This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
File: 33362e35302e35372e302f32342d3234203d3e20313532303239.roa (raw, json)
Hash identifier: LrLP8FwR1/mLygyohR7eR9/JUTFD1TFSAda0avJS6rc=
Subject key identifier: 10:03:E4:8E:95:14:29:3F:8C:B9:E6:85:55:85:6B:AF:64:F8:07:F6
Certificate issuer: /CN=9A97A919AD61446780D593589DED8D76DE76F83A
Certificate serial: 43F8C1AA9F155828E18191F2952922D1AC49CD9E
Authority key identifier: 9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
Signing time: Thu 06 Nov 2025 08:02:25 +0000
ROA not before: Thu 06 Nov 2025 07:57:25 +0000
ROA not after: Thu 05 Nov 2026 08:02:25 +0000
asID: 152029
IP address blocks: 36.50.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Dec 2025 14:34:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f8:c1:aa:9f:15:58:28:e1:81:91:f2:95:29:22:d1:ac:49:cd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A97A919AD61446780D593589DED8D76DE76F83A
Validity
Not Before: Nov 6 07:57:25 2025 GMT
Not After : Nov 5 08:02:25 2026 GMT
Subject: CN=1003E48E9514293F8CB9E68555856BAF64F807F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:3a:2f:42:44:28:9d:b8:6e:a8:5e:8f:91:
40:6a:c3:90:ff:4d:82:18:3d:1f:59:08:c5:85:83:
1a:42:3a:a9:11:55:55:ad:af:fb:10:7d:c8:d9:94:
52:b0:de:5b:19:f6:9b:24:40:f2:81:7c:98:ec:88:
eb:bf:71:3b:63:98:e6:dd:a8:ce:02:11:8e:ba:88:
24:84:d2:5f:a0:3d:25:27:27:5f:4a:75:7f:18:7e:
ec:c3:c0:96:8b:31:77:db:d9:71:34:cc:c1:10:79:
96:e8:e0:61:f4:17:9a:84:d6:1e:71:11:08:c3:cf:
28:9e:6b:e7:c0:c0:b4:c8:dc:fb:47:f3:e8:8a:86:
6e:4f:4c:ce:94:4a:1a:6f:8e:3b:03:64:95:01:53:
25:d8:05:14:8f:79:b6:5f:dc:62:48:6e:6d:3f:da:
40:c4:5f:7b:6a:c3:cf:1a:a7:c2:c9:54:4d:7b:7c:
b0:db:b8:48:da:ca:58:9b:4e:a7:a0:de:cb:ee:9a:
69:04:cb:20:84:0c:a4:e6:e5:f8:7e:05:98:87:84:
14:01:d4:92:63:c6:68:69:99:73:00:41:3e:c4:5f:
44:3c:0d:99:e9:c7:3e:e6:93:bb:18:80:63:be:75:
13:38:37:2b:8f:3e:c9:c0:41:a9:f9:80:ca:56:37:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:03:E4:8E:95:14:29:3F:8C:B9:E6:85:55:85:6B:AF:64:F8:07:F6
X509v3 Authority Key Identifier:
keyid:9A:97:A9:19:AD:61:44:67:80:D5:93:58:9D:ED:8D:76:DE:76:F8:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/9A97A919AD61446780D593589DED8D76DE76F83A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A97A919AD61446780D593589DED8D76DE76F83A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b8a7fa5-fda3-4a3e-92f7-fabfed05a95c/0/33362e35302e35372e302f32342d3234203d3e20313532303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.57.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4c:2c:6d:06:64:d6:bd:3f:1e:7b:ff:9a:2c:1a:e9:25:a8:
97:47:9e:b9:8f:97:ec:ed:c2:3f:fe:69:b4:34:df:f1:85:b2:
ba:d7:58:ee:80:43:dc:fc:0b:49:31:4f:80:cc:d1:fc:1e:dd:
f0:e8:4e:8c:b5:57:f8:5f:af:d6:98:dc:e5:f0:76:78:5e:9e:
b7:8a:e9:d9:b6:fd:a3:0d:92:d3:d7:cd:c2:01:d9:51:ef:78:
c7:75:1d:8b:08:3c:ea:ba:35:56:d8:e2:02:6d:28:2c:9a:6e:
1a:84:49:bd:88:1a:56:36:ec:04:5f:3c:50:20:be:13:6c:e7:
cd:70:6d:df:e1:de:44:e8:d2:d4:a1:21:86:b1:9a:e5:bc:79:
34:b1:1d:87:35:58:10:39:a9:a8:8c:d4:af:9b:0f:ad:a7:8b:
d3:45:57:f3:b1:9c:18:b6:00:01:1d:4b:bd:77:a7:ca:82:50:
9a:aa:68:07:f5:73:98:d2:fe:a0:a7:4d:aa:cb:d1:8e:f7:af:
b9:7f:9e:de:81:62:5c:ca:4e:7e:4a:c3:64:25:1d:7a:6d:ed:
d0:3e:be:01:4e:24:2d:65:f8:cd:f0:d5:50:68:e1:4c:71:1b:
06:f7:8a:48:b8:b5:15:a3:15:21:aa:09:bd:81:7f:59:37:6d:
2c:b1:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:08 2025 by rpki-client