This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
File: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (raw, json)
Hash identifier: MfOMH8pyeWOb33eVj5lGJlXFgGJnVY97tpbaPDlGeZk=
Subject key identifier: 01:02:00:95:E3:39:78:F3:6E:41:F0:BD:DE:73:DA:DE:7D:95:17:AF
Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Certificate serial: 6964FF03B0F9E8D550D2AED7862055304C1FF83C
Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
Signing time: Fri 09 Jan 2026 10:01:18 +0000
ROA not before: Fri 09 Jan 2026 09:56:18 +0000
ROA not after: Fri 08 Jan 2027 10:01:18 +0000
asID: 152053
IP address blocks: 210.87.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:64:ff:03:b0:f9:e8:d5:50:d2:ae:d7:86:20:55:30:4c:1f:f8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE
Validity
Not Before: Jan 9 09:56:18 2026 GMT
Not After : Jan 8 10:01:18 2027 GMT
Subject: CN=01020095E33978F36E41F0BDDE73DADE7D9517AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:9a:85:06:bb:af:98:2e:03:42:05:a3:ea:
d0:6f:87:56:02:6c:a6:ab:36:4d:f0:63:25:2c:33:
61:7c:44:51:d9:b8:fb:80:a0:81:e7:52:93:ff:c2:
89:21:64:05:54:fb:10:65:7b:6c:78:98:13:1f:2c:
3b:76:2d:2e:30:92:2e:76:2e:ac:ab:64:72:2d:03:
77:24:2b:62:e5:ea:cd:5a:c7:22:28:aa:5e:34:80:
e8:09:0e:39:e1:2f:ff:e7:05:3d:81:da:16:69:ad:
44:3d:1c:d9:d6:8a:3b:d6:18:01:01:61:f7:3b:3f:
26:c6:96:be:bc:d4:ae:70:97:6e:9b:57:5a:18:8c:
85:6b:3b:f6:9e:27:61:3c:e2:f5:ee:8b:6e:64:c6:
6b:ad:68:44:27:44:9b:c4:3d:b5:3d:2b:b8:54:2c:
a9:3b:e6:ec:58:03:15:ea:86:f4:14:72:b1:7b:43:
f4:ac:4e:62:c7:22:7c:9d:5b:a3:2c:14:ed:5a:3e:
17:e8:4c:8b:7c:6e:9c:6a:23:c0:c4:a2:01:be:7b:
b1:a3:fb:03:a0:c0:96:ad:c3:5e:65:45:b8:46:57:
37:9d:de:aa:09:13:3c:1d:c3:76:0c:c5:97:8d:bf:
cb:cb:4a:99:5f:93:6e:ae:39:49:38:4f:fc:2c:6d:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:00:95:E3:39:78:F3:6E:41:F0:BD:DE:73:DA:DE:7D:95:17:AF
X509v3 Authority Key Identifier:
keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.87.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1b:14:cc:7c:5e:4b:71:b8:fb:86:c5:89:ca:c2:a8:d6:57:
ab:59:f9:b6:c5:b3:99:1a:2f:b5:3e:90:25:02:18:8e:79:3c:
9d:66:64:57:da:b3:f7:0e:dd:b0:7a:0e:2f:b0:de:e6:22:9f:
0f:37:cb:b1:53:c5:5d:be:03:d2:21:f9:d1:75:40:8e:0a:23:
3d:08:ea:85:29:11:80:ef:b8:65:40:73:be:99:17:ac:11:d5:
05:9e:3a:9a:4f:5a:fa:96:7b:8a:bf:ff:1f:dd:d3:c5:fb:d2:
21:9e:5f:f5:1d:51:20:8d:2a:bb:a5:55:b0:61:89:45:b3:55:
69:ca:dc:51:b8:ec:30:79:de:9e:2c:56:e7:88:88:4b:ee:8d:
62:06:0f:75:b2:0d:8a:b0:41:bc:b5:32:80:68:9d:d2:59:53:
fe:27:c6:ed:83:6b:44:50:2e:aa:68:1e:cd:20:28:79:bc:ea:
68:dd:e4:4d:73:66:bf:4d:d8:23:4c:95:f7:db:24:43:e8:a9:
c2:9b:07:cf:a2:16:67:88:fa:12:87:9c:00:9b:de:32:58:df:
c4:48:bb:d6:97:43:e6:19:c5:03:b0:32:f4:39:13:2f:5f:96:
a1:9e:21:ed:cf:e7:9f:c5:a3:a8:92:ff:97:b7:22:fb:ce:81:
60:74:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:51:26 2026 by rpki-client