This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e38342e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          FBhz9Z9iGFqxr/c1+P5HBL+DxDNELFpDG625ONhXy2w=
Subject key identifier:   09:70:E4:3F:72:EF:66:17:C8:CB:E2:DB:79:B2:E4:B6:82:19:46:A5
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       60851F6DDEA042F2F7CC3F5645C6057A2DDF4830
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 30 Jan 2026 05:02:02 +0000
ROA not before:           Fri 30 Jan 2026 04:57:02 +0000
ROA not after:            Fri 29 Jan 2027 05:02:02 +0000
asID:                     23679
IP address blocks:        110.232.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 02:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:85:1f:6d:de:a0:42:f2:f7:cc:3f:56:45:c6:05:7a:2d:df:48:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jan 30 04:57:02 2026 GMT
            Not After : Jan 29 05:02:02 2027 GMT
        Subject: CN=0970E43F72EF6617C8CBE2DB79B2E4B6821946A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:c4:04:17:d7:fa:60:a6:b5:27:cf:64:3a:
                    8c:d0:37:a2:17:7a:49:40:54:b1:a7:4d:2b:62:bb:
                    2b:fa:e2:88:10:51:c9:48:6d:eb:23:5b:0c:63:9a:
                    23:a2:53:50:10:66:d4:55:7b:bb:34:b4:c8:d9:6d:
                    e6:3d:44:ad:aa:10:08:be:1a:02:cd:be:f8:a1:9a:
                    d6:2c:f6:b2:2e:b3:0f:7b:22:fa:b2:70:94:4e:ba:
                    9c:1b:34:f3:cf:9e:da:ab:f0:93:5a:a2:10:a7:70:
                    e1:17:18:36:b4:3c:3c:d4:98:c8:d1:cf:95:75:25:
                    b7:55:f9:52:8c:a0:76:6c:83:4c:83:ee:7f:17:20:
                    ab:ea:36:5a:14:83:61:05:c3:c5:ae:2c:46:ab:ac:
                    3f:1a:a6:89:ba:0e:72:92:96:ca:fa:79:82:fe:dc:
                    fc:e8:14:28:db:13:54:99:9c:72:9f:56:d1:34:f0:
                    f5:5e:41:05:67:ff:f4:82:81:c4:aa:83:e2:a7:97:
                    db:40:8f:e7:bb:30:44:58:fa:e7:29:ac:0d:42:db:
                    b7:61:d5:c2:3c:4a:f1:9c:75:bf:dc:ce:97:45:97:
                    de:21:65:81:d9:4e:83:e7:56:68:95:06:d1:e7:ef:
                    d5:4a:71:cf:47:35:97:41:33:b4:8d:1c:8c:56:f9:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:70:E4:3F:72:EF:66:17:C8:CB:E2:DB:79:B2:E4:B6:82:19:46:A5
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e1:97:4d:39:fb:23:d5:b7:b2:ae:5c:1f:26:aa:d5:84:8b:
         23:66:eb:29:ac:f0:f4:da:6e:55:9b:9d:5e:54:c9:c5:20:ad:
         11:57:a1:b6:27:5d:da:ba:10:0e:91:a2:12:47:bd:09:67:8f:
         dc:4f:f9:99:8c:29:68:4b:a0:be:93:40:26:f7:84:bd:c6:a7:
         61:6a:d0:8f:7b:cd:5e:96:fb:ed:1e:53:3e:27:91:98:36:10:
         b0:2b:e6:2f:ce:4f:3e:3a:eb:bd:ec:43:fb:7e:79:6e:28:1c:
         00:67:62:c2:cb:fa:0d:68:8c:5c:d4:28:70:35:f9:fb:e7:bd:
         8a:ec:b4:65:fd:06:c4:ce:ba:8a:e7:0e:13:13:34:3f:39:3d:
         ad:ef:87:72:12:4c:ba:c9:3f:d2:33:b2:e7:de:b0:3b:4b:e7:
         1c:cb:f2:62:4a:af:74:77:7c:c6:36:7a:d6:5d:3a:a8:e5:0a:
         15:94:70:fb:d2:2f:0c:8b:52:dd:35:68:7a:9c:d3:9c:b7:56:
         06:68:18:8d:ff:2a:6e:5d:2e:be:00:bf:30:46:98:c2:43:78:
         fa:5f:53:87:c6:c0:c0:88:8d:8f:19:38:e8:e4:98:04:37:7b:
         b9:0a:5d:58:97:4f:d2:e2:aa:e0:60:11:83:73:ee:12:7d:31:
         e6:60:5e:d2
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYIUfbd6gQvL3zD9WRcYFei3fSDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0
RkE2Njk4NDAeFw0yNjAxMzAwNDU3MDJaFw0yNzAxMjkwNTAyMDJaMDMxMTAvBgNV
BAMTKDA5NzBFNDNGNzJFRjY2MTdDOENCRTJEQjc5QjJFNEI2ODIxOTQ2QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+D8QEF9f6YKa1J89kOozQN6IX
eklAVLGnTStiuyv64ogQUclIbesjWwxjmiOiU1AQZtRVe7s0tMjZbeY9RK2qEAi+
GgLNvvihmtYs9rIusw97IvqycJROupwbNPPPntqr8JNaohCncOEXGDa0PDzUmMjR
z5V1JbdV+VKMoHZsg0yD7n8XIKvqNloUg2EFw8WuLEarrD8apom6DnKSlsr6eYL+
3PzoFCjbE1SZnHKfVtE08PVeQQVn//SCgcSqg+Knl9tAj+e7MERY+ucprA1C27dh
1cI8SvGcdb/czpdFl94hZYHZToPnVmiVBtHn79VKcc9HNZdBM7SNHIxW+cVZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCXDkP3LvZhfIy+LbebLktoIZRqUwHwYDVR0j
BBgwFoAUVSsxom6Sqd1qWFuSN1t/yk+maYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDE0MzJjYy0zYmM5LTQ4NTgtYjUwNi0yMThhYWIwYjA4OWMvMC81NTJCMzFBMjZF
OTJBOURENkE1ODVCOTIzNzVCN0ZDQTRGQTY2OTg0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTUyQjMxQTI2RTkyQTlERDZBNTg1QjkyMzc1QjdGQ0E0RkE2
Njk4NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzODM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG7oVDANBgkqhkiG
9w0BAQsFAAOCAQEAGOGXTTn7I9W3sq5cHyaq1YSLI2brKazw9NpuVZudXlTJxSCt
EVehtidd2roQDpGiEke9CWeP3E/5mYwpaEugvpNAJveEvcanYWrQj3vNXpb77R5T
PieRmDYQsCvmL85PPjrrvexD+355bigcAGdiwsv6DWiMXNQocDX5++e9iuy0Zf0G
xM66iucOExM0Pzk9re+HchJMusk/0jOy596wO0vnHMvyYkqvdHd8xjZ61l06qOUK
FZRw+9IvDItS3TVoepzTnLdWBmgYjf8qbl0uvgC/MEaYwkN4+l9Th8bAwIiNjxk4
6OSYBDd7uQpdWJdP0uKq4GARg3PuEn0x5mBe0g==
-----END CERTIFICATE-----
Generated at Tue Feb 10 13:34:39 2026 by rpki-client