This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa
File: 3230322e302e39322e302f32332d3234203d3e203535363935.roa (raw, json)
Hash identifier: MqAwWrLiifg0NVQLvNMyPUe2lZOdrumhHENCKuLcOOQ=
Subject key identifier: AF:7A:74:0E:D1:A3:0A:AE:36:EC:13:CC:04:B4:D9:2D:B6:04:8A:E0
Certificate issuer: /CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Certificate serial: 7B7E834FFDCAA1A3C6382D6A7032C0E62D8A0D4A
Authority key identifier: 39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa
Signing time: Mon 12 Jan 2026 12:20:08 +0000
ROA not before: Mon 12 Jan 2026 12:15:08 +0000
ROA not after: Mon 11 Jan 2027 12:20:08 +0000
asID: 55695
IP address blocks: 202.0.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:7e:83:4f:fd:ca:a1:a3:c6:38:2d:6a:70:32:c0:e6:2d:8a:0d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B4AA9B3C7F780261DC490658E62BE86B85FF3A
Validity
Not Before: Jan 12 12:15:08 2026 GMT
Not After : Jan 11 12:20:08 2027 GMT
Subject: CN=AF7A740ED1A30AAE36EC13CC04B4D92DB6048AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:94:d7:0c:40:53:26:ee:23:77:28:97:5b:
83:4d:66:61:2e:58:2e:a6:b4:64:0a:39:2f:16:8e:
a4:64:69:3a:b4:ad:ab:60:e9:a4:27:52:d8:a8:88:
f3:29:f5:55:b3:56:15:c6:cb:3b:24:6e:6c:97:bd:
ed:35:a2:e0:c2:f3:70:6b:96:74:64:8b:f3:07:97:
29:d5:c8:40:78:58:26:65:62:e3:b1:6a:84:ba:f9:
ed:5a:44:fa:ea:1f:67:27:47:23:b8:70:bf:54:27:
c6:83:ed:62:3f:e1:a1:0e:37:db:02:8c:e8:b1:81:
50:a2:c7:92:83:d7:b4:ea:86:a3:33:2c:1c:c2:cc:
a8:57:17:69:bf:1c:94:22:42:d7:39:bb:de:9c:7c:
96:ea:d6:0c:83:c6:9a:86:28:2c:c2:63:0c:1d:df:
6e:9b:fd:d5:d1:f9:ab:cc:36:08:22:d0:6c:45:19:
07:af:52:54:0f:48:df:86:5e:01:53:ff:4c:63:32:
01:60:84:ae:78:77:17:02:34:f4:ea:cc:c4:5d:97:
ac:92:b9:4a:48:7c:e2:86:c8:4e:86:a5:e0:ed:27:
49:8a:5a:6d:fa:72:e2:13:f5:8e:7e:dc:65:fb:f6:
e3:58:20:f2:a7:e1:a1:c4:4b:06:48:b7:0e:d9:e4:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:74:0E:D1:A3:0A:AE:36:EC:13:CC:04:B4:D9:2D:B6:04:8A:E0
X509v3 Authority Key Identifier:
keyid:39:B4:AA:9B:3C:7F:78:02:61:DC:49:06:58:E6:2B:E8:6B:85:FF:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/39B4AA9B3C7F780261DC490658E62BE86B85FF3A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/222e1f3c-5a48-4f39-aac7-e012ed709d6a/0/3230322e302e39322e302f32332d3234203d3e203535363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.0.92.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:83:d1:6e:a8:30:56:6d:64:88:ae:4b:26:50:dd:67:f5:0a:
3f:cd:2b:d5:f6:92:c0:e1:d4:41:5e:26:73:b4:10:c4:17:7f:
54:f1:8a:17:6b:0e:38:5a:56:52:63:29:5e:c2:83:9d:26:13:
be:a9:73:99:23:00:10:76:94:b6:02:c9:c1:e0:40:e8:8c:fc:
2b:57:46:34:14:b1:ab:34:e8:21:ac:39:62:97:ed:00:e7:0b:
86:67:df:28:b1:80:91:c3:08:44:ea:b0:fa:e1:1f:7d:ac:1c:
c9:15:50:cd:29:c5:c3:63:e7:5c:13:68:b8:e9:6f:bb:5c:30:
7b:12:dd:d7:15:b4:59:5b:86:2f:fa:f9:37:e8:84:a2:b1:1b:
29:1b:93:d1:d6:4e:d8:67:40:66:83:d5:1f:c6:1c:c2:5b:f5:
54:df:52:89:11:2a:8c:98:fc:df:17:c2:6c:db:b0:4a:03:04:
8e:f5:30:c4:23:d9:62:c5:78:92:bf:c5:7d:3b:a4:e4:78:49:
f1:08:07:e5:ed:b9:a7:3f:9b:23:b3:28:54:10:1e:c9:5c:0b:
d6:62:70:0a:81:8f:db:74:09:b4:cb:57:58:47:26:69:d0:68:
26:ba:00:c7:a3:f8:ed:2e:14:db:59:68:79:d5:ca:c2:45:97:
4e:24:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:39:16 2026 by rpki-client