This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
File: 3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa (raw, json)
Hash identifier: rpH9eA5JvXGhTPWutHU3TmV5ebwAEez1NYeLhnW9eIM=
Subject key identifier: D4:73:42:D6:8E:36:81:29:5E:F4:9D:DD:58:61:4E:DC:19:25:6C:27
Certificate issuer: /CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
Certificate serial: 66737726C6D88C82E6D3740F0263E553B5CAF7EC
Authority key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
Signing time: Thu 04 Sep 2025 03:01:27 +0000
ROA not before: Thu 04 Sep 2025 02:56:27 +0000
ROA not after: Thu 03 Sep 2026 03:01:27 +0000
asID: 139371
IP address blocks: 203.142.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl
rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 00:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:73:77:26:c6:d8:8c:82:e6:d3:74:0f:02:63:e5:53:b5:ca:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04
Validity
Not Before: Sep 4 02:56:27 2025 GMT
Not After : Sep 3 03:01:27 2026 GMT
Subject: CN=D47342D68E3681295EF49DDD58614EDC19256C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:2c:6a:01:02:c3:94:02:48:83:f5:5b:d6:
cb:96:d6:40:88:be:a4:47:1b:3f:91:af:17:63:1a:
06:fe:91:96:01:02:55:10:a0:1f:b2:c8:4c:d9:6c:
1b:27:5e:4f:da:3e:e3:e3:67:ef:56:c4:3f:d2:fb:
a6:21:80:8e:6f:7c:51:f2:21:a3:6c:b0:10:a1:ea:
fb:b9:7a:04:d9:e5:0e:cd:58:ae:f8:e5:87:b1:38:
1a:2f:50:92:bf:1a:cf:4b:f7:37:fe:9d:07:c5:a6:
c5:1e:2f:d8:a9:ad:6f:f6:fd:fa:9b:7a:cf:87:48:
68:a9:25:fb:04:f5:a9:88:ed:fc:a4:aa:77:3f:a4:
46:aa:29:5f:3c:21:4d:d0:56:74:ee:ca:05:73:45:
2d:2d:56:a6:01:ba:24:82:7e:4b:75:b3:61:d0:30:
28:39:12:27:c2:a5:eb:6d:b7:5a:53:a7:a1:74:81:
c9:00:66:2c:9d:93:31:8b:20:e4:64:96:a9:16:0b:
76:48:79:4d:3c:e5:df:8e:dc:a6:58:a9:3a:73:7d:
b2:d5:4f:39:51:5e:d6:1d:1b:e2:63:23:c0:3d:74:
27:ad:dd:00:85:7d:12:bd:3d:2a:39:8e:72:3d:c0:
05:91:b1:66:d0:c5:11:eb:ee:5b:14:4c:12:bc:b1:
84:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:73:42:D6:8E:36:81:29:5E:F4:9D:DD:58:61:4E:DC:19:25:6C:27
X509v3 Authority Key Identifier:
keyid:98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/3230332e3134322e32362e302f32342d3234203d3e20313339333731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.142.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:db:bc:0a:41:75:a2:0e:51:ed:8a:26:e2:44:f9:fc:a8:ca:
73:69:71:7b:f9:a3:b5:40:4f:62:6b:35:5c:10:46:19:84:28:
7d:81:bc:1d:4a:65:bd:e1:e4:33:4a:c4:dc:06:42:3c:be:0c:
6b:2d:28:35:b7:77:aa:c6:99:2e:52:cf:1d:b3:fa:ab:fa:85:
60:49:8e:7a:55:a6:81:97:5d:f4:f8:ba:0f:47:53:bc:3b:2d:
5c:53:79:36:82:c5:c1:81:9a:09:a8:06:18:b3:07:a4:e6:ce:
32:75:33:a5:6e:01:38:b6:c5:35:63:51:bd:02:8f:9f:1d:65:
0a:94:2e:b0:09:f1:a7:a5:55:1e:1f:ad:34:f9:48:24:94:6e:
bb:b2:9c:b8:b1:a8:c1:bd:ef:e3:fc:5c:6f:96:05:21:f6:7d:
1a:d3:6c:0a:01:a7:cf:84:1a:07:93:d3:76:7e:15:64:73:7f:
36:99:52:2a:ae:2e:2d:2c:ed:8a:d3:b5:6f:35:73:fe:f6:88:
ab:d0:0c:fd:70:2a:d5:35:1c:e4:ad:d9:c3:c1:de:a9:c4:c4:
ce:f5:0c:fe:c7:85:80:e5:b2:99:88:d5:c2:32:65:6b:a4:c9:
39:c0:c4:0d:85:dd:67:59:f0:25:dd:bf:88:2b:af:fb:24:d2:
8c:b5:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:36 2025 by rpki-client