDdaMDMxMTAvBgNV
BAMTKDFENjUyNTIxMjkwN0YwNDA1MUU3ODQ3MzAyQThBMUVDMjI4NzY5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96OhCf1QMkvpdyv4vkzioeNN7
P9gYQV27QIW0Go1gdgRKnAT3WqwDklJFpI4tzeo1UV0Ws/u/fXqczy6BtSfbBcsy
YX41MZa3vhFKvBQBlyl4ADYReh1RMGoBwWVxEH9mM/Ko6uJllLIFdmo0mL5ZLgF9
6icYD2JCk0bC8feS2UUdYwjvfJV7ugJ1p688jtOthEWPKdTjFTtP6drOebn1Gjv/
+tDCo9YpAuFDGk+zHoRPeeq4ESqmSeztw6xZehvIqEsXlSHM3cpPFetNsC4Uqks/
hHaQta+jZ5CFqi8rRxp83rwd7HRHBwRtZQ9G90dNHfW8KK0ki8TU48xAO1hlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUHWUlISkH8EBR54RzAqih7CKHaecwHwYDVR0j
BBgwFoAUg9OYbFy9Vr0M6QPRtR6tZdEdM6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
M2QwNzg2ZC0zZDNlLTQ1YjctOTY2NS04ZDQ3NGZkMTRhZWEvMC84M0QzOTg2QzVD
QkQ1NkJEMENFOTAzRDFCNTFFQUQ2NUQxMUQzM0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODNEMzk4NkM1Q0JENTZCRDBDRTkwM0QxQjUxRUFENjVEMTFE
MzNBNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzZDA3ODZkLTNkM2UtNDViNy05
NjY1LThkNDc0ZmQxNGFlYS8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGWa2gwDQYJ
KoZIhvcNAQELBQADggEBAEZVOk6ITOIpPC1waxYuJ5/OTv3/Hu4t/ekQDwvqcI7g
udd5/rl/+VeAUssQowc7wYtzJ1L4e3w+TmNdyq5uajwNP/7E9Mdghgnrp1b5Fk4r
Lahuf12Kg06mSS9Jm7owX9auMgV4XIuevZDoGjewi36X6AA41NLucNaPjCIBHfX+
AvtGyaXaDQpiST/I4ukY+NkLV+e0tJ96/qt4/feBnVmc3BtSM36t7tkQGXMA5hPC
zBFBDtA8xon8R1kD66rOS9f01xHvzEj9t2kSBdc5+f5/eILHNsYeGsthWWugjPbI
9Vuk6hUETtVKOHPfqV/Dt57ncyHVR9yOYeEsL1TxuAY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:54:49 2025 by rpki-client