This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa
File: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (raw, json)
Hash identifier: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=
Subject key identifier: 62:D2:42:A9:7F:53:5E:B3:45:0A:79:2D:D1:59:26:8D:C7:CF:8B:92
Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
Certificate serial: 2F861C9092486C06909212207032BFF6D1EFBFCF
Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa
Signing time: Mon 02 Jun 2025 02:03:30 +0000
ROA not before: Mon 02 Jun 2025 01:58:30 +0000
ROA not after: Mon 01 Jun 2026 02:03:30 +0000
asID: 24537
IP address blocks: 202.61.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl
rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:86:1c:90:92:48:6c:06:90:92:12:20:70:32:bf:f6:d1:ef:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
Validity
Not Before: Jun 2 01:58:30 2025 GMT
Not After : Jun 1 02:03:30 2026 GMT
Subject: CN=62D242A97F535EB3450A792DD159268DC7CF8B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e7:c1:40:51:93:92:07:d1:e7:f5:d1:1f:07:
73:7c:df:3d:f2:27:68:02:de:68:bf:eb:2a:84:e8:
a2:d2:01:e0:cc:bc:e1:4d:b9:01:17:47:9d:4a:ca:
8e:c6:fd:5d:4f:47:34:ef:3f:b5:a2:0e:4d:f2:ce:
76:47:cb:76:4c:1e:7b:e0:99:2a:44:a1:2b:73:29:
12:6c:07:48:f7:f9:8f:bb:91:a9:d2:32:4a:a8:32:
22:cf:58:76:35:8d:d3:ca:f0:c7:37:56:1c:90:46:
40:5e:5d:3c:b1:a4:39:24:ea:8e:fd:bc:e8:8c:1a:
83:05:00:3b:cc:5a:fe:32:61:70:a8:28:17:98:20:
c3:4d:22:ca:2d:15:1b:4a:f6:f5:57:a3:a0:09:24:
75:4e:01:0b:8e:b7:4b:61:d8:ae:62:c1:55:a3:74:
bb:c7:56:33:19:d1:54:91:ea:ac:88:45:63:ba:cc:
c9:05:00:27:8d:13:f2:10:85:0f:1a:f4:37:3f:bd:
9d:2f:e3:02:a9:83:e1:16:89:b3:74:6d:0b:57:cf:
9c:4c:20:59:f9:aa:eb:98:82:a8:3e:09:b9:46:4e:
34:ea:11:f1:c3:07:94:64:3c:ec:d5:ea:0e:c8:66:
a7:6d:e1:fb:6d:f9:dc:8f:d3:27:f2:41:95:43:e1:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:42:A9:7F:53:5E:B3:45:0A:79:2D:D1:59:26:8D:C7:CF:8B:92
X509v3 Authority Key Identifier:
keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/3230322e36312e39382e302f32332d3234203d3e203234353337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.61.98.0/23
Signature Algorithm: sha256WithRSAEncryption
85:b7:64:72:83:cc:22:88:98:87:0e:ba:ae:aa:5f:65:3f:09:
93:9e:b8:38:43:8d:20:af:f7:68:e7:d1:56:ac:99:77:e7:23:
71:f5:71:ee:1b:e9:38:36:4e:87:b4:cb:6a:da:66:03:91:93:
bb:a1:83:86:c0:4f:2c:95:c2:8d:8e:ba:dc:09:19:3d:ea:f1:
b2:84:fb:52:c0:8b:4e:aa:15:b1:4a:b3:b5:b4:ba:e5:db:9c:
81:26:ce:e3:98:7c:58:fd:b5:75:97:0c:ba:ee:8e:31:b2:08:
9f:51:df:3d:d7:30:a5:d0:7c:6d:3e:b7:1d:af:ad:2e:98:3a:
5c:ca:e6:60:a0:1d:2c:7f:ad:5f:60:96:00:cf:8d:25:22:0a:
b1:c4:12:42:9f:76:5e:93:be:64:af:51:19:89:69:f1:4b:ee:
42:9a:a6:3c:05:cb:30:92:83:59:48:77:02:da:e3:b5:01:61:
69:7a:1b:82:15:02:ca:b2:49:2c:d2:24:7f:79:67:bc:24:b1:
2d:ab:9f:00:aa:98:13:f0:3f:2f:da:72:ba:c1:12:53:2a:e0:
fc:3d:20:59:3a:ac:b5:ca:21:f8:8d:86:2d:da:39:46:5d:50:
d3:6f:a6:21:7f:b2:f1:cb:7b:0d:5b:06:4e:91:2a:9e:14:22:
da:4a:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:26 2025 by rpki-client