This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63878.roa
File: AS63878.roa (raw, json)
Hash identifier: bPm2EAojKDHNar2OYIz470LP1h5yHAdReymcZnfbMKo=
Subject key identifier: 3E:12:13:79:3A:A2:D4:D3:2E:13:12:82:BC:9F:7D:C0:8A:B7:24:B5
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4A3B03DE631F1884FF92EDE4E65FB448A2125901
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63878.roa
Signing time: Tue 11 Nov 2025 06:00:02 +0000
ROA not before: Tue 11 Nov 2025 05:55:02 +0000
ROA not after: Tue 10 Nov 2026 06:00:02 +0000
asID: 63878
IP address blocks: 2400:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3b:03:de:63:1f:18:84:ff:92:ed:e4:e6:5f:b4:48:a2:12:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 11 05:55:02 2025 GMT
Not After : Nov 10 06:00:02 2026 GMT
Subject: CN=3E1213793AA2D4D32E131282BC9F7DC08AB724B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:09:94:15:78:1c:08:5d:07:ed:50:ce:f4:33:
51:5f:d2:d9:76:db:9c:82:c8:01:e9:34:91:cd:21:
50:97:da:99:56:92:4f:ce:2e:6b:8a:42:3f:88:e2:
d1:10:59:a8:b2:5b:9a:67:44:ed:05:ba:63:05:71:
ef:c8:d1:3a:79:20:13:ec:89:c4:b2:5d:72:c6:2f:
b0:d6:5e:11:98:7c:35:ff:ea:96:a9:cb:e2:82:c2:
a2:b0:de:3e:54:b1:68:63:64:32:b7:76:6e:fe:ab:
91:ef:78:53:1d:7e:8a:6c:3d:2b:d3:6d:8a:b7:4a:
41:b8:9d:23:82:48:28:73:75:60:df:87:d9:25:ea:
19:07:fc:20:45:c2:b4:19:5d:38:14:46:32:df:70:
09:39:9b:f8:95:04:b1:b4:69:67:22:b8:5b:bb:80:
3f:50:7a:f6:21:99:58:29:2b:ec:fa:95:d9:97:ce:
01:0d:11:93:ff:1d:af:84:28:20:09:de:f3:3e:ce:
30:90:c2:e7:26:f2:92:f0:23:d7:7f:1c:da:36:59:
01:0d:68:d6:c3:db:45:53:51:fd:9e:6e:cc:89:db:
64:bc:12:a3:a3:3c:d9:5c:5a:a0:9c:45:81:f9:5f:
3b:24:ad:f5:c0:2a:ae:8e:8d:04:d1:f4:b1:42:3a:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:12:13:79:3A:A2:D4:D3:2E:13:12:82:BC:9F:7D:C0:8A:B7:24:B5
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS63878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
30:82:26:7e:c7:80:0c:4c:9f:11:dd:87:c1:d2:18:fc:35:23:
ae:f7:94:83:85:78:81:7a:ea:17:12:c2:16:5a:e9:6a:c1:58:
06:a1:19:92:cb:04:dd:d5:46:6a:12:c9:be:34:ed:2f:83:f7:
f4:ca:f5:df:a5:a9:86:d3:4f:fd:3b:59:86:97:38:9b:6d:b2:
91:10:71:38:4a:57:2f:c0:e0:aa:ce:59:44:65:5b:dc:71:14:
d3:84:54:c9:3b:35:41:2e:2d:98:ee:bb:2e:12:4f:a8:4c:3c:
83:62:ab:9f:8e:4d:f4:39:24:99:2b:19:87:94:ad:7d:18:b0:
f2:e6:15:03:be:22:cb:46:ff:a3:d6:fc:15:78:98:1d:f9:16:
27:b2:e8:b5:47:87:6b:19:4c:d4:89:39:d3:fd:45:e0:cb:99:
9c:4b:4c:08:6b:ed:28:17:aa:67:28:18:7b:b6:79:70:6e:ef:
96:1e:26:70:29:a5:c5:d5:cb:85:40:7f:b0:cb:aa:b2:34:30:
70:23:a4:92:e0:83:98:7d:80:f9:ff:1f:0e:87:c5:b5:6c:58:
30:60:d0:b3:67:7e:f6:ea:c3:ac:91:20:57:f3:f5:e5:b2:ba:
6d:5d:35:8f:19:34:b8:d5:a2:80:c0:1f:bb:81:a9:a1:23:ac:
7b:2b:03:46
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUSjsD3mMfGIT/ku3k5l+0SKISWQEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMloX
DTI2MTExMDA2MDAwMlowMzExMC8GA1UEAxMoM0UxMjEzNzkzQUEyRDREMzJFMTMx
MjgyQkM5RjdEQzA4QUI3MjRCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANkJlBV4HAhdB+1QzvQzUV/S2XbbnILIAek0kc0hUJfamVaST84ua4pCP4ji
0RBZqLJbmmdE7QW6YwVx78jROnkgE+yJxLJdcsYvsNZeEZh8Nf/qlqnL4oLCorDe
PlSxaGNkMrd2bv6rke94Ux1+imw9K9NtirdKQbidI4JIKHN1YN+H2SXqGQf8IEXC
tBldOBRGMt9wCTmb+JUEsbRpZyK4W7uAP1B69iGZWCkr7PqV2ZfOAQ0Rk/8dr4Qo
IAne8z7OMJDC5ybykvAj138c2jZZAQ1o1sPbRVNR/Z5uzInbZLwSo6M82VxaoJxF
gflfOySt9cAqro6NBNH0sUI6pokCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQ+EhN5
OqLU0y4TEoK8n33AircktTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzYzODc4LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJABG4DANBgkqhkiG9w0BAQsFAAOCAQEAMIImfseADEyfEd2HwdIY
/DUjrveUg4V4gXrqFxLCFlrpasFYBqEZkssE3dVGahLJvjTtL4P39Mr136WphtNP
/TtZhpc4m22ykRBxOEpXL8Dgqs5ZRGVb3HEU04RUyTs1QS4tmO67LhJPqEw8g2Kr
n45N9DkkmSsZh5StfRiw8uYVA74iy0b/o9b8FXiYHfkWJ7LotUeHaxlM1Ik50/1F
4MuZnEtMCGvtKBeqZygYe7Z5cG7vlh4mcCmlxdXLhUB/sMuqsjQwcCOkkuCDmH2A
+f8fDofFtWxYMGDQs2d+9urDrJEgV/P15bK6bV01jxk0uNWigMAfu4GpoSOseysD
Rg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:34 2025 by rpki-client