This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
File: 3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa (raw, json)
Hash identifier: hSqv2eoQTO7JNJFj3qq3n7+1XfpnN6lz7ioOJ9M/TEg=
Subject key identifier: 3B:2E:74:E8:B1:E8:D7:6A:A7:0D:4A:E5:5E:B4:A0:64:71:A7:58:A7
Certificate issuer: /CN=98BF0C90429CA12CE1425374F5765263297D61F1
Certificate serial: 2A85628E725E80D9D7DE8B97682311F7BE6BAE51
Authority key identifier: 98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
Signing time: Fri 14 Nov 2025 08:01:29 +0000
ROA not before: Fri 14 Nov 2025 07:56:29 +0000
ROA not after: Fri 13 Nov 2026 08:01:29 +0000
asID: 152045
IP address blocks: 210.79.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 03:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:85:62:8e:72:5e:80:d9:d7:de:8b:97:68:23:11:f7:be:6b:ae:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98BF0C90429CA12CE1425374F5765263297D61F1
Validity
Not Before: Nov 14 07:56:29 2025 GMT
Not After : Nov 13 08:01:29 2026 GMT
Subject: CN=3B2E74E8B1E8D76AA70D4AE55EB4A06471A758A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:b3:7f:8f:41:72:48:d1:73:97:48:2a:c1:
7a:e7:5a:76:17:c4:5c:07:aa:f9:cc:0c:a0:a2:90:
71:61:55:d8:5d:be:a5:8c:07:1d:6f:d3:4e:fe:7c:
6c:9b:bc:ae:08:36:ee:bd:9d:ae:32:c5:e3:9e:36:
2a:46:70:f6:ef:e6:66:10:ba:1a:ca:df:35:aa:eb:
1b:c4:a1:cd:09:ef:dc:fd:dc:67:3b:e7:4e:32:41:
62:64:71:ca:64:2f:fd:d3:f6:bd:d7:5c:1f:a1:c1:
4c:18:c2:e4:1d:42:d9:d7:13:49:d6:90:67:74:cc:
33:a1:f8:9a:15:90:6f:a9:58:5d:e7:94:c6:e7:af:
7c:f2:22:d5:1e:71:e1:50:29:72:91:e4:9c:b2:29:
37:fa:a1:dd:23:6b:d6:04:62:e8:2e:e5:2f:c2:50:
03:ce:e2:8d:57:37:ad:8a:e1:e0:22:50:40:6c:ea:
85:94:13:6f:e5:73:0a:ea:15:b4:af:af:07:e2:cc:
90:4c:b3:ae:08:f2:cd:68:17:a4:a4:5b:b3:57:32:
0c:a0:d2:97:66:a8:2e:0a:a9:ea:51:68:ad:9e:98:
47:d9:5c:69:4b:20:95:28:f5:fa:9d:44:64:aa:f0:
7f:de:f7:0c:b2:fc:c2:58:b4:11:03:99:d6:1e:94:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:74:E8:B1:E8:D7:6A:A7:0D:4A:E5:5E:B4:A0:64:71:A7:58:A7
X509v3 Authority Key Identifier:
keyid:98:BF:0C:90:42:9C:A1:2C:E1:42:53:74:F5:76:52:63:29:7D:61:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/98BF0C90429CA12CE1425374F5765263297D61F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98BF0C90429CA12CE1425374F5765263297D61F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31bb66d0-a933-4110-a093-038da9ec8b7e/0/3231302e37392e3134372e302f32342d3234203d3e20313532303435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.79.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:f5:f2:fd:62:6c:d8:6f:b5:52:92:57:62:22:78:71:ab:e8:
d7:34:4f:6b:03:74:f0:15:d9:89:fa:3d:13:22:10:88:18:4d:
55:7f:ff:4c:86:09:30:65:cb:4d:06:90:72:f2:5b:30:e1:df:
4d:48:4d:34:ec:25:6c:cc:c3:d3:62:a2:e6:38:bb:78:96:37:
17:f3:0e:e5:07:0f:14:58:e9:9a:77:36:dc:10:8c:2e:db:88:
26:dd:a1:7c:09:5a:52:c7:17:da:35:90:f3:85:04:0e:f9:7f:
18:bf:3a:e2:7a:f7:07:b1:f3:0c:bc:65:8a:64:5a:93:36:01:
98:40:56:cc:07:d3:9f:f6:7c:29:f1:b4:f1:0a:14:64:c4:bc:
d0:14:ad:c8:4b:75:9a:50:81:5b:49:7b:7d:9e:85:47:df:9c:
62:d9:fc:83:37:96:6a:14:36:32:77:1b:73:26:b3:77:07:0a:
ce:5c:a2:4c:55:2b:d0:5c:5a:b1:d7:cb:da:4a:9a:19:20:8a:
87:7b:d3:44:52:93:33:be:ad:69:b2:61:6b:5f:bd:66:17:22:
93:ea:a7:b0:85:d9:01:b8:9a:d8:ae:30:9c:f6:08:7c:f9:3f:
4c:9d:65:a2:d2:c9:4e:88:9b:36:85:46:ce:68:c5:b8:c1:c7:
8b:b2:78:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:09:02 2025 by rpki-client