This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa
File:                     323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa (raw, json)
Hash identifier:          OViwO9PklTzUH02BjuZLXgkeh74Fe3vDWeCkgzs68vI=
Subject key identifier:   76:C3:28:A6:B4:4A:55:FA:03:78:4D:DD:59:85:40:0C:4B:88:B2:6C
Certificate issuer:       /CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
Certificate serial:       72D80BC6694F6CCF6CCB7145E124E25241B57333
Authority key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa
Signing time:             Tue 11 Nov 2025 06:01:50 +0000
ROA not before:           Tue 11 Nov 2025 05:56:50 +0000
ROA not after:            Tue 10 Nov 2026 06:01:50 +0000
asID:                     153087
IP address blocks:        2404:97c0:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl
                          rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d8:0b:c6:69:4f:6c:cf:6c:cb:71:45:e1:24:e2:52:41:b5:73:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158
        Validity
            Not Before: Nov 11 05:56:50 2025 GMT
            Not After : Nov 10 06:01:50 2026 GMT
        Subject: CN=76C328A6B44A55FA03784DDD5985400C4B88B26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:9f:3e:85:dd:8d:98:e3:a0:1b:ba:60:f7:
                    3f:68:e8:0b:7b:b4:0d:c0:e3:30:49:90:f3:26:84:
                    a6:25:f3:23:96:cc:cc:00:d2:e7:26:be:11:07:cc:
                    c6:08:90:93:4c:f9:9f:ea:5d:05:7d:c4:00:29:67:
                    61:e4:73:5d:84:83:4f:a3:a5:a5:de:e8:7c:29:00:
                    b2:c1:fb:d0:12:e4:7c:a1:9e:da:20:ed:26:48:6e:
                    81:84:ef:c4:5a:4b:c5:d3:77:49:54:b0:f9:65:2b:
                    f9:ce:37:af:ef:bd:5c:5d:5c:85:22:98:6d:53:54:
                    91:ef:f7:9e:55:b3:4f:a0:23:10:11:a3:33:6b:bc:
                    74:56:cc:e8:1c:d5:95:3f:34:68:81:8a:9f:b7:c4:
                    bc:8d:d5:07:a5:52:b7:9b:22:05:96:d7:8a:65:d3:
                    b7:f0:72:37:94:36:af:1e:aa:e7:cb:d1:64:ab:e3:
                    6b:13:23:64:7b:e5:2f:b2:89:d0:44:c6:5d:ab:5f:
                    d7:e2:45:c4:c9:05:4e:7f:84:a5:81:3d:21:bd:80:
                    f9:1b:c1:76:68:63:85:a5:25:d1:c0:62:05:34:27:
                    dc:05:5c:ed:b6:79:cf:f6:e5:4d:26:61:69:b2:e7:
                    4c:98:91:5d:21:b5:0b:7c:2d:3e:52:6f:de:a9:d4:
                    00:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C3:28:A6:B4:4A:55:FA:03:78:4D:DD:59:85:40:0C:4B:88:B2:6C
            X509v3 Authority Key Identifier:
                keyid:4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/323430343a393763303a393030303a3a2f33362d3336203d3e20313533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:97c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:f3:97:b2:d6:30:55:3c:46:2f:fb:c1:a5:78:e1:2f:2f:
         74:a7:1c:a9:df:9a:27:c4:a5:f9:ae:1b:e3:97:10:6e:e1:a9:
         09:16:24:c7:76:cd:3e:54:dc:f0:6d:0b:ff:8e:25:50:c2:2f:
         63:15:63:46:7a:b6:34:ad:8d:46:b0:40:10:11:43:3b:5d:6d:
         d3:a8:f1:13:2c:55:ec:b4:0f:48:ae:ef:e2:74:82:ee:12:ea:
         3a:84:ca:2c:92:04:5c:a2:d9:6e:04:29:dd:21:ff:de:43:18:
         77:39:b9:48:c4:0e:03:f4:81:ee:9a:71:c6:8d:05:f7:1a:8e:
         61:15:28:fd:c2:1c:ed:5b:83:7f:ad:8c:d9:d2:d7:d3:3d:ad:
         2c:b6:6b:ca:2a:6e:3b:05:d8:14:91:92:45:64:d9:36:5a:69:
         69:8c:8c:46:ea:6f:d8:ee:15:ad:98:e9:b2:bb:ed:b1:a6:9e:
         7c:bb:eb:1a:a7:33:d5:d0:68:6d:f9:64:4a:0f:05:ee:12:bf:
         8d:a8:66:06:ff:05:68:87:a7:f5:86:a9:af:d2:7f:b6:97:69:
         c8:a3:83:65:3e:99:e8:b0:1c:df:97:95:26:19:b8:85:f6:ab:
         41:fa:22:1c:90:f0:50:dc:51:65:89:25:05:81:5a:e9:fc:82:
         b6:97:48:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:39:09 2025 by rpki-client