This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
File: 3138322e34382e3136382e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier: DsUxkbkiWke4LzAfd8Fsth/DOnt33zfHMSG6qe+953U=
Subject key identifier: C4:83:B7:61:4E:A7:A4:34:6E:7B:E9:13:05:87:78:43:2E:1D:37:6D
Certificate issuer: /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial: 424DC0AA2BFF798D0B84FFE44CC24C8B17E37737
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
Signing time: Fri 19 Sep 2025 13:01:15 +0000
ROA not before: Fri 19 Sep 2025 12:56:15 +0000
ROA not after: Fri 18 Sep 2026 13:01:15 +0000
asID: 46030
IP address blocks: 182.48.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 07:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:4d:c0:aa:2b:ff:79:8d:0b:84:ff:e4:4c:c2:4c:8b:17:e3:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Validity
Not Before: Sep 19 12:56:15 2025 GMT
Not After : Sep 18 13:01:15 2026 GMT
Subject: CN=C483B7614EA7A4346E7BE913058778432E1D376D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:dc:d5:a7:d1:2d:ac:a0:a0:f4:3c:a5:e7:
14:9e:5d:09:f6:3b:7d:a3:47:aa:b3:c2:5c:2a:76:
0c:1f:17:e3:1a:e1:f4:df:e2:5e:53:3e:9e:38:e7:
f0:a1:3e:c0:0e:96:3f:89:d9:0b:18:4c:a7:43:81:
bd:f2:58:6a:aa:d1:db:44:bc:cf:3e:76:00:f9:12:
fb:55:14:19:e8:7e:c0:03:9e:de:22:98:af:b2:d0:
9f:d3:95:3b:18:e7:15:d9:64:a0:c9:25:81:a2:da:
64:dc:73:13:cd:57:e3:6b:73:4f:c5:04:3d:4b:02:
53:7c:45:94:44:31:90:b7:e4:23:4c:73:d2:8c:d3:
04:a6:29:7d:db:94:e8:04:bb:b8:41:1f:1e:ff:88:
8c:a6:87:07:2c:41:c7:e7:de:a3:41:11:da:ec:7c:
24:6d:af:5e:34:b1:6e:f6:8f:1b:43:cc:98:fb:b1:
78:bc:b5:d0:8a:e4:88:72:82:62:52:50:0b:63:7d:
25:73:15:30:38:7e:bf:85:c0:f5:93:84:d5:b9:32:
84:91:b7:0a:a1:41:dc:0b:79:68:df:13:d9:43:38:
5f:f9:90:8f:48:4f:aa:9d:88:05:fb:d6:6b:b9:51:
a2:03:dc:08:be:37:b3:1c:22:75:f0:e4:07:20:3f:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:B7:61:4E:A7:A4:34:6E:7B:E9:13:05:87:78:43:2E:1D:37:6D
X509v3 Authority Key Identifier:
keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3138322e34382e3136382e302f32342d3234203d3e203436303330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.48.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a3:08:24:ee:11:f9:24:40:0e:55:7c:63:79:f0:0c:74:fa:
c1:07:78:c9:44:03:52:cc:d6:a2:82:b5:c5:ae:f5:d0:bf:4e:
5c:ef:93:94:d0:e1:c0:e4:3d:1d:1a:df:78:c7:40:36:05:e3:
20:00:6a:fb:ed:92:96:31:78:04:f4:83:d9:fe:47:53:30:42:
95:83:25:8e:39:8e:e3:0b:da:5e:05:82:fe:98:11:7c:6e:c5:
6d:d1:d3:a5:25:98:a6:58:16:79:c0:1d:86:11:cc:97:e9:e0:
ac:0a:a0:d4:85:af:b2:7d:26:92:23:c3:74:14:93:a3:55:6a:
5c:f7:0e:ac:5d:0c:45:41:2a:38:db:e2:76:f6:90:93:6f:f6:
e6:61:62:33:6e:33:a4:b9:e5:91:6f:2c:1e:1f:6e:34:1d:6c:
1b:60:80:94:2b:c1:d5:17:92:ca:07:e3:6b:ba:a8:94:c7:67:
49:b8:c8:c3:a8:a7:30:ed:ec:3b:30:7a:4c:0a:71:e0:f7:32:
68:e9:7f:40:5c:c3:1f:76:aa:67:b5:84:ad:12:75:0a:f1:5f:
d7:1a:db:0c:ae:bd:47:bc:22:aa:b9:e6:16:10:d2:c7:b0:0c:
b3:fb:96:46:ac:ca:7d:89:de:cf:75:5a:c5:41:7e:0c:8a:f1:
50:d8:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:44:25 2025 by rpki-client