This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
File: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (raw, json)
Hash identifier: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=
Subject key identifier: 77:6B:F3:0E:F5:8C:47:A1:2D:42:F1:58:28:F5:92:05:9A:4C:4D:75
Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Certificate serial: 468F1F19887FD79D091D9E14C78300C3006C5A6D
Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
Signing time: Fri 05 Sep 2025 11:00:01 +0000
ROA not before: Fri 05 Sep 2025 10:55:01 +0000
ROA not after: Fri 04 Sep 2026 11:00:01 +0000
asID: 46063
IP address blocks: 27.112.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 01:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8f:1f:19:88:7f:d7:9d:09:1d:9e:14:c7:83:00:c3:00:6c:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312
Validity
Not Before: Sep 5 10:55:01 2025 GMT
Not After : Sep 4 11:00:01 2026 GMT
Subject: CN=776BF30EF58C47A12D42F15828F592059A4C4D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:08:50:2b:f3:66:dd:b1:28:ee:52:2c:00:
c0:21:51:a1:d0:b2:d8:9e:fa:63:26:54:3d:6f:60:
f5:62:85:81:e4:8b:ab:6a:33:51:cf:e2:ec:ae:c4:
41:67:f0:76:0e:8f:a5:15:b3:77:c7:8c:2d:bc:8b:
60:4e:d9:c7:ec:33:98:4a:00:15:9c:22:3b:4b:eb:
50:8d:21:92:ac:5f:c5:81:58:96:4d:e3:0d:a8:a6:
4c:05:4e:51:d5:dc:66:e7:6d:40:6c:1e:0c:60:23:
49:61:71:01:48:99:72:35:e3:cf:b4:15:2b:ef:6c:
05:d5:94:5f:47:42:ce:f2:1b:f8:6f:7c:0b:37:50:
8b:18:bb:f6:dd:a8:25:66:f3:d4:5a:b5:4f:16:78:
d6:fb:23:a6:d6:08:9b:ca:ec:ac:b0:e8:85:12:d9:
f5:01:67:18:e5:ca:0c:53:b2:a0:60:cf:35:9c:6d:
28:fe:26:30:9d:94:9c:b4:19:1c:f8:8c:57:0f:98:
8b:1a:13:04:10:c3:2e:95:2d:1f:12:1a:8e:02:dc:
58:fd:cc:5a:b2:f0:6c:40:5d:c1:f1:37:04:f8:1e:
c8:41:99:58:89:25:d2:10:9e:8c:c2:80:61:6c:4c:
6d:45:68:ae:a5:1a:e4:bc:77:d1:c0:9f:06:f0:7b:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6B:F3:0E:F5:8C:47:A1:2D:42:F1:58:28:F5:92:05:9A:4C:4D:75
X509v3 Authority Key Identifier:
keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/32372e3131322e36372e302f32342d3234203d3e203436303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.112.67.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4a:5c:fd:09:44:67:90:0d:89:d0:ab:0a:0e:5a:a7:28:96:
ef:01:ae:50:d2:00:ee:b8:23:c9:c6:92:bb:47:08:6a:ae:02:
50:76:06:8d:f8:61:2a:9d:da:a2:3c:73:e8:17:2f:04:b1:6d:
c5:37:0a:4d:b4:08:f8:b2:03:d8:5d:26:ca:40:c3:52:b4:15:
bd:91:0d:a1:68:7b:47:87:52:33:bf:98:ca:90:9a:31:da:e9:
a6:64:2c:e5:71:4a:e0:87:a2:61:ee:0e:48:a9:eb:68:e6:27:
f5:6d:6d:bc:c7:3e:44:a2:cf:41:84:5b:d5:e6:2b:69:7c:29:
5e:48:86:5a:8d:07:cf:89:05:72:fe:5e:d3:4a:8a:a4:27:e0:
3b:0c:62:32:bf:c9:da:f1:bb:b3:ee:43:b8:31:91:99:cc:b5:
b4:81:69:96:bf:6b:0e:7a:3a:2d:b7:76:f3:3d:01:83:62:9f:
98:2b:17:67:a2:e4:b7:43:ef:e8:24:48:cb:62:f1:e8:dd:59:
4e:f4:6a:6d:17:b2:40:b6:6c:f1:6d:85:a3:cd:de:b4:68:de:
b5:6b:20:32:ac:ce:22:19:d8:e7:11:da:3f:24:ad:ab:20:73:
b1:aa:cd:59:d0:b3:cb:b2:04:e8:96:65:ac:17:a5:e1:fe:74:
3b:9d:8d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:44:42 2025 by rpki-client