This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa
File:                     3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          ul2W8U1WXYV/UtaI5hejlGS5Gre0MLyAGqAqqJhxqtU=
Subject key identifier:   B6:D1:F2:C2:02:C1:A2:A3:DA:EB:54:32:3E:23:4C:0D:A3:55:0E:21
Certificate issuer:       /CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
Certificate serial:       0EF74E04FF9E42F9E3BF767A76279767E5E0CBE7
Authority key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 12 Jan 2026 10:34:36 +0000
ROA not before:           Mon 12 Jan 2026 10:29:36 +0000
ROA not after:            Mon 11 Jan 2027 10:34:36 +0000
asID:                     16509
IP address blocks:        115.166.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl
                          rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Jan 2026 22:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:4e:04:ff:9e:42:f9:e3:bf:76:7a:76:27:97:67:e5:e0:cb:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097
        Validity
            Not Before: Jan 12 10:29:36 2026 GMT
            Not After : Jan 11 10:34:36 2027 GMT
        Subject: CN=B6D1F2C202C1A2A3DAEB54323E234C0DA3550E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5c:e0:76:7a:0f:d9:81:c0:ce:71:ae:f9:eb:
                    1b:c0:fc:d2:a2:ad:c8:91:a0:16:6e:ed:32:ec:63:
                    91:d0:14:0c:ba:ce:69:8e:b9:54:22:ee:4d:2c:eb:
                    0c:a4:c3:1b:e3:f3:1c:40:35:ac:d9:a3:dd:f7:e4:
                    da:73:58:2e:ac:9a:50:0b:d5:c7:e3:cb:d5:5a:3b:
                    91:93:1c:e5:ae:e5:07:ca:d9:1c:a3:4a:79:ac:3f:
                    57:47:f3:a5:67:70:7e:f9:c0:4c:dd:5e:a2:52:33:
                    b8:b4:eb:cb:9d:2b:7d:21:ab:79:3e:82:58:d6:f1:
                    c2:bd:be:b0:de:db:b7:45:62:6d:af:c3:aa:ea:9b:
                    10:a0:07:57:c6:72:7e:04:4a:af:2c:00:b2:69:2c:
                    39:f5:e6:2b:76:e2:d1:af:01:94:9e:8d:97:6b:69:
                    ec:4e:fe:e2:8b:da:2c:94:98:e8:6a:d0:f0:91:96:
                    ff:31:b7:1e:3b:68:6e:a2:00:f4:45:aa:9b:f7:e7:
                    c1:19:66:c0:7e:9f:20:3d:7d:af:49:ee:e4:ec:1f:
                    11:02:1e:f1:a3:96:9f:3d:84:1e:c1:64:63:c4:2a:
                    dd:5f:a8:f2:92:67:78:1e:56:43:8d:c8:b9:f5:ee:
                    31:7a:59:3e:19:e6:a9:80:a2:ec:95:ec:e3:63:07:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:F2:C2:02:C1:A2:A3:DA:EB:54:32:3E:23:4C:0D:A3:55:0E:21
            X509v3 Authority Key Identifier:
                keyid:47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:ba:74:22:4a:2a:37:d1:43:cc:3a:1b:c4:11:64:5c:6d:
         b0:b5:b5:b1:9a:d2:8d:1c:a4:d0:29:a2:51:fe:58:c7:11:00:
         55:3a:27:74:bb:06:2d:2f:bf:c4:6e:55:6d:94:d2:a8:64:f6:
         0c:a2:77:96:44:e4:b3:10:e5:a0:06:dd:2b:7b:12:0e:a3:59:
         0f:41:6d:df:95:b6:3f:fc:b5:17:d2:56:11:f3:f4:1f:1c:d9:
         93:65:49:44:f0:8a:6c:1b:7b:4a:77:18:88:24:26:62:25:9a:
         93:a2:f8:1c:22:3e:8a:9d:12:e5:71:17:ee:f7:0c:5f:4e:b8:
         29:21:42:fb:0f:fc:19:5b:bf:41:0d:6c:9d:c0:05:85:88:22:
         b5:f3:0f:18:44:a1:62:04:3c:ac:17:27:a7:b5:96:bd:30:bd:
         f9:f1:26:d6:88:48:0d:34:6e:dd:c6:08:09:aa:fb:5b:a4:c8:
         93:17:f7:c4:55:4b:a1:8a:06:e6:6f:ae:37:44:7e:45:3d:ac:
         ad:f8:9e:6d:c8:9c:4e:44:d3:f7:28:8d:41:c9:a7:2e:17:99:
         d8:e4:b2:d5:4b:51:63:db:cc:3b:3c:2f:82:18:ff:c2:2e:32:
         04:b0:d6:a0:1e:74:7a:fc:e7:39:71:88:3b:39:28:dd:89:3c:
         90:75:82:bd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDvdOBP+eQvnjv3Z6dieXZ+Xgy+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1
MjYxOTA5NzAeFw0yNjAxMTIxMDI5MzZaFw0yNzAxMTExMDM0MzZaMDMxMTAvBgNV
BAMTKEI2RDFGMkMyMDJDMUEyQTNEQUVCNTQzMjNFMjM0QzBEQTM1NTBFMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzXOB2eg/ZgcDOca756xvA/NKi
rciRoBZu7TLsY5HQFAy6zmmOuVQi7k0s6wykwxvj8xxANazZo9335NpzWC6smlAL
1cfjy9VaO5GTHOWu5QfK2RyjSnmsP1dH86VncH75wEzdXqJSM7i068udK30hq3k+
gljW8cK9vrDe27dFYm2vw6rqmxCgB1fGcn4ESq8sALJpLDn15it24tGvAZSejZdr
aexO/uKL2iyUmOhq0PCRlv8xtx47aG6iAPRFqpv358EZZsB+nyA9fa9J7uTsHxEC
HvGjlp89hB7BZGPEKt1fqPKSZ3geVkONyLn17jF6WT4Z5qmAouyV7ONjB1OjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUttHywgLBoqPa61QyPiNMDaNVDiEwHwYDVR0j
BBgwFoAUR7P7852N/lvFz9K+058PoVJhkJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMC80N0IzRkJGMzlE
OERGRTVCQzVDRkQyQkVEMzlGMEZBMTUyNjE5MDk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdCM0ZCRjM5RDhERkU1QkM1Q0ZEMkJFRDM5RjBGQTE1MjYx
OTA5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2LWVjNTMtNDJlYi05
YjhiLWZhMDhmODc0ZDMxOS8wLzMxMzEzNTJlMzEzNjM2MmUzMTMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAc6ZvMA0GCSqG
SIb3DQEBCwUAA4IBAQBLfLp0IkoqN9FDzDobxBFkXG2wtbWxmtKNHKTQKaJR/ljH
EQBVOid0uwYtL7/EblVtlNKoZPYMoneWROSzEOWgBt0rexIOo1kPQW3flbY//LUX
0lYR8/QfHNmTZUlE8IpsG3tKdxiIJCZiJZqTovgcIj6KnRLlcRfu9wxfTrgpIUL7
D/wZW79BDWydwAWFiCK18w8YRKFiBDysFyentZa9ML358SbWiEgNNG7dxggJqvtb
pMiTF/fEVUuhigbmb643RH5FPayt+J5tyJxORNP3KI1ByacuF5nY5LLVS1Fj28w7
PC+CGP/CLjIEsNagHnR6/Oc5cYg7OSjdiTyQdYK9
-----END CERTIFICATE-----
Generated at Sat Jan 17 06:46:19 2026 by rpki-client