This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa (raw, json)
Hash identifier:          AAuw8Yi/Y4yTY1tFPFOWDOE9dvI0HDUqxmcmcOjiSBI=
Subject key identifier:   7E:9E:9E:00:97:32:38:94:0F:DD:0E:86:F2:BE:11:14:15:2E:C7:18
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       7721B1338DAB009B67050C50FFCD155CB181D286
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa
Signing time:             Mon 22 Dec 2025 01:35:33 +0000
ROA not before:           Mon 22 Dec 2025 01:30:33 +0000
ROA not after:            Mon 21 Dec 2026 01:35:33 +0000
asID:                     58369
IP address blocks:        116.197.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Jan 2026 00:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:21:b1:33:8d:ab:00:9b:67:05:0c:50:ff:cd:15:5c:b1:81:d2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Dec 22 01:30:33 2025 GMT
            Not After : Dec 21 01:35:33 2026 GMT
        Subject: CN=7E9E9E00973238940FDD0E86F2BE1114152EC718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:ea:9a:9d:51:7b:49:30:6e:fc:c5:30:c3:
                    4d:b0:28:6b:34:0b:2a:4f:74:f4:20:f0:96:a7:a5:
                    23:52:9d:af:44:1a:41:c3:1e:ec:c3:aa:26:45:69:
                    b3:d7:9d:2a:15:7a:17:46:71:e5:5d:a6:9a:e6:48:
                    bc:77:32:4f:fc:f7:33:85:49:d0:b1:8f:ab:e5:c1:
                    ba:36:89:c8:5b:1a:b2:73:b2:41:97:9b:f2:0b:b3:
                    6f:ea:32:96:1a:6c:29:5a:d5:d8:a4:56:e3:10:38:
                    74:48:6f:14:09:cd:15:90:3b:66:16:ba:00:a0:af:
                    27:c7:5e:9a:e9:40:c7:6c:6c:df:94:a2:e7:9b:4f:
                    39:a9:b1:b7:1f:66:db:28:cc:82:ba:f2:5d:61:bb:
                    b3:f6:75:85:2c:a9:66:0a:3e:ae:09:47:95:7f:33:
                    8f:05:ed:28:bc:ac:49:11:d4:5a:63:49:0c:d8:cd:
                    dc:01:9e:24:e6:4f:94:c4:34:87:d6:f5:ec:b1:b4:
                    df:0b:f4:d7:2d:8b:b9:3e:a0:65:4e:d1:28:78:6c:
                    fa:7d:9f:26:ca:be:a2:7e:86:8e:74:bc:cc:80:65:
                    f8:af:12:59:0f:19:07:ec:66:1b:b4:73:a1:cb:5a:
                    d7:5d:a3:fd:5a:c1:8b:35:f1:f4:5f:b2:55:23:60:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:9E:00:97:32:38:94:0F:DD:0E:86:F2:BE:11:14:15:2E:C7:18
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:18:09:bf:71:2f:75:c1:82:a0:db:ac:d9:1f:1c:53:3a:
         d9:3f:46:d7:a8:bb:d3:d5:31:6c:a7:73:99:7f:4e:a9:e6:18:
         98:f9:24:3e:9d:f1:df:b5:e9:46:88:af:7e:a1:ac:8e:5b:ce:
         cb:e2:94:9c:4e:de:7f:93:52:1b:cd:48:02:74:0f:54:47:0b:
         52:c7:fb:ce:98:f6:23:03:13:e4:69:db:5d:f2:1a:ff:85:a5:
         00:2a:98:f1:b0:e5:ac:e6:96:cf:e7:1a:f8:c8:ef:4c:1c:35:
         5d:fe:b6:2a:34:3e:7d:30:04:1f:d0:b4:c9:f0:83:38:90:4a:
         f1:13:25:7a:f4:ab:14:60:10:6b:12:d5:fe:3a:3f:a4:c8:8c:
         bf:19:7f:d7:4b:2d:ea:96:05:b6:23:9e:6e:7f:0b:4c:35:3d:
         1a:1e:57:db:0e:94:02:a8:1c:40:ca:a6:7c:29:e8:fd:68:3b:
         37:0f:89:92:ce:51:2b:fb:37:32:19:36:f8:cb:86:6f:f0:f8:
         88:06:84:e6:c8:96:42:cd:3a:3f:7d:ac:e0:13:ae:05:49:c0:
         23:b3:ab:2c:fe:2c:a6:50:f9:f3:de:21:ee:da:7c:26:f8:1a:
         e9:9b:1d:53:8d:2d:c2:bf:d6:cc:59:92:bd:d6:6b:87:16:8e:
         0e:89:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 18:37:41 2025 by rpki-client