This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa
File: 3131342e33302e38392e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier: iNMO3JJJwlr+xrGAFFYEGNqoc6fB1NphEmxgOMxRLWo=
Subject key identifier: 2D:C0:70:1A:64:F5:D0:8C:E9:8A:2B:79:48:89:9C:00:6D:68:9C:70
Certificate issuer: /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial: 53D68108AC0D07046E1A4C6A8D265C6F8C26CB36
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa
Signing time: Mon 29 Dec 2025 03:00:01 +0000
ROA not before: Mon 29 Dec 2025 02:55:01 +0000
ROA not after: Mon 28 Dec 2026 03:00:01 +0000
asID: 38165
IP address blocks: 114.30.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d6:81:08:ac:0d:07:04:6e:1a:4c:6a:8d:26:5c:6f:8c:26:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Validity
Not Before: Dec 29 02:55:01 2025 GMT
Not After : Dec 28 03:00:01 2026 GMT
Subject: CN=2DC0701A64F5D08CE98A2B7948899C006D689C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:10:0a:7a:1e:2a:96:3e:4c:74:52:64:78:
6a:c1:0c:1d:8b:b7:b3:0d:8a:6b:07:73:81:02:fe:
5d:94:7f:10:4b:75:a0:11:7f:03:67:3b:60:ff:6f:
f5:ff:92:29:36:02:b7:ff:af:fa:68:ae:9c:a3:66:
b6:04:25:63:6c:98:c6:e8:c1:59:a0:ae:89:ba:76:
c3:3e:00:8c:9b:5e:ff:d3:c8:44:c0:0c:3b:04:cc:
84:4f:2b:82:fa:3f:db:e9:d2:18:29:c9:73:78:f6:
40:f8:d2:d1:23:f7:98:a1:ce:e7:e9:81:59:45:ec:
8d:83:df:67:a9:ff:af:d1:2f:cf:11:68:32:b6:0b:
37:ec:8b:b0:d4:ee:95:d7:cd:65:6e:34:49:55:be:
c8:ec:86:45:f6:be:ae:3f:91:ca:e8:39:ca:7e:cc:
8b:e5:d7:f9:b3:59:fc:4d:af:c6:20:f6:b1:ca:3b:
83:d5:b2:86:1d:05:0c:55:06:79:90:a9:ee:a5:27:
05:f5:2e:38:9b:ff:11:d6:78:00:51:9c:14:73:55:
c6:1b:6f:5f:d7:6f:e5:77:ab:29:62:1b:2a:08:08:
39:e5:4b:00:45:32:3e:c6:98:a1:d6:40:80:ff:e7:
5e:00:0c:84:e7:cb:91:aa:73:80:d1:2e:29:07:05:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:70:1A:64:F5:D0:8C:E9:8A:2B:79:48:89:9C:00:6D:68:9C:70
X509v3 Authority Key Identifier:
keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38392e302f32342d3234203d3e203338313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.30.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:01:27:35:fc:6c:75:67:88:7d:6e:44:2c:54:a0:2a:df:3b:
c4:e8:21:4f:4d:23:b1:7d:fc:3c:0a:f7:1c:78:55:47:e7:3b:
73:d0:94:d0:1c:f1:a8:c3:a7:0c:1c:3c:74:4a:63:eb:94:53:
97:30:84:c5:3f:8f:c9:c1:22:77:7e:d0:0e:b7:b2:15:34:9f:
76:11:20:58:ac:ac:ec:c2:e5:6b:da:98:8c:d2:44:5a:12:f2:
5b:8e:d9:01:4d:97:75:05:c8:06:00:b2:0d:8b:5d:fe:63:a1:
b6:06:df:c9:f5:d1:a1:e6:0a:be:74:4e:1f:4b:5d:09:69:e0:
a5:af:c0:ad:5f:85:36:13:d6:df:08:af:eb:6a:ce:fb:2a:ac:
29:3e:c6:5c:f1:f1:32:a9:eb:61:94:ee:86:52:5c:80:49:cb:
72:5b:08:72:fa:87:41:62:63:5b:38:5a:f9:78:b4:9a:d9:f3:
6b:74:ca:47:6e:27:80:b2:2f:43:90:27:65:bc:02:17:d7:0d:
41:48:a9:db:c1:ee:0e:8f:32:e0:b7:d5:a9:6d:d7:c1:a3:ce:
70:34:53:dd:7a:e0:9f:16:a9:49:a8:38:ac:62:eb:f8:b2:11:
4b:f5:d0:44:46:8e:b3:11:08:04:11:e1:55:29:4e:0f:f3:94:
e7:d0:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:18 2026 by rpki-client