This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa
File: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier: eAUq4XhaAdV4ppm25Rlryl6SdAx6G60DtKVwYyuxIdM=
Subject key identifier: F0:8C:34:DC:A6:A0:63:FD:62:74:E5:AF:30:B8:C6:D7:30:E7:EF:BE
Certificate issuer: /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial: 5EF81999D45A2F2D9D31D7B02275D8C76C76C3C7
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa
Signing time: Tue 27 Jan 2026 02:35:56 +0000
ROA not before: Tue 27 Jan 2026 02:30:56 +0000
ROA not after: Tue 26 Jan 2027 02:35:56 +0000
asID: 38522
IP address blocks: 122.49.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f8:19:99:d4:5a:2f:2d:9d:31:d7:b0:22:75:d8:c7:6c:76:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Validity
Not Before: Jan 27 02:30:56 2026 GMT
Not After : Jan 26 02:35:56 2027 GMT
Subject: CN=F08C34DCA6A063FD6274E5AF30B8C6D730E7EFBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:ae:97:53:6a:8f:05:64:44:e6:0e:35:4c:
cb:1b:19:5a:66:67:10:02:f0:2f:3f:d8:d4:4c:da:
c7:a6:69:ce:e5:29:fe:38:e0:3e:5e:c4:8f:10:65:
33:4f:3c:09:18:51:03:d1:4f:b9:16:84:4e:c1:43:
7a:6b:ed:c0:94:2d:e0:66:c6:70:22:e5:bd:85:6c:
4d:75:fc:ad:65:86:41:50:98:d9:7e:12:d9:94:33:
63:29:58:71:74:a3:79:37:8c:1d:2e:ec:0a:e3:0a:
ed:ae:4b:72:c1:f2:9d:ee:d5:6c:1f:5d:8e:0f:da:
86:9d:a3:2c:aa:a9:10:ed:af:23:6f:a7:b2:70:82:
5e:b9:d9:8f:2f:13:9c:e0:24:b1:d4:d3:de:2e:0f:
1f:39:f7:3e:95:f2:56:7e:e7:f3:16:95:ca:51:f8:
56:42:90:a6:42:da:18:65:e4:0b:bb:3c:b2:3a:c4:
d2:c5:7d:02:fb:76:59:7b:bd:f2:f5:6c:e4:62:6b:
17:4f:41:a3:77:64:42:e2:b3:f5:07:5c:10:7b:61:
31:86:cf:d4:65:3d:06:7a:ea:d6:7b:dd:51:70:9d:
20:1f:56:78:29:b3:2b:a6:25:68:aa:1e:33:24:05:
6b:74:d7:36:8d:94:ae:e4:55:69:ca:12:f8:1e:31:
8a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:34:DC:A6:A0:63:FD:62:74:E5:AF:30:B8:C6:D7:30:E7:EF:BE
X509v3 Authority Key Identifier:
keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232342e302f32342d3234203d3e203338353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.49.224.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7c:a5:51:49:ad:d4:35:94:61:ab:bf:2b:e4:39:04:53:9c:
4c:9b:99:ed:b4:e9:f3:81:31:77:a3:7e:df:9d:18:6d:4f:bf:
7d:53:77:bc:1b:75:5b:d7:30:0a:e0:e1:9a:aa:76:ec:a5:99:
b7:5d:8d:a6:d0:7f:90:a0:a2:a9:e5:2a:52:52:07:5b:32:47:
f4:2f:15:17:35:6b:24:37:8d:75:f8:e9:10:30:bf:82:80:1b:
53:c1:44:cf:a7:bc:4b:77:8c:24:8e:03:2f:53:af:21:11:5d:
4e:c5:d4:12:9e:6d:d3:d9:19:99:84:92:8d:90:a1:dc:b7:5c:
a1:68:c3:f8:40:82:22:58:9d:ea:8e:c1:64:59:22:7d:51:cd:
d4:d1:e6:73:09:0a:ed:fd:88:23:7e:9f:bb:b7:ca:84:c8:1d:
36:0a:9d:b4:85:c3:9c:3a:f1:62:4a:72:8f:28:3e:0a:9a:dc:
fb:4c:f8:2a:5a:d4:0a:63:6d:92:96:67:52:7b:67:4e:e4:92:
6b:21:39:cd:58:53:51:f4:03:35:a5:64:48:78:c4:51:fa:25:
63:c1:1d:ed:05:66:df:4f:d7:fd:cc:02:69:fa:1e:aa:d4:53:
17:ed:27:38:ec:72:1b:e7:b8:d6:22:62:e0:62:c7:b4:12:db:
fa:89:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:39 2026 by rpki-client