This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa
File: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (raw, json)
Hash identifier: huqt9zp4ZaM/ehHcf/q79Imf4OzuK2ijijHg2TgEeMU=
Subject key identifier: E6:12:CF:34:CE:83:E8:F5:8B:04:48:01:96:88:28:B9:D3:F6:F2:28
Certificate issuer: /CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Certificate serial: 70355722E20FD9C980CDB16453D8117912BFC44A
Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa
Signing time: Wed 21 Jan 2026 07:35:20 +0000
ROA not before: Wed 21 Jan 2026 07:30:20 +0000
ROA not after: Wed 20 Jan 2027 07:35:20 +0000
asID: 142362
IP address blocks: 114.141.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:35:57:22:e2:0f:d9:c9:80:cd:b1:64:53:d8:11:79:12:bf:c4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Validity
Not Before: Jan 21 07:30:20 2026 GMT
Not After : Jan 20 07:35:20 2027 GMT
Subject: CN=E612CF34CE83E8F58B044801968828B9D3F6F228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:69:7c:8c:92:1b:1c:9d:f5:22:d5:62:d9:
f0:a2:19:1e:01:a6:3f:e8:ab:3a:7e:b6:30:1e:ee:
47:04:4c:18:8e:6b:ee:7f:f8:67:ad:01:8c:b4:bb:
be:11:cb:03:1d:0d:01:1e:bc:42:00:1b:7c:f7:dd:
61:c8:c4:a9:6d:8f:78:80:34:ed:01:8b:bf:b0:f0:
78:4e:bc:26:2d:eb:b7:d3:ac:60:31:a8:a6:f2:5f:
b3:05:a4:33:f4:57:25:2a:05:5e:cb:23:2d:cd:73:
55:61:c6:b4:a3:89:37:77:b2:e5:3c:9c:66:33:f6:
db:46:f7:15:b4:f6:cd:f1:97:24:0e:18:6d:5f:1a:
6d:87:d8:07:a8:1c:a4:4f:b8:af:26:6a:bf:47:d0:
f8:e4:31:56:c2:07:ce:7b:9d:0e:25:ba:6e:a5:8a:
89:88:ed:b6:5e:f0:45:4d:29:44:3b:66:22:b9:95:
c5:9b:19:b5:7d:cd:2b:d4:8f:fc:6e:00:a1:8f:58:
a7:38:31:7c:8b:0f:b9:44:63:c1:41:8c:10:0c:4f:
eb:52:a9:01:cf:82:8d:fe:8f:f8:94:12:6d:81:91:
cd:2d:e9:2b:b5:2a:27:90:00:e9:f6:e5:89:41:b7:
a3:f1:c3:cb:b1:80:fb:a8:54:b6:14:29:41:d4:0c:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:CF:34:CE:83:E8:F5:8B:04:48:01:96:88:28:B9:D3:F6:F2:28
X509v3 Authority Key Identifier:
keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3e:dd:92:1c:3b:21:53:59:17:16:85:24:39:95:be:f7:dd:
35:58:96:ae:33:c1:8a:6f:55:dc:05:c4:83:85:25:ba:ae:75:
fa:fe:d6:b7:a7:f5:74:ec:b1:3a:ec:81:f5:d5:f9:35:7c:c4:
d4:a2:f8:42:ff:f6:a3:b9:4f:37:b9:e4:c3:4b:da:2c:90:df:
e9:0e:ce:b5:26:c9:76:ce:81:2e:ed:a6:aa:b1:f2:11:2e:1d:
01:f9:10:14:a5:e2:ce:ef:75:d8:dd:ff:2f:dc:8f:29:5a:1e:
ef:fd:49:8a:2b:80:32:8d:7f:2c:3e:41:0c:44:bf:4b:d1:b0:
5d:7b:fa:d0:f7:8a:87:d8:74:9e:3f:10:2c:69:59:ec:dc:e3:
71:75:48:c6:43:f9:e9:1f:fd:01:cd:54:41:a3:2a:28:47:50:
12:39:f8:1c:18:6a:0e:5c:1f:b8:4f:34:21:de:22:09:a3:79:
97:fb:46:85:a6:e3:a8:cf:5b:93:3a:47:f3:17:cc:31:00:2f:
29:37:41:1d:87:76:d4:ff:3f:a6:7b:b0:11:a3:d6:d4:ef:91:
e1:84:b8:f6:fe:75:4c:2a:96:62:88:78:26:de:be:84:fb:7f:
9d:a2:49:68:21:ab:a2:2a:c2:e7:51:2d:94:1f:98:2d:4a:a7:
50:02:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:46 2026 by rpki-client