This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
File: 3135372e31352e37372e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier: I8arlV9bMVGsAQTZtHx6y++6HiyiMdDVTXwTw+QSjwU=
Subject key identifier: D7:9F:5A:3F:AF:D4:0B:1A:26:53:7F:F8:58:7F:DE:56:8A:4C:96:DD
Certificate issuer: /CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Certificate serial: 1C04A09817DF97926520EB416AB54FEF8BC432B9
Authority key identifier: 06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
Signing time: Mon 22 Dec 2025 03:01:37 +0000
ROA not before: Mon 22 Dec 2025 02:56:37 +0000
ROA not after: Mon 21 Dec 2026 03:01:37 +0000
asID: 138131
IP address blocks: 157.15.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 19:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:04:a0:98:17:df:97:92:65:20:eb:41:6a:b5:4f:ef:8b:c4:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=065943D1744CF4841A6D3D50944D2A4DB537A128
Validity
Not Before: Dec 22 02:56:37 2025 GMT
Not After : Dec 21 03:01:37 2026 GMT
Subject: CN=D79F5A3FAFD40B1A26537FF8587FDE568A4C96DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:74:0c:cc:2a:74:b2:f7:2b:0c:2c:a3:eb:
9c:9f:46:d9:d2:27:ca:fe:3b:52:02:15:bf:0c:0b:
eb:2c:bf:ef:e2:c5:64:f1:05:78:a0:5b:5a:91:fd:
1d:f8:70:14:ba:46:11:37:59:04:de:8c:94:cb:aa:
ac:cb:62:4f:d1:56:cd:3f:91:ff:a8:ba:fc:4d:b3:
67:25:2f:be:d3:89:05:06:39:81:7d:52:69:59:43:
27:eb:f7:88:eb:9c:ff:1e:33:7d:91:18:1d:cf:c5:
2a:b0:78:39:dd:b8:b0:35:b7:10:a8:c6:aa:c3:44:
b4:61:54:e8:46:f8:d9:93:76:8a:18:93:1c:5a:f0:
be:66:5c:78:4a:90:67:8a:47:e0:e4:d5:96:af:af:
c2:56:46:a6:cf:5c:36:e4:df:3b:63:bc:d1:43:a4:
d1:39:f4:a1:0e:6d:7b:a7:65:03:08:ef:1a:88:26:
a6:3a:b2:5a:6f:3b:de:9a:c6:86:d5:48:5d:c7:32:
9f:3f:df:52:a4:41:79:bb:8e:40:d3:be:61:fb:55:
0d:04:9e:2f:d3:b3:bd:ca:5a:06:47:e1:e1:f8:09:
2f:12:d5:b6:0d:f9:f2:68:68:a1:1c:c7:5d:1e:8c:
fd:e1:ce:02:97:3d:93:b4:53:88:c0:e8:7d:f9:61:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9F:5A:3F:AF:D4:0B:1A:26:53:7F:F8:58:7F:DE:56:8A:4C:96:DD
X509v3 Authority Key Identifier:
keyid:06:59:43:D1:74:4C:F4:84:1A:6D:3D:50:94:4D:2A:4D:B5:37:A1:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/065943D1744CF4841A6D3D50944D2A4DB537A128.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/065943D1744CF4841A6D3D50944D2A4DB537A128.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/757e11dc-ff71-4ed7-a695-834922e0e361/0/3135372e31352e37372e302f32342d3234203d3e20313338313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.77.0/24
Signature Algorithm: sha256WithRSAEncryption
28:87:83:03:6e:59:ff:16:66:69:3d:bd:3d:59:c8:c4:be:94:
bf:fa:31:24:2a:60:48:f4:c7:98:d3:2b:16:d8:91:49:1b:45:
8c:2f:dd:b0:1a:3a:d5:cf:c2:23:3e:52:aa:f9:97:ed:79:36:
22:ca:d3:09:98:8b:bc:f0:a2:09:8d:37:94:ad:00:73:1d:35:
de:11:0b:16:6e:16:ac:51:99:b4:68:13:7b:75:88:f1:fd:96:
0a:47:1f:57:8c:13:18:0b:b7:90:95:a4:b1:8d:62:ed:c3:af:
40:e8:ad:ee:6f:ad:d0:b1:3d:45:b2:08:55:38:ba:ca:48:45:
23:3d:d2:95:16:98:b3:cc:f2:eb:79:c8:1e:86:70:44:ba:52:
54:46:d1:e4:22:aa:d9:d5:68:6a:61:f4:c0:6e:04:75:c8:d1:
93:39:05:a6:dd:7e:4d:87:21:4d:e5:9c:a2:ea:c8:2f:25:50:
1f:b3:9e:c2:c7:6a:fc:8b:4f:5f:6c:05:ce:42:36:77:49:ca:
a1:e6:2f:a6:5b:6b:06:05:90:72:55:e9:02:79:c9:2e:85:5c:
cb:c1:d6:86:e7:6a:57:ef:99:d5:c6:d8:cc:46:a2:90:e0:0f:
75:05:e6:d7:5e:dd:f1:7d:9b:10:07:13:25:f3:48:af:00:d0:
c0:b7:0f:94
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHASgmBffl5JlIOtBarVP74vEMrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERC
NTM3QTEyODAeFw0yNTEyMjIwMjU2MzdaFw0yNjEyMjEwMzAxMzdaMDMxMTAvBgNV
BAMTKEQ3OUY1QTNGQUZENDBCMUEyNjUzN0ZGODU4N0ZERTU2OEE0Qzk2REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP03QMzCp0svcrDCyj65yfRtnS
J8r+O1ICFb8MC+ssv+/ixWTxBXigW1qR/R34cBS6RhE3WQTejJTLqqzLYk/RVs0/
kf+ouvxNs2clL77TiQUGOYF9UmlZQyfr94jrnP8eM32RGB3PxSqweDnduLA1txCo
xqrDRLRhVOhG+NmTdooYkxxa8L5mXHhKkGeKR+Dk1Zavr8JWRqbPXDbk3ztjvNFD
pNE59KEObXunZQMI7xqIJqY6slpvO96axobVSF3HMp8/31KkQXm7jkDTvmH7VQ0E
ni/Ts73KWgZH4eH4CS8S1bYN+fJoaKEcx10ejP3hzgKXPZO0U4jA6H35YSw3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU159aP6/UCxomU3/4WH/eVopMlt0wHwYDVR0j
BBgwFoAUBllD0XRM9IQabT1QlE0qTbU3oSgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NTdlMTFkYy1mZjcxLTRlZDctYTY5NS04MzQ5MjJlMGUzNjEvMC8wNjU5NDNEMTc0
NENGNDg0MUE2RDNENTA5NDREMkE0REI1MzdBMTI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMDY1OTQzRDE3NDRDRjQ4NDFBNkQzRDUwOTQ0RDJBNERCNTM3
QTEyOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1N2UxMWRjLWZmNzEtNGVkNy1h
Njk1LTgzNDkyMmUwZTM2MS8wLzMxMzUzNzJlMzEzNTJlMzczNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PTTANBgkqhkiG
9w0BAQsFAAOCAQEAKIeDA25Z/xZmaT29PVnIxL6Uv/oxJCpgSPTHmNMrFtiRSRtF
jC/dsBo61c/CIz5SqvmX7Xk2IsrTCZiLvPCiCY03lK0Acx013hELFm4WrFGZtGgT
e3WI8f2WCkcfV4wTGAu3kJWksY1i7cOvQOit7m+t0LE9RbIIVTi6ykhFIz3SlRaY
s8zy63nIHoZwRLpSVEbR5CKq2dVoamH0wG4EdcjRkzkFpt1+TYchTeWcourILyVQ
H7Oewsdq/ItPX2wFzkI2d0nKoeYvpltrBgWQclXpAnnJLoVcy8HWhudqV++Z1cbY
zEaikOAPdQXm117d8X2bEAcTJfNIrwDQwLcPlA==
-----END CERTIFICATE-----
Generated at Wed Dec 31 07:41:03 2025 by rpki-client