This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
File: 3230322e35322e3134302e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier: IHCCAgl8I2RtthVlx/101ymvDPNvq6bpd64iBZCpSWQ=
Subject key identifier: 79:69:B6:BF:A6:CE:8E:F2:BA:64:C1:80:69:0A:A4:CA:9E:88:7A:43
Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial: 34B4A1051BAF0D42D8BCE26FD804DDBA3ECE935B
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
Signing time: Wed 03 Sep 2025 16:00:02 +0000
ROA not before: Wed 03 Sep 2025 15:55:02 +0000
ROA not after: Wed 02 Sep 2026 16:00:02 +0000
asID: 46061
IP address blocks: 202.52.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 23:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:b4:a1:05:1b:af:0d:42:d8:bc:e2:6f:d8:04:dd:ba:3e:ce:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
Validity
Not Before: Sep 3 15:55:02 2025 GMT
Not After : Sep 2 16:00:02 2026 GMT
Subject: CN=7969B6BFA6CE8EF2BA64C180690AA4CA9E887A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:00:f1:d5:66:64:32:cc:a1:a0:c6:9a:c7:c5:
73:e7:56:a8:e3:43:24:a1:e6:d3:82:b3:f9:ed:00:
ab:e4:70:a4:85:57:6a:c2:cf:0d:db:aa:cd:93:92:
06:ec:53:c5:9a:54:93:4c:28:ac:bf:8a:f7:cb:d7:
d0:00:37:39:79:ac:68:96:3a:a0:d1:b7:a0:f1:ad:
5c:bb:1c:77:95:b3:62:13:8b:ed:43:29:fe:98:71:
1e:11:18:ce:61:cf:eb:ae:9b:8b:13:4a:98:98:2e:
2a:a3:15:37:85:77:08:b3:41:e0:af:d4:a3:4e:0b:
a8:4e:75:f7:c9:ce:53:3b:88:b2:b2:84:e3:9d:95:
a5:01:64:21:67:39:15:c4:41:a5:24:22:a7:b1:4a:
50:9f:c0:73:cd:ce:0e:71:4d:14:bd:3f:83:dd:39:
7f:15:a9:f3:63:1e:bf:97:38:0c:c2:9b:e2:a6:d3:
ad:c6:97:3f:f1:a9:2a:f3:a4:96:6e:81:5c:b7:ee:
f5:d1:9b:89:f5:85:4a:ca:c6:1e:f4:96:e7:8c:d8:
71:d5:0c:7b:23:03:69:50:f9:35:09:f9:6e:b4:e0:
f3:ac:d9:79:de:25:27:b3:a9:c5:de:66:49:c7:d6:
9c:76:58:70:98:36:00:6f:49:70:67:82:17:41:81:
f7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:69:B6:BF:A6:CE:8E:F2:BA:64:C1:80:69:0A:A4:CA:9E:88:7A:43
X509v3 Authority Key Identifier:
keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3230322e35322e3134302e302f32342d3234203d3e203436303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.52.140.0/24
Signature Algorithm: sha256WithRSAEncryption
57:94:b7:a8:9f:e5:9c:ee:93:39:9d:87:f8:e2:1e:1b:6b:63:
48:f6:bd:98:87:a0:77:e6:2e:75:4d:6d:7c:62:5c:14:9d:9e:
68:8a:15:4a:3a:51:fd:d8:a3:4d:48:fc:33:27:c6:96:93:24:
c2:4c:da:c4:ca:cd:16:44:5e:42:e4:60:53:1c:47:77:4b:c9:
21:78:ae:43:ca:53:ed:cf:d1:89:4b:0f:7d:fd:07:89:66:62:
b8:63:12:79:68:6e:78:fd:79:c2:15:10:ec:cb:b8:45:18:95:
dc:28:08:15:34:9b:c7:2a:a1:98:22:da:89:01:45:5d:87:ae:
3a:7f:d3:7f:e0:65:39:40:12:bc:e0:ec:a2:ca:97:77:1a:89:
e6:0b:80:ea:77:99:b2:f4:13:b5:1f:65:fd:3f:3c:01:16:e0:
ca:89:c7:31:2b:c4:e6:5a:ea:79:75:e5:9e:3a:4a:3a:8e:e4:
64:66:35:83:32:d9:c7:ec:16:4a:ee:d9:7a:77:d0:f6:e5:57:
07:00:26:d2:dd:69:9a:73:a6:0a:5f:fc:34:2c:81:d6:a6:e2:
d8:5d:1d:37:0d:28:35:7c:b2:91:39:7b:55:d0:34:52:2f:67:
38:43:e5:c2:84:53:bc:98:57:64:0e:1f:1c:c0:d7:8b:5f:a8:
83:da:a8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:06:08 2025 by rpki-client