This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa
File: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier: G1jgCnmSopYszuP29nYUvkRV3aLdniLZkx0PQVvAk+4=
Subject key identifier: 02:54:58:AA:E3:E1:40:14:7D:7E:7A:47:50:D2:A6:CD:0C:8D:A3:79
Certificate issuer: /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial: 2F07A388A83EAEF6E1227C3AB5677DAC41B63B3F
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa
Signing time: Tue 27 Jan 2026 02:36:13 +0000
ROA not before: Tue 27 Jan 2026 02:31:13 +0000
ROA not after: Tue 26 Jan 2027 02:36:13 +0000
asID: 38522
IP address blocks: 122.49.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 01:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:07:a3:88:a8:3e:ae:f6:e1:22:7c:3a:b5:67:7d:ac:41:b6:3b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Validity
Not Before: Jan 27 02:31:13 2026 GMT
Not After : Jan 26 02:36:13 2027 GMT
Subject: CN=025458AAE3E140147D7E7A4750D2A6CD0C8DA379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:80:05:48:63:32:52:56:e1:c2:a5:a0:25:fe:
c2:46:78:7f:d2:1d:88:be:76:b4:1e:94:8b:eb:2d:
52:e3:6d:d0:c5:52:45:b6:50:cf:53:60:a6:7f:fd:
14:d9:d4:b8:83:4d:32:5e:94:c4:27:ec:c0:34:68:
99:1e:c4:df:9a:54:f8:81:7c:6b:08:19:24:28:60:
f8:7e:01:9b:e2:73:09:50:17:b4:ed:4c:e1:0d:66:
bf:62:11:d2:02:41:59:7a:9e:a9:10:86:7d:9b:3c:
41:77:e9:1f:a5:89:db:55:15:0e:82:f8:ae:d9:01:
db:0d:a0:59:cf:3f:53:7c:b6:c8:c0:d7:91:2b:d1:
2c:76:1b:25:b2:a2:95:5e:6c:08:58:ba:f9:f3:3e:
34:3c:00:ac:51:28:a7:3a:41:85:80:e4:33:e0:f0:
b3:bd:07:10:66:f5:1d:18:22:fd:5e:b4:2d:e2:94:
93:d6:c2:97:9c:bb:44:d9:4e:e5:44:62:2e:91:c0:
c4:73:09:80:ab:7c:01:fd:3a:53:0f:bc:ba:54:fe:
bd:26:32:47:89:f5:b2:ea:f1:3f:11:59:6c:59:36:
7c:17:e0:91:df:27:ea:10:f6:6f:1d:c0:76:bf:10:
3c:79:9a:5c:c6:41:f0:52:70:75:e9:74:7e:f1:68:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:58:AA:E3:E1:40:14:7D:7E:7A:47:50:D2:A6:CD:0C:8D:A3:79
X509v3 Authority Key Identifier:
keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.49.225.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0b:66:13:c4:c8:b6:1e:42:cd:a0:2c:5c:18:8c:15:6b:c6:
df:52:e5:28:6e:07:ce:9c:f9:8b:60:fa:cb:89:e4:23:71:4e:
bc:43:69:1c:23:48:c4:3f:a2:29:1d:6c:7f:d4:80:00:81:8c:
d6:bc:05:cf:9c:ca:88:69:8c:ac:0f:be:0a:ff:d7:20:a6:a9:
cf:a4:9f:e2:f6:b9:e5:07:1d:ad:89:c8:35:64:86:c4:a0:68:
13:d9:fd:aa:c0:01:c9:f1:78:de:29:a5:34:96:df:53:67:6e:
26:5e:d5:da:70:b4:07:a8:73:5e:67:da:0f:3b:94:fd:3e:57:
8f:c3:82:d5:56:d9:45:70:b7:85:5e:5a:de:8a:07:0d:2f:25:
fa:be:71:c8:7c:68:80:bd:ef:ac:93:3d:05:4e:78:be:8d:01:
be:f2:f2:35:0d:96:2b:2b:8a:5c:18:97:e0:d9:da:0d:bb:d0:
16:11:b9:69:32:20:19:d2:1e:51:e2:46:cc:1c:6b:45:f7:3d:
f8:42:81:d3:a0:84:48:e3:94:f3:7a:60:3c:b2:e9:54:2c:a2:
d9:b4:75:e5:ab:ca:6d:e3:85:85:96:1a:a7:f1:af:68:b6:32:
73:46:59:ba:ff:73:ff:53:e4:c4:1f:2d:74:d2:7c:83:20:c8:
35:2d:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:36 2026 by rpki-client