This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
File: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (raw, json)
Hash identifier: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=
Subject key identifier: 10:4B:FD:1B:5D:88:EA:62:B1:31:08:17:22:8A:1A:F7:3C:05:F8:9C
Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial: 7525C56636D59502E3591558E4BCB86875568A85
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
Signing time: Mon 02 Jun 2025 01:02:34 +0000
ROA not before: Mon 02 Jun 2025 00:57:34 +0000
ROA not after: Mon 01 Jun 2026 01:02:34 +0000
asID: 45287
IP address blocks: 111.68.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:25:c5:66:36:d5:95:02:e3:59:15:58:e4:bc:b8:68:75:56:8a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Validity
Not Before: Jun 2 00:57:34 2025 GMT
Not After : Jun 1 01:02:34 2026 GMT
Subject: CN=104BFD1B5D88EA62B1310817228A1AF73C05F89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:72:f8:9f:1a:77:83:ea:53:fc:b7:45:2c:
03:91:df:42:0f:72:81:ad:fb:74:a7:7f:48:70:e3:
84:77:cc:ca:e7:0d:0a:f4:35:4f:ae:c5:d3:6a:c9:
c4:4c:ce:86:ae:75:9f:a9:2c:34:59:70:74:e3:62:
80:38:75:7f:d7:19:2a:dc:74:63:2e:10:ef:e6:10:
fd:a0:db:1c:42:b4:06:16:df:48:f7:0c:2a:0d:3f:
a6:d2:4f:c7:c8:2f:da:e7:e0:c9:3f:6e:71:ba:88:
a0:5d:86:98:1b:a1:76:22:9e:45:e7:aa:fa:bd:b7:
21:18:75:99:ba:f3:34:08:19:4f:0f:4c:a3:4c:7f:
01:39:6a:3c:fb:05:02:d0:8f:84:ac:78:db:9e:28:
8a:c9:b0:ef:f8:d6:6f:a4:05:e4:d0:2e:8c:02:8f:
b4:4c:5d:db:3c:03:be:ff:df:1a:f5:b2:22:91:1a:
71:23:34:5e:7f:08:4f:a0:fa:b5:6e:1e:3a:ef:20:
4b:44:c4:cf:ad:0e:e2:9e:5c:25:e8:19:c2:92:be:
a8:e2:a8:01:1e:42:9e:17:0b:d6:37:65:46:1d:33:
81:1b:82:81:16:6b:28:b6:f7:e6:57:9d:4a:b6:e3:
f7:ef:fc:ba:fe:d3:e6:48:41:de:3f:fa:ef:fe:96:
c3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4B:FD:1B:5D:88:EA:62:B1:31:08:17:22:8A:1A:F7:3C:05:F8:9C
X509v3 Authority Key Identifier:
keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3131312e36382e3131322e302f32302d3234203d3e203435323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
111.68.112.0/20
Signature Algorithm: sha256WithRSAEncryption
65:09:54:b3:db:41:1e:05:4c:de:4b:1d:14:93:b8:bc:df:d3:
b7:34:0c:95:f3:be:bf:f9:a4:06:1a:93:b1:06:9f:00:79:75:
5f:4f:e2:30:83:79:78:83:4e:3f:55:0e:c8:75:c9:32:7a:33:
2e:5c:27:1b:5c:1f:c9:98:02:08:b3:d7:20:d4:38:20:89:80:
68:0c:0a:7b:fb:0d:b5:01:f6:59:59:c1:ae:40:4d:b5:93:a7:
d8:55:69:bd:3c:e2:7e:4a:ee:bf:43:da:00:b9:04:36:d0:ad:
1a:38:92:b2:11:f7:77:4a:19:88:74:dd:06:f1:f8:02:04:ae:
1c:0e:2c:07:20:e0:7e:59:dd:d8:db:ef:92:38:99:05:2f:8c:
b4:71:cd:99:37:51:93:3e:de:20:79:ea:ab:64:06:c8:fc:7e:
e3:02:1e:7d:23:a9:b3:18:36:e7:ca:aa:5d:bd:7e:66:d9:41:
af:24:b3:c6:b2:e4:c5:07:d2:03:00:31:9e:ab:10:63:81:97:
4c:25:e6:91:0b:3b:42:e5:66:7e:6a:63:60:7d:11:6e:fb:11:
84:ee:ec:40:5c:d9:69:f8:de:48:0e:1d:fe:af:02:6b:57:04:
cf:f6:63:19:7d:f1:0c:c5:a2:a1:da:ee:61:4a:9e:0e:ae:d5:
56:46:04:31
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdSXFZjbVlQLjWRVY5Ly4aHVWioUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx
QkMwNkVCNzAeFw0yNTA2MDIwMDU3MzRaFw0yNjA2MDEwMTAyMzRaMDMxMTAvBgNV
BAMTKDEwNEJGRDFCNUQ4OEVBNjJCMTMxMDgxNzIyOEExQUY3M0MwNUY4OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLnL4nxp3g+pT/LdFLAOR30IP
coGt+3Snf0hw44R3zMrnDQr0NU+uxdNqycRMzoaudZ+pLDRZcHTjYoA4dX/XGSrc
dGMuEO/mEP2g2xxCtAYW30j3DCoNP6bST8fIL9rn4Mk/bnG6iKBdhpgboXYinkXn
qvq9tyEYdZm68zQIGU8PTKNMfwE5ajz7BQLQj4SseNueKIrJsO/41m+kBeTQLowC
j7RMXds8A77/3xr1siKRGnEjNF5/CE+g+rVuHjrvIEtExM+tDuKeXCXoGcKSvqji
qAEeQp4XC9Y3ZUYdM4EbgoEWayi29+ZXnUq24/fv/Lr+0+ZIQd4/+u/+lsNVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEEv9G12I6mKxMQgXIooa9zwF+JwwHwYDVR0j
BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB
NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw
NkVCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MjQ5ZmMzLTZjODQtNGU5MS1i
MDY3LWEwYzZhODQwYTNhOS8wLzMxMzEzMTJlMzYzODJlMzEzMTMyMmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzQzNTMyMzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG9EcDANBgkqhkiG
9w0BAQsFAAOCAQEAZQlUs9tBHgVM3ksdFJO4vN/TtzQMlfO+v/mkBhqTsQafAHl1
X0/iMIN5eINOP1UOyHXJMnozLlwnG1wfyZgCCLPXINQ4IImAaAwKe/sNtQH2WVnB
rkBNtZOn2FVpvTzifkruv0PaALkENtCtGjiSshH3d0oZiHTdBvH4AgSuHA4sByDg
flnd2NvvkjiZBS+MtHHNmTdRkz7eIHnqq2QGyPx+4wIefSOpsxg258qqXb1+ZtlB
rySzxrLkxQfSAwAxnqsQY4GXTCXmkQs7QuVmfmpjYH0RbvsRhO7sQFzZafjeSA4d
/q8Ca1cEz/ZjGX3xDMWiodruYUqeDq7VVkYEMQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 13:17:46 2025 by rpki-client