This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa
File:                     3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa (raw, json)
Hash identifier:          VOP1ZnRapV8lr/LgUr+BU5JLfLWA+wrb3J1zKZdQ3CY=
Subject key identifier:   E2:19:CE:6C:C0:CE:27:B3:87:EE:AB:D4:9E:CE:2E:FD:8A:6B:FD:38
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       0BE1DFD883B48071F8731B27781253EE2EA3D3A8
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa
Signing time:             Fri 30 Jan 2026 06:01:03 +0000
ROA not before:           Fri 30 Jan 2026 05:56:03 +0000
ROA not after:            Fri 29 Jan 2027 06:01:03 +0000
asID:                     140031
IP address blocks:        202.162.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 02:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e1:df:d8:83:b4:80:71:f8:73:1b:27:78:12:53:ee:2e:a3:d3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Jan 30 05:56:03 2026 GMT
            Not After : Jan 29 06:01:03 2027 GMT
        Subject: CN=E219CE6CC0CE27B387EEABD49ECE2EFD8A6BFD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:56:ab:f5:f6:cb:19:1e:dc:14:72:2a:ba:
                    66:ae:88:c9:89:41:c8:90:fd:d3:bd:d6:1b:c5:7d:
                    8c:99:03:bc:80:7a:99:b1:5c:ed:3e:fb:0a:77:21:
                    f7:55:dd:86:08:60:a1:9b:2c:9a:26:7b:85:ae:51:
                    ca:c6:d9:c9:eb:92:56:8e:5f:4f:cc:46:b6:34:0f:
                    e2:84:b6:01:13:dc:16:ea:90:b3:d6:36:51:bc:7a:
                    5d:b7:5f:53:ba:aa:d3:c6:dc:71:35:33:5f:8d:09:
                    cd:c8:96:23:9e:ee:66:71:f0:6b:5a:63:33:41:87:
                    3e:dd:bf:31:e4:6c:32:bd:3a:1a:3c:eb:7b:20:2c:
                    ac:af:52:79:48:05:b4:67:4d:57:df:b4:7e:94:22:
                    58:06:5f:0e:5e:96:0d:ee:9d:25:dc:85:9a:b0:de:
                    9b:78:e6:5b:44:de:01:ea:15:5c:5f:ff:b4:6d:13:
                    f4:72:0d:c1:31:24:18:be:60:10:f5:18:fa:4e:3b:
                    0a:89:e8:aa:fe:89:67:62:5c:68:0e:ff:6f:c9:62:
                    65:3c:68:7d:07:14:61:f5:cd:45:b8:34:a4:fb:64:
                    b7:f1:8a:10:f3:15:dc:8e:43:79:ac:02:db:70:64:
                    da:2f:da:2c:f3:cc:b6:bf:28:9a:a2:03:f4:7d:e6:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:19:CE:6C:C0:CE:27:B3:87:EE:AB:D4:9E:CE:2E:FD:8A:6B:FD:38
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3230322e3136322e3230352e302f32342d3234203d3e20313430303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:ba:04:9b:7b:ff:98:db:6a:43:75:ba:fa:07:2f:5c:e2:
         67:e0:7a:9e:19:91:80:9c:38:56:91:ec:2d:f2:3b:66:ef:39:
         05:4c:6b:9e:ea:a3:f6:b2:8e:e8:c9:62:aa:31:a2:f5:73:87:
         f5:2f:32:a5:f2:cf:b2:69:a9:92:9f:45:24:88:d2:b6:44:f8:
         74:f5:9d:2f:69:37:a6:d0:69:59:26:a1:10:4a:b5:94:ea:59:
         ff:1b:f3:5d:9c:99:bf:15:94:45:62:3e:22:dc:f9:19:68:c8:
         a6:34:ce:48:bd:04:c4:47:09:41:6e:3e:ea:60:b4:42:30:e9:
         fb:78:dc:50:b2:64:af:c8:b9:53:98:94:b5:ce:57:34:be:00:
         c1:70:11:83:a5:46:6e:db:80:6d:92:bb:3e:13:dc:f3:1e:7c:
         de:1f:9c:15:1d:14:f2:ab:b4:0d:73:0e:96:aa:57:5d:d5:41:
         a8:d9:c4:14:6e:3d:0b:10:1c:68:56:76:e5:be:3d:5d:e3:5e:
         30:a5:a0:1e:73:e0:f3:81:af:42:f1:a5:7a:db:5d:a8:88:8a:
         51:24:a7:7a:d9:c2:eb:6f:71:21:d6:c2:9e:cf:e8:95:9c:3d:
         3d:88:0c:e2:b1:3b:5a:07:f8:77:85:fe:9c:fb:39:a0:8b:86:
         12:d4:02:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 16:21:05 2026 by rpki-client