This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa
File: 31342e3130322e3135332e302f32342d3234203d3e203535363532.roa (raw, json)
Hash identifier: is5MWGQz2ThLibcgEVqAwJiiHTPRuDzYs+szhUZM1uA=
Subject key identifier: C8:83:B4:6F:EB:A5:CC:3D:72:C0:23:90:76:6F:83:E5:73:0B:65:90
Certificate issuer: /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial: 1D1B3F1FBA2F291F1A19D912B15773AE2DFFD142
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa
Signing time: Sat 08 Nov 2025 10:24:28 +0000
ROA not before: Sat 08 Nov 2025 10:19:28 +0000
ROA not after: Sat 07 Nov 2026 10:24:28 +0000
asID: 55652
IP address blocks: 14.102.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 00:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1b:3f:1f:ba:2f:29:1f:1a:19:d9:12:b1:57:73:ae:2d:ff:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
Validity
Not Before: Nov 8 10:19:28 2025 GMT
Not After : Nov 7 10:24:28 2026 GMT
Subject: CN=C883B46FEBA5CC3D72C02390766F83E5730B6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:df:a9:06:04:05:49:b9:c8:e8:b5:13:b7:
ed:19:a5:9b:93:c8:c2:46:3d:c0:0b:5c:90:71:88:
32:69:e1:c1:5e:80:04:7e:9d:1b:2c:54:5f:5e:32:
7b:1b:11:d9:18:af:df:8d:e9:b0:fe:23:bf:b8:77:
fd:d9:51:b3:7d:8c:18:4e:07:8f:64:e8:9a:37:27:
eb:d6:cf:42:5f:af:4e:1e:7a:05:2a:4a:07:87:2d:
68:c8:52:e0:08:ff:29:21:83:c8:d3:48:20:c4:37:
da:4f:b6:f4:03:ea:ce:7c:38:e2:9c:c7:b3:a4:03:
2b:f1:c3:2d:b7:e7:03:81:53:91:da:bb:7c:82:6b:
6f:af:5f:3e:74:6b:51:95:ae:ae:1b:75:ce:36:93:
3e:86:36:9f:f0:20:d7:f8:5b:d6:3f:19:7f:2c:1b:
91:c0:e0:51:f8:0d:44:0e:6e:6d:10:3c:c9:d7:34:
23:e2:95:87:b7:17:f6:d6:63:4f:81:aa:dc:79:d1:
62:44:01:6e:32:d1:f7:4f:95:39:34:a9:4c:88:8f:
1b:74:35:5b:70:ce:64:29:5d:67:18:e3:b9:e4:1b:
d8:d7:df:f7:72:fe:58:63:a1:ab:53:b3:f9:a2:ea:
8d:95:7a:03:fa:0e:ce:cd:31:b5:45:21:26:59:38:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:83:B4:6F:EB:A5:CC:3D:72:C0:23:90:76:6F:83:E5:73:0B:65:90
X509v3 Authority Key Identifier:
keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/31342e3130322e3135332e302f32342d3234203d3e203535363532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.153.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e8:42:42:05:da:83:43:32:ed:cc:3f:c2:0b:a4:b2:8d:37:
0c:9e:7e:b5:90:4e:be:6f:d3:13:57:2b:13:c9:40:2f:c7:ff:
20:65:2a:d3:ec:71:60:c5:ce:b4:d6:36:d1:6c:61:78:86:b9:
30:6f:09:f4:73:8b:1e:6e:ab:f7:97:7c:0c:6f:66:a5:a5:dc:
46:5c:9a:23:bc:79:fa:0a:0c:2c:a2:34:a1:e6:5e:4d:5b:13:
47:1f:32:fa:95:9d:c9:bd:56:a1:0d:bd:3f:45:04:61:55:78:
97:d2:a6:9a:b3:83:49:08:de:77:0f:eb:8a:6d:50:45:42:15:
bd:7f:92:74:fa:0d:76:7b:bc:0b:aa:ac:5e:5c:b4:3c:71:0b:
41:36:84:e8:b8:90:30:6e:53:19:06:2f:07:78:77:7c:42:e8:
aa:3f:14:b1:b0:42:2a:bd:e8:aa:96:7b:27:40:39:72:32:64:
14:a9:45:4b:f9:16:6e:38:33:25:e8:b1:32:94:44:25:18:a4:
75:22:34:7c:b8:45:38:7b:01:2f:a3:55:0b:3e:f3:e9:b1:49:
12:98:23:31:3a:c7:08:5d:c5:a9:e3:8d:31:94:c2:a8:d0:cf:
6e:27:f3:e7:df:47:81:aa:23:af:42:32:26:bf:df:4a:70:86:
5f:b4:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:54 2025 by rpki-client