This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
File: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (raw, json)
Hash identifier: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=
Subject key identifier: 5B:E7:42:A7:86:66:F2:E8:E7:55:05:06:3F:2C:CC:19:6B:30:EB:FA
Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial: 10E3EB917839D1A3CFD6CE46F547CDC06823C65D
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
Signing time: Fri 09 Jan 2026 07:01:35 +0000
ROA not before: Fri 09 Jan 2026 06:56:35 +0000
ROA not after: Fri 08 Jan 2027 07:01:35 +0000
asID: 152399
IP address blocks: 36.50.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 03:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:eb:91:78:39:d1:a3:cf:d6:ce:46:f5:47:cd:c0:68:23:c6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Validity
Not Before: Jan 9 06:56:35 2026 GMT
Not After : Jan 8 07:01:35 2027 GMT
Subject: CN=5BE742A78666F2E8E75505063F2CCC196B30EBFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:ef:ed:d8:ea:31:a4:bc:e1:41:56:fa:aa:
65:cb:ab:07:28:21:eb:a4:bd:63:e4:be:f3:57:fb:
8e:0c:67:1d:e9:cd:86:94:78:f3:a9:9f:b7:d7:4a:
35:16:d0:76:e8:37:1c:aa:27:67:22:94:20:be:9d:
2e:29:ae:de:34:bc:f5:08:38:13:79:6f:1f:1c:8f:
bc:1f:14:59:52:81:21:39:90:d9:08:13:6c:2a:2b:
92:3e:52:35:46:e2:c0:6b:5a:e2:f8:33:70:e7:ce:
83:ac:f0:67:31:be:79:c2:60:07:c4:a7:0a:40:ee:
fe:5b:e9:0e:9e:f9:0a:34:37:0e:44:69:1b:91:9f:
3e:23:da:6b:ab:cf:51:66:54:23:8f:da:fb:cf:94:
ab:63:8e:d5:34:cd:31:e0:38:1b:d1:d8:a1:77:5a:
e9:d6:46:93:11:d3:cb:8c:4e:f5:98:7e:24:8f:18:
fa:d3:e5:87:db:90:80:95:37:3f:85:13:2a:94:c0:
de:3b:6f:4e:61:cb:00:21:c9:97:10:d4:e4:4c:fd:
17:41:16:89:da:c3:c8:40:63:88:c5:25:e8:89:c5:
2e:52:87:e2:bf:e2:d1:f7:67:15:79:7b:70:bd:c6:
26:b2:52:0a:7b:92:fa:1a:ff:a4:01:dd:d5:68:31:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E7:42:A7:86:66:F2:E8:E7:55:05:06:3F:2C:CC:19:6B:30:EB:FA
X509v3 Authority Key Identifier:
keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.50.97.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:15:ca:08:09:80:2c:5d:b9:c1:d9:d9:88:aa:83:ec:13:87:
76:e4:0d:5d:02:84:3f:5b:75:bf:87:93:93:44:97:54:b4:36:
f6:94:22:6e:10:3a:2e:f7:4f:73:48:4f:12:72:fc:59:0b:37:
96:a3:00:a7:22:f6:c6:9e:83:ac:61:32:1b:50:7f:27:51:d5:
79:ac:78:29:3a:aa:e2:b3:7f:60:79:4d:1a:38:96:ff:91:0e:
21:aa:61:dc:a8:72:c1:64:30:49:01:f3:a4:f0:1f:1b:fa:68:
47:cc:af:b1:5c:22:9a:c2:d5:5f:24:46:7a:9f:c9:b4:f3:60:
e0:96:90:79:d8:21:ef:7f:12:c1:46:1a:db:d6:a3:33:20:e0:
23:e6:eb:52:b4:d8:40:0a:4c:29:30:eb:31:d5:bc:bd:8b:4d:
c8:5a:08:35:e3:e8:85:40:ce:4a:be:ca:4b:a8:2c:e8:c0:73:
f3:c2:38:59:1f:d2:ac:85:98:13:ee:0e:54:06:e9:0f:94:70:
36:73:b7:ad:cc:c1:1b:19:c1:e3:ed:88:7c:05:9d:a0:f0:26:
c7:e1:cd:13:53:ff:ff:2f:36:60:26:da:a9:4e:27:46:ee:08:
5f:8e:1f:97:97:a4:25:e1:e0:0a:71:fc:85:11:bc:94:3d:66:
24:28:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:59 2026 by rpki-client