This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
File: 3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa (raw, json)
Hash identifier: ny6LZMas2ELFT+AtF/1jL/2TGD7J3aBGFfPrQeEjEeQ=
Subject key identifier: D0:10:68:8F:8C:D0:FD:38:DD:0F:08:5F:9C:D3:64:F5:02:48:5D:2A
Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial: 7C7581AF6E7479EB980CCDB45BA9665C788D7AAC
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
Signing time: Mon 01 Dec 2025 04:00:02 +0000
ROA not before: Mon 01 Dec 2025 03:55:02 +0000
ROA not after: Mon 30 Nov 2026 04:00:02 +0000
asID: 58488
IP address blocks: 150.107.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 20:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:75:81:af:6e:74:79:eb:98:0c:cd:b4:5b:a9:66:5c:78:8d:7a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Validity
Not Before: Dec 1 03:55:02 2025 GMT
Not After : Nov 30 04:00:02 2026 GMT
Subject: CN=D010688F8CD0FD38DD0F085F9CD364F502485D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:a2:af:37:7c:20:bd:52:34:74:d8:19:1f:
6e:b2:68:b7:7d:af:7d:fb:31:58:0c:f0:8a:ec:ae:
76:85:65:65:e9:92:2e:52:0e:23:f7:aa:dd:08:ce:
37:bf:64:68:7b:fd:d8:38:11:8d:87:1b:90:6b:fb:
ec:44:97:83:d0:f8:1c:c5:d0:a3:e4:bb:30:c7:45:
61:58:c3:34:cb:6b:bd:01:49:4e:58:43:a8:84:9d:
6a:cb:48:d6:90:bb:cb:e0:dc:8c:ca:38:da:fd:d0:
ad:06:fa:7e:98:89:0a:83:02:06:8f:df:f0:a4:ff:
e8:ea:0f:a6:e2:d4:01:92:b6:9e:08:fa:b2:f5:89:
49:21:4d:97:16:77:d2:cd:84:5a:36:d2:a6:4a:e4:
1e:91:c8:f4:b0:fc:93:91:a9:29:fc:a3:c0:c9:64:
ee:1a:64:63:2a:0f:e6:e5:b3:dd:4a:82:5d:b5:39:
d4:62:46:3d:3b:66:94:af:2a:9a:0b:35:4c:e6:20:
e4:96:b4:a5:08:92:d3:ec:46:68:03:4f:46:8f:61:
cf:09:0d:d4:0b:b3:24:65:74:7c:d0:3f:2f:06:45:
5f:e9:dd:0b:20:1b:c2:bc:21:97:72:78:0a:e5:1d:
48:6d:78:1b:99:3c:85:94:71:ae:03:c4:ac:28:f1:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:68:8F:8C:D0:FD:38:DD:0F:08:5F:9C:D3:64:F5:02:48:5D:2A
X509v3 Authority Key Identifier:
keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134332e302f32342d3234203d3e203538343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.143.0/24
Signature Algorithm: sha256WithRSAEncryption
74:16:4b:b4:2d:d9:fb:83:60:d2:0a:d6:22:eb:e7:8a:15:a5:
f0:ec:6f:a9:9e:6d:d9:f4:40:93:e6:d7:84:88:21:28:2d:db:
21:13:02:ef:ce:bd:8b:e8:99:88:a8:e5:6e:20:ea:b8:7a:8e:
cc:30:dc:0c:da:ed:49:d7:cd:ce:5d:0b:6f:35:1e:01:5a:b6:
b5:d0:e2:62:97:b1:8b:2c:16:f8:f8:e8:85:13:7e:23:5d:32:
c6:c9:43:b4:2b:1f:b3:1c:c2:b1:d5:70:57:3a:c9:f4:3d:30:
b2:43:5e:20:a5:33:cd:c6:50:9e:13:ed:d9:21:ae:d3:4f:1b:
9f:4f:ab:d6:59:e0:a6:cd:d1:00:70:c3:21:14:20:ce:b0:bf:
c6:bf:5e:b7:91:6d:46:6c:c8:36:b4:52:e7:ef:31:6a:1f:40:
2e:14:ab:28:1c:a3:a2:11:8f:a3:33:e7:57:1f:c6:8b:6d:88:
54:33:32:9f:ce:d9:e2:2f:b9:34:f9:36:5c:88:d2:df:1e:88:
48:63:b7:0c:9d:76:96:f5:c6:b4:52:1d:aa:41:bc:8a:21:3f:
45:54:4b:5c:f2:4f:7f:79:17:e2:41:2a:22:ef:ee:8e:35:76:
62:4b:7d:10:50:c3:54:86:67:94:7a:25:cc:17:15:76:8c:2a:
15:19:f7:f3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfHWBr250eeuYDM20W6lmXHiNeqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4
MTFBNzA0RDAeFw0yNTEyMDEwMzU1MDJaFw0yNjExMzAwNDAwMDJaMDMxMTAvBgNV
BAMTKEQwMTA2ODhGOENEMEZEMzhERDBGMDg1RjlDRDM2NEY1MDI0ODVEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVT6KvN3wgvVI0dNgZH26yaLd9
r337MVgM8IrsrnaFZWXpki5SDiP3qt0Izje/ZGh7/dg4EY2HG5Br++xEl4PQ+BzF
0KPkuzDHRWFYwzTLa70BSU5YQ6iEnWrLSNaQu8vg3IzKONr90K0G+n6YiQqDAgaP
3/Ck/+jqD6bi1AGStp4I+rL1iUkhTZcWd9LNhFo20qZK5B6RyPSw/JORqSn8o8DJ
ZO4aZGMqD+bls91Kgl21OdRiRj07ZpSvKpoLNUzmIOSWtKUIktPsRmgDT0aPYc8J
DdQLsyRldHzQPy8GRV/p3QsgG8K8IZdyeArlHUhteBuZPIWUca4DxKwo8QkXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU0BBoj4zQ/TjdDwhfnNNk9QJIXSowHwYDVR0j
BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw
RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB
NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzUzMDJlMzEzMDM3MmUzMTM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmuPMA0GCSqG
SIb3DQEBCwUAA4IBAQB0Fku0Ldn7g2DSCtYi6+eKFaXw7G+pnm3Z9ECT5teEiCEo
LdshEwLvzr2L6JmIqOVuIOq4eo7MMNwM2u1J183OXQtvNR4BWra10OJil7GLLBb4
+OiFE34jXTLGyUO0Kx+zHMKx1XBXOsn0PTCyQ14gpTPNxlCeE+3ZIa7TTxufT6vW
WeCmzdEAcMMhFCDOsL/Gv163kW1GbMg2tFLn7zFqH0AuFKsoHKOiEY+jM+dXH8aL
bYhUMzKfztniL7k0+TZciNLfHohIY7cMnXaW9ca0Uh2qQbyKIT9FVEtc8k9/eRfi
QSoi7+6ONXZiS30QUMNUhmeUeiXMFxV2jCoVGffz
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:09:01 2025 by rpki-client