This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
File: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (raw, json)
Hash identifier: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=
Subject key identifier: 3C:26:0E:97:D7:3F:8D:D4:5A:E6:9A:42:21:29:F4:1D:AF:3E:36:1D
Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12
Certificate serial: 51AD0DF1C3B276B8F011BE4BB685C4DB10ABDD23
Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
Signing time: Mon 11 Aug 2025 11:54:30 +0000
ROA not before: Mon 11 Aug 2025 11:49:30 +0000
ROA not after: Mon 10 Aug 2026 11:54:30 +0000
asID: 151576
IP address blocks: 160.25.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl
rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 08:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ad:0d:f1:c3:b2:76:b8:f0:11:be:4b:b6:85:c4:db:10:ab:dd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12
Validity
Not Before: Aug 11 11:49:30 2025 GMT
Not After : Aug 10 11:54:30 2026 GMT
Subject: CN=3C260E97D73F8DD45AE69A422129F41DAF3E361D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:b4:13:77:c1:8d:4c:e2:45:ba:1e:b4:85:
b2:ac:e6:d8:61:f7:f9:6c:b1:c1:17:b2:8c:59:50:
7b:0b:a7:00:2c:88:82:36:40:f0:bd:0d:80:28:c7:
71:5b:09:47:b0:c5:ba:c8:85:3d:cb:5c:5f:a2:72:
37:6b:74:b9:d2:ee:c9:b5:48:1f:d3:f0:ae:ea:4a:
16:a0:bf:19:ef:e0:95:da:21:24:5f:b2:c8:6a:ce:
8d:43:f8:f3:d9:6d:3a:52:92:4a:f5:bf:4e:0a:e8:
50:cd:a9:57:67:55:95:b8:70:68:7b:42:dc:ce:10:
92:c9:9a:91:2d:fd:71:f8:35:b4:02:31:34:de:9f:
b7:89:fc:68:05:c1:6b:2a:cc:6c:8a:bd:f8:43:61:
63:f0:13:fb:50:7c:fa:cd:00:b3:14:65:b5:b0:9a:
78:78:b8:94:3e:ff:94:ce:3f:8d:0e:20:75:b8:9d:
81:31:50:e7:a7:9f:eb:e5:71:76:5b:da:73:82:96:
86:a0:46:55:48:b3:7e:8d:6e:b1:b0:3b:83:36:24:
9e:9d:ba:03:67:fb:ee:07:8b:40:b2:81:91:e5:bc:
18:21:fb:2c:81:eb:73:03:f1:aa:ad:c6:e6:e9:8b:
9c:1a:28:1b:13:52:97:d2:d9:07:33:da:d2:77:1c:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:26:0E:97:D7:3F:8D:D4:5A:E6:9A:42:21:29:F4:1D:AF:3E:36:1D
X509v3 Authority Key Identifier:
keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/3136302e32352e36392e302f32342d3234203d3e20313531353736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.25.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:99:28:69:fd:ea:60:b0:0b:0a:1a:bf:b1:6a:a8:ed:61:4d:
c0:11:28:c4:10:c7:e5:6e:a1:e5:35:d6:40:69:f7:d4:ed:04:
01:13:c6:ac:96:cf:2b:42:13:48:e9:d6:52:01:e9:9c:b9:01:
d1:fd:0c:29:79:ad:ed:7f:9c:d0:64:f2:93:f9:cf:3b:43:87:
af:89:e7:54:16:9c:9a:fc:dd:0b:bb:7b:8d:44:ee:c2:c9:87:
17:c1:a0:b3:6c:b7:59:e4:3a:27:5f:b8:46:22:5f:05:0c:1b:
7f:50:2d:e5:7f:ba:84:c5:3e:50:71:e4:a7:e2:71:1a:21:8b:
26:2b:ba:91:80:b4:f0:40:41:c8:3c:ed:b0:1a:14:95:3f:a4:
c9:f5:f8:70:96:d6:f2:d9:10:54:49:fc:79:bc:1b:45:d5:35:
e9:fc:0e:48:ba:dd:c2:8a:c8:26:a4:d3:8c:87:d1:e4:8d:27:
64:d9:eb:14:b1:7b:78:e7:ed:e4:09:ef:ce:01:8c:80:56:64:
f1:61:7b:d5:f0:11:7d:20:cf:22:ea:d2:a6:ac:b0:10:1e:b5:
c5:82:cc:23:27:b7:11:b8:94:93:06:45:51:85:03:a1:50:01:
cf:c1:af:f7:43:05:76:f7:af:0a:9e:6d:82:03:92:ca:b0:4a:
bc:d0:9b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:06:07 2025 by rpki-client