This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa
File: 3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa (raw, json)
Hash identifier: Lpc33YMBjJ9T7VbHHDqwImeBd6L01sxZlRa+x954AOo=
Subject key identifier: 2B:6D:CA:8E:D3:08:68:C0:51:17:71:C3:F4:65:85:CB:1D:49:48:3E
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 79CBA153D2D9B70840E33953CFC5F2E22BF98680
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa
Signing time: Fri 14 Nov 2025 08:01:29 +0000
ROA not before: Fri 14 Nov 2025 07:56:29 +0000
ROA not after: Fri 13 Nov 2026 08:01:29 +0000
asID: 152045
IP address blocks: 210.79.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 03:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:cb:a1:53:d2:d9:b7:08:40:e3:39:53:cf:c5:f2:e2:2b:f9:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Nov 14 07:56:29 2025 GMT
Not After : Nov 13 08:01:29 2026 GMT
Subject: CN=2B6DCA8ED30868C0511771C3F46585CB1D49483E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:62:5d:be:f0:e6:1e:b6:5b:d2:a5:61:bf:
c3:44:be:ae:70:6a:55:68:e5:3f:15:0e:45:7a:68:
d8:ca:09:80:b4:55:0a:72:4b:6a:2b:0c:b9:5f:97:
4e:a6:da:c6:8b:e5:5f:f2:80:a3:49:d0:13:81:28:
86:e1:23:79:60:95:81:6a:f7:24:4b:7a:e0:6f:63:
0d:a3:7d:ed:2c:b5:df:7b:66:79:6d:75:a3:4e:66:
2f:05:68:a8:9e:ef:d8:02:4f:13:e8:f1:18:ff:b6:
46:ce:8e:d5:ed:49:67:4a:42:8b:4d:b3:58:e8:de:
57:3d:ef:75:be:98:49:5d:b2:12:8c:08:8e:b0:a4:
ae:f3:1f:49:b8:bc:69:7e:93:04:30:fa:f2:7c:e9:
ec:92:5e:b1:fa:60:7b:1b:7b:0c:2f:ba:8c:b3:5c:
4d:ee:16:23:b9:c8:39:36:b9:1b:4a:b4:9d:4a:82:
ec:05:ff:f0:eb:69:c1:ea:fe:1f:f2:56:56:1c:6d:
62:de:3b:6d:d2:a1:4e:e5:32:c8:e8:ad:7f:78:cf:
aa:de:26:f0:40:63:45:4d:cd:52:a5:77:69:6f:87:
a7:22:56:88:e3:1b:2f:50:58:e0:23:54:ff:64:2b:
08:99:6a:75:d6:27:19:8e:1d:96:4e:e5:cd:4d:5c:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6D:CA:8E:D3:08:68:C0:51:17:71:C3:F4:65:85:CB:1D:49:48:3E
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134362e302f32342d3234203d3e20313532303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:c6:d5:09:4a:46:72:a6:3e:e3:c1:4c:bf:08:89:bb:c9:70:
62:26:45:10:5f:47:e5:fb:76:d5:5e:5b:d7:ca:51:27:29:e9:
49:7b:5b:51:de:b3:d3:36:ad:1f:65:0a:9e:f7:74:5d:e9:3d:
f5:95:da:c6:9f:d2:8b:55:4f:df:6e:70:d8:ea:5c:d7:53:68:
dd:13:90:24:e2:b3:4b:45:b1:08:01:63:c1:8f:7a:d8:33:c2:
fb:e8:e1:ba:3b:f7:83:12:52:63:c5:dd:bf:31:dc:f5:7b:af:
ea:3d:68:38:fc:62:a5:05:b1:9c:f4:2b:98:07:79:fc:17:4b:
1f:29:65:a3:6a:ad:29:d2:75:bc:0a:f5:09:96:04:82:46:2c:
ee:b5:9e:2d:b6:49:88:9a:1a:51:6d:01:5d:ac:87:3b:a6:3b:
a1:01:21:25:0f:aa:01:fa:ae:9b:73:32:f4:21:fd:ad:1b:a7:
22:d6:eb:ad:bc:14:24:13:b8:73:de:47:9b:77:c4:2f:96:ec:
2d:8a:f8:54:06:f4:d3:1c:5c:9c:27:c5:49:79:96:95:77:a1:
58:e7:73:98:fe:67:17:4e:54:6b:4f:cc:c5:b9:16:53:9d:f4:
ba:c9:7e:02:d5:98:9e:27:fa:3d:b5:32:3f:14:84:bb:62:0e:
14:fe:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:59 2025 by rpki-client