This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa
File: 3131392e31302e3137362e302f32312d3234203d3e203234353330.roa (raw, json)
Hash identifier: VThcCtX7qr346NN7shQUD3Qy4XjpVEzaKmU2Nme9H3I=
Subject key identifier: C5:25:E5:33:85:1B:86:D0:E3:40:33:2D:86:E9:C3:D1:30:C0:B5:A8
Certificate issuer: /CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Certificate serial: 2A0DF3ED93B779BF303648E1872D24C88943ED81
Authority key identifier: 6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa
Signing time: Tue 13 Jan 2026 05:00:01 +0000
ROA not before: Tue 13 Jan 2026 04:55:01 +0000
ROA not after: Tue 12 Jan 2027 05:00:01 +0000
asID: 24530
IP address blocks: 119.10.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 02:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:0d:f3:ed:93:b7:79:bf:30:36:48:e1:87:2d:24:c8:89:43:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6A3530198A9B7657A636FECCFB39F3BF71FB40
Validity
Not Before: Jan 13 04:55:01 2026 GMT
Not After : Jan 12 05:00:01 2027 GMT
Subject: CN=C525E533851B86D0E340332D86E9C3D130C0B5A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:a4:32:90:8c:94:5b:7c:ab:54:f9:25:aa:
a8:1a:de:fe:58:25:ea:3b:df:23:95:06:ca:48:2f:
85:32:be:bd:b9:3d:18:ca:07:22:12:1b:14:8d:89:
7d:06:b7:38:8c:f3:55:87:9e:5d:96:0d:43:b0:1a:
88:af:a9:a9:ba:15:da:e5:16:b6:c1:ce:e3:ff:f3:
8b:19:5c:2d:6a:a1:b6:c4:6e:79:a0:08:50:35:91:
17:c8:82:f3:f5:0c:de:af:c9:69:12:83:fb:ab:a4:
94:33:8d:a8:ed:9a:af:92:59:c0:bb:51:59:8e:8e:
7d:4d:2e:ce:04:b4:ab:4a:cb:4f:ef:a2:6d:67:c4:
e7:67:39:6d:38:57:05:b1:5a:02:03:2f:0d:fa:05:
1a:2b:14:f7:94:ec:24:1f:16:8c:86:fe:a0:27:5b:
7e:88:2c:cb:32:56:a2:f3:4b:34:c6:97:8d:cb:03:
5f:97:cc:18:5b:a8:1b:d6:c9:7a:ba:f9:cf:c6:a1:
a3:16:28:c1:16:76:c1:ff:08:62:98:b9:b0:3f:71:
42:f8:2d:3c:78:d9:80:d0:ca:33:3c:4b:ff:51:63:
b3:66:e5:e3:c7:96:3f:a4:74:43:ea:d7:b3:96:58:
39:ce:7c:f0:39:30:c9:1d:4c:82:69:60:18:c9:28:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:E5:33:85:1B:86:D0:E3:40:33:2D:86:E9:C3:D1:30:C0:B5:A8
X509v3 Authority Key Identifier:
keyid:6F:6A:35:30:19:8A:9B:76:57:A6:36:FE:CC:FB:39:F3:BF:71:FB:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F6A3530198A9B7657A636FECCFB39F3BF71FB40.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137362e302f32312d3234203d3e203234353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.10.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:fe:d7:a1:12:ab:74:94:a8:03:d6:d8:31:78:1f:e0:fb:21:
b4:ba:34:ae:7a:2a:81:e6:1d:00:d5:21:fd:25:da:b0:2f:78:
c2:6e:a8:f9:fb:3a:c4:d8:9d:8c:25:7b:24:39:4f:5c:c0:a6:
9c:30:d9:16:fd:d1:29:a4:02:20:90:fb:a3:8b:1f:85:74:fc:
35:9f:2e:82:ea:9e:40:4a:ec:97:13:33:4f:b7:04:72:9b:2f:
2d:09:75:82:48:bc:c6:5b:fd:d1:45:0c:11:b8:b9:7a:c0:55:
36:2e:69:31:92:a8:13:74:59:2a:67:ab:dd:cb:6c:ed:43:5f:
08:06:63:4b:2d:b0:50:55:20:c4:0d:c4:70:18:ee:71:fd:fe:
36:ed:f2:aa:4f:87:1b:a5:37:4e:62:cd:9a:8b:eb:96:cf:57:
8c:93:3b:df:45:16:c2:b8:53:4f:dd:e5:c3:b4:af:81:fd:fc:
69:df:a0:bf:a1:f6:81:ff:1a:ea:c8:c6:ec:69:60:74:6a:58:
93:3a:03:2b:62:0a:0a:87:31:84:00:d8:24:05:08:97:4f:a0:
58:f2:7c:aa:fe:ab:a9:f9:80:37:64:4f:e5:98:ea:4a:63:b9:
89:25:fa:09:26:9e:bc:4e:ad:2a:b7:20:2f:dc:5c:36:42:14:
aa:48:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:14 2026 by rpki-client