This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa
File: 32372e3132312e38342e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier: bA5Fx/rOlnkAyIC1kdWrOaLkxDABB/Vvu2ebi0eEf0Q=
Subject key identifier: 5C:90:F1:FF:91:A4:DC:EF:94:8F:B9:55:5E:E5:FD:F4:03:C0:7E:DF
Certificate issuer: /CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Certificate serial: 450BC10D6B1D427E78CACA98324C9375A37C0BD1
Authority key identifier: 93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa
Signing time: Sat 02 Aug 2025 04:00:00 +0000
ROA not before: Sat 02 Aug 2025 03:55:00 +0000
ROA not after: Sat 01 Aug 2026 04:00:00 +0000
asID: 55652
IP address blocks: 27.121.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 07:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0b:c1:0d:6b:1d:42:7e:78:ca:ca:98:32:4c:93:75:a3:7c:0b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930A4ED2B85AA9FE77ED90FA85044A9C80B38A46
Validity
Not Before: Aug 2 03:55:00 2025 GMT
Not After : Aug 1 04:00:00 2026 GMT
Subject: CN=5C90F1FF91A4DCEF948FB9555EE5FDF403C07EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:0f:32:dc:26:36:4d:a5:37:78:37:31:72:
b2:c1:8c:ba:e6:67:26:0a:f7:e4:86:7e:0d:26:5b:
52:16:95:fa:77:b6:02:e1:b6:4e:8f:b7:0e:48:ae:
fd:49:fa:30:5a:19:40:40:37:67:0d:da:5a:7a:ad:
73:cb:48:47:13:ae:15:c6:3c:e5:84:8e:5d:1b:ff:
9f:0d:4c:6f:b5:f0:ae:e0:20:c1:e8:e4:f9:ea:a8:
df:29:85:4f:57:a0:a1:9c:05:83:4b:9e:f2:6d:42:
68:d6:ed:2c:53:fc:b9:60:8b:34:ed:ce:3f:c6:6d:
2a:1f:e3:95:00:08:27:42:7c:87:98:1f:52:35:10:
58:fc:01:10:11:a2:fd:0a:65:30:b8:7f:cb:2b:69:
a3:2a:c3:53:1f:5a:fb:4c:ed:3c:60:dd:7f:13:29:
52:72:eb:4e:dd:e4:78:b0:75:b5:8f:38:01:2c:81:
f9:60:86:d2:fb:c7:2b:68:74:23:4f:6c:a9:51:8e:
2e:10:35:ed:6c:a6:e3:92:d3:e2:01:59:09:d8:84:
93:71:d8:4e:b0:6b:9f:20:f2:23:d1:1e:f0:d4:86:
2b:50:1b:4b:c2:65:9e:61:d8:1a:ef:6b:e9:98:b8:
8e:5b:bc:97:e3:a1:64:56:34:21:71:07:48:e2:65:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:F1:FF:91:A4:DC:EF:94:8F:B9:55:5E:E5:FD:F4:03:C0:7E:DF
X509v3 Authority Key Identifier:
keyid:93:0A:4E:D2:B8:5A:A9:FE:77:ED:90:FA:85:04:4A:9C:80:B3:8A:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/930A4ED2B85AA9FE77ED90FA85044A9C80B38A46.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af62809c-bfb6-4fe7-8dd6-ca6022cdd540/0/32372e3132312e38342e302f32342d3234203d3e203535363532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.121.84.0/24
Signature Algorithm: sha256WithRSAEncryption
41:eb:ff:d3:d9:6a:b3:b9:71:07:c6:d5:11:cc:9a:f6:14:87:
35:8c:85:9d:b7:3d:8b:90:5a:dd:2e:bb:45:42:75:0d:92:d2:
e1:30:07:c3:5f:85:13:b9:78:ff:b8:9d:1a:79:df:69:be:9b:
e4:de:20:29:f8:b5:3c:bd:58:8a:c9:3f:98:76:97:80:33:4c:
32:1d:04:a5:d7:cb:26:cb:24:f0:7d:f8:11:9c:86:ba:2d:13:
58:95:2e:4c:aa:52:f2:28:53:a5:8a:ea:aa:1a:ee:a2:78:f3:
20:ec:68:a0:38:9d:c6:b4:e9:3e:b6:c3:1e:98:73:7a:87:39:
c2:80:b2:94:9d:d9:80:0c:de:e2:d6:4e:9c:0c:4b:f2:11:53:
80:55:fb:2b:3f:de:b6:55:9f:17:f4:90:8f:e2:a8:92:bf:c9:
1e:c3:63:40:4a:b7:72:e6:a2:1c:5f:5a:7e:ab:b0:07:fe:57:
4b:3a:c4:fc:51:ad:43:58:a8:37:7f:ef:aa:42:12:2c:42:df:
ef:d9:23:21:00:79:e3:e2:c0:46:4d:ae:01:5d:d3:74:04:7e:
0c:41:30:73:5f:62:59:2c:2d:36:8d:5c:0a:e7:c3:01:ed:55:
0e:6a:de:bc:13:be:4b:23:2c:6d:b9:18:39:18:fb:f2:fc:71:
67:b6:ff:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:08 2025 by rpki-client