This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
File: 3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa (raw, json)
Hash identifier: z0AijCCK1naTP5YmFbSs1RtXYY5T/kLC9Gc+ZK8h2kA=
Subject key identifier: DA:A8:85:FD:74:3F:C6:0C:DA:7C:2C:3C:AE:BA:04:A4:96:65:8E:6A
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 5F0CD07590C810C67CDFC4AE3452AB30EACFF04A
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
Signing time: Fri 14 Nov 2025 08:01:29 +0000
ROA not before: Fri 14 Nov 2025 07:56:29 +0000
ROA not after: Fri 13 Nov 2026 08:01:29 +0000
asID: 152045
IP address blocks: 210.79.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 03:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0c:d0:75:90:c8:10:c6:7c:df:c4:ae:34:52:ab:30:ea:cf:f0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Nov 14 07:56:29 2025 GMT
Not After : Nov 13 08:01:29 2026 GMT
Subject: CN=DAA885FD743FC60CDA7C2C3CAEBA04A496658E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:59:78:34:16:f8:d9:61:03:95:81:14:01:
03:44:ca:dc:88:0d:cb:be:2e:72:6f:b1:b1:49:d7:
63:d9:97:44:38:f3:2f:e4:0f:a3:10:3c:4e:59:b3:
8c:ae:e3:8c:77:e1:f0:69:56:e0:66:59:9d:33:b1:
a9:b6:4f:de:c0:fa:e9:45:e9:9b:e5:48:91:55:48:
95:76:ac:9b:37:61:5b:e8:b8:2e:46:aa:ab:33:06:
66:f6:eb:e8:3c:0f:e0:73:e0:09:c9:0e:b5:1d:50:
2b:4f:ae:1b:b2:01:a6:20:f9:ae:27:87:86:90:51:
49:cf:41:dc:d9:fc:4b:41:73:66:ac:f3:78:55:34:
fd:d0:dc:91:7d:3b:a0:e4:25:21:24:e9:aa:6f:55:
00:53:63:7e:7e:db:4a:93:16:ef:86:cf:8d:15:a8:
a4:6f:40:ff:78:5c:6c:2c:58:eb:e8:e0:f8:bf:06:
58:91:fd:85:97:d9:a6:92:e9:a4:88:98:4a:5e:2a:
03:d8:7c:9f:05:21:b8:6f:95:a1:a3:64:ee:2e:5b:
07:d6:ff:68:71:31:75:09:0a:2d:aa:22:00:78:df:
b8:9c:a2:f0:81:87:62:77:ce:af:cc:26:13:e8:73:
ff:4d:47:63:fe:ba:ec:3c:bf:dc:c5:75:7c:db:f6:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:85:FD:74:3F:C6:0C:DA:7C:2C:3C:AE:BA:04:A4:96:65:8E:6A
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32332d3233203d3e20313532303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:20:6c:f8:40:de:5d:99:f2:52:77:32:2e:28:78:30:96:a9:
be:f4:87:66:3d:5d:ef:9f:6f:47:fb:db:fb:77:41:bc:c4:42:
a9:2a:2c:e6:39:83:d5:0f:23:e6:64:40:2f:21:78:6b:42:a5:
c8:43:b7:86:ac:12:39:50:4e:7d:a7:76:5c:33:23:fd:7b:1a:
1a:86:8e:e0:15:39:0a:21:54:1d:c6:14:25:5d:c6:0e:89:73:
8c:63:45:c5:40:8b:f0:17:85:63:32:1b:8c:86:08:31:fb:42:
0b:c3:41:6b:c3:1f:28:eb:ff:09:49:f5:3e:42:e0:c1:e1:5e:
39:be:ac:46:af:15:f9:8d:e3:5c:78:7b:89:91:99:b5:a5:fe:
36:ad:2a:af:69:84:27:c0:cf:39:78:15:44:67:35:dc:30:54:
f6:e7:af:d8:7b:0f:51:0d:12:7e:70:a9:17:88:52:27:23:79:
e6:94:3c:22:a8:8a:26:49:c7:cc:24:c0:4c:21:fe:d0:93:d5:
aa:93:50:d1:b8:bc:25:4d:5f:3a:fc:c8:54:ff:db:99:7f:e7:
50:d1:8f:e3:2e:7f:80:08:fb:3a:63:7f:10:9e:74:35:0d:8c:
2e:0f:c2:fd:1b:6e:bb:35:92:1a:a7:2f:80:ae:3d:b3:c5:67:
71:00:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:09:12 2025 by rpki-client