This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
File: 3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier: P1YBvGHSMw2KSmorZM6GVpNPSOsIMTGTDkbnAUEcz4U=
Subject key identifier: E5:C1:59:92:8A:96:9C:AE:CC:16:7F:86:1E:C1:B4:ED:96:28:5B:8A
Certificate issuer: /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial: 066E1C1E18FBEE9B962EBC42EED599CE9D2EB643
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
Signing time: Fri 28 Nov 2025 07:45:53 +0000
ROA not before: Fri 28 Nov 2025 07:40:53 +0000
ROA not after: Fri 27 Nov 2026 07:45:53 +0000
asID: 132644
IP address blocks: 116.204.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 01:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6e:1c:1e:18:fb:ee:9b:96:2e:bc:42:ee:d5:99:ce:9d:2e:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Validity
Not Before: Nov 28 07:40:53 2025 GMT
Not After : Nov 27 07:45:53 2026 GMT
Subject: CN=E5C159928A969CAECC167F861EC1B4ED96285B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:6b:64:d0:96:07:86:56:e7:0a:30:f6:98:
bd:f9:ca:a0:4a:01:ae:65:df:6c:f5:c1:4d:d8:56:
59:b3:59:6b:40:d1:8f:d6:18:04:7d:30:a7:d6:3d:
66:aa:5c:fe:3f:94:c2:15:88:5d:32:da:04:9f:d3:
18:1a:94:c7:ad:0e:92:fe:66:47:38:88:98:95:39:
53:14:94:c8:50:51:11:0b:8f:53:01:07:fb:9a:3f:
8a:ba:3d:33:f1:f2:0b:65:cf:34:fe:9d:84:61:24:
17:de:4d:28:c0:14:59:e2:10:55:69:74:69:9b:9f:
66:de:cf:4b:54:2e:92:6f:d3:54:ce:60:89:db:5e:
82:07:be:3c:d4:f2:4c:1f:1c:50:e0:20:d4:94:73:
b0:0e:c8:e7:33:85:93:e8:27:3a:a3:40:fc:e7:b7:
7a:03:02:39:8b:b1:25:ee:90:82:38:17:7b:17:a6:
1d:b0:78:35:81:9c:e2:82:cc:13:3c:e0:c8:27:30:
f0:7f:39:4d:c5:e4:38:9e:ff:cf:d3:5c:15:d9:9f:
cb:a7:3b:47:f8:b5:75:71:18:ac:6c:d7:d9:47:6a:
f3:8c:e9:d1:c5:c8:0e:b1:5b:f4:81:41:26:9a:33:
7a:11:08:89:2d:0a:b5:96:64:6e:51:29:cb:3e:88:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:59:92:8A:96:9C:AE:CC:16:7F:86:1E:C1:B4:ED:96:28:5B:8A
X509v3 Authority Key Identifier:
keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.204.128.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a5:c6:e0:5b:a7:7e:e8:94:1a:6b:a3:af:fc:72:d1:64:6b:
9d:20:74:f2:ef:26:84:7f:45:df:50:c8:8f:d5:c5:4f:fa:ef:
4d:d0:51:08:7f:0f:72:09:93:a8:66:c4:c8:68:b1:19:86:a4:
c0:c2:1d:93:51:4d:d8:a4:37:0f:97:f8:cd:ba:01:2a:e9:53:
fa:dc:52:09:08:23:74:4f:45:d2:be:18:c3:7e:2a:9f:97:ab:
3c:b4:93:46:22:31:e4:37:5c:3c:c9:e6:bd:10:e5:e9:54:7d:
9b:16:ec:00:f6:01:31:4a:67:30:2a:2a:d4:04:3b:eb:6f:92:
86:ac:7e:d1:f9:2b:c2:32:1a:b6:78:90:58:03:0d:2b:7b:1f:
6f:b6:fa:e5:da:1d:2f:d8:34:64:5c:ac:1f:1f:f6:e8:65:aa:
0e:d1:f8:20:8f:a4:60:a1:2b:38:cb:b1:90:c9:9b:77:3d:5a:
b6:08:43:ed:fb:96:a5:5f:52:6e:77:95:d5:9b:f7:96:53:e4:
3f:fd:8b:74:9c:0d:79:1c:5b:7f:10:17:7f:79:64:3d:fd:b2:
0b:38:54:d4:38:88:08:54:16:e8:e5:a3:e4:59:2b:43:1c:81:
c3:e6:a1:a9:e1:69:21:88:82:71:eb:a7:47:4a:d0:9a:03:77:
2a:6a:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:18 2025 by rpki-client