This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          G1jgCnmSopYszuP29nYUvkRV3aLdniLZkx0PQVvAk+4=
Subject key identifier:   02:54:58:AA:E3:E1:40:14:7D:7E:7A:47:50:D2:A6:CD:0C:8D:A3:79
Certificate issuer:       /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial:       2F07A388A83EAEF6E1227C3AB5677DAC41B63B3F
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa
Signing time:             Tue 27 Jan 2026 02:36:13 +0000
ROA not before:           Tue 27 Jan 2026 02:31:13 +0000
ROA not after:            Tue 26 Jan 2027 02:36:13 +0000
asID:                     38522
IP address blocks:        122.49.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
                          rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:07:a3:88:a8:3e:ae:f6:e1:22:7c:3a:b5:67:7d:ac:41:b6:3b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
        Validity
            Not Before: Jan 27 02:31:13 2026 GMT
            Not After : Jan 26 02:36:13 2027 GMT
        Subject: CN=025458AAE3E140147D7E7A4750D2A6CD0C8DA379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:05:48:63:32:52:56:e1:c2:a5:a0:25:fe:
                    c2:46:78:7f:d2:1d:88:be:76:b4:1e:94:8b:eb:2d:
                    52:e3:6d:d0:c5:52:45:b6:50:cf:53:60:a6:7f:fd:
                    14:d9:d4:b8:83:4d:32:5e:94:c4:27:ec:c0:34:68:
                    99:1e:c4:df:9a:54:f8:81:7c:6b:08:19:24:28:60:
                    f8:7e:01:9b:e2:73:09:50:17:b4:ed:4c:e1:0d:66:
                    bf:62:11:d2:02:41:59:7a:9e:a9:10:86:7d:9b:3c:
                    41:77:e9:1f:a5:89:db:55:15:0e:82:f8:ae:d9:01:
                    db:0d:a0:59:cf:3f:53:7c:b6:c8:c0:d7:91:2b:d1:
                    2c:76:1b:25:b2:a2:95:5e:6c:08:58:ba:f9:f3:3e:
                    34:3c:00:ac:51:28:a7:3a:41:85:80:e4:33:e0:f0:
                    b3:bd:07:10:66:f5:1d:18:22:fd:5e:b4:2d:e2:94:
                    93:d6:c2:97:9c:bb:44:d9:4e:e5:44:62:2e:91:c0:
                    c4:73:09:80:ab:7c:01:fd:3a:53:0f:bc:ba:54:fe:
                    bd:26:32:47:89:f5:b2:ea:f1:3f:11:59:6c:59:36:
                    7c:17:e0:91:df:27:ea:10:f6:6f:1d:c0:76:bf:10:
                    3c:79:9a:5c:c6:41:f0:52:70:75:e9:74:7e:f1:68:
                    fa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:54:58:AA:E3:E1:40:14:7D:7E:7A:47:50:D2:A6:CD:0C:8D:A3:79
            X509v3 Authority Key Identifier:
                keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232352e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:66:13:c4:c8:b6:1e:42:cd:a0:2c:5c:18:8c:15:6b:c6:
         df:52:e5:28:6e:07:ce:9c:f9:8b:60:fa:cb:89:e4:23:71:4e:
         bc:43:69:1c:23:48:c4:3f:a2:29:1d:6c:7f:d4:80:00:81:8c:
         d6:bc:05:cf:9c:ca:88:69:8c:ac:0f:be:0a:ff:d7:20:a6:a9:
         cf:a4:9f:e2:f6:b9:e5:07:1d:ad:89:c8:35:64:86:c4:a0:68:
         13:d9:fd:aa:c0:01:c9:f1:78:de:29:a5:34:96:df:53:67:6e:
         26:5e:d5:da:70:b4:07:a8:73:5e:67:da:0f:3b:94:fd:3e:57:
         8f:c3:82:d5:56:d9:45:70:b7:85:5e:5a:de:8a:07:0d:2f:25:
         fa:be:71:c8:7c:68:80:bd:ef:ac:93:3d:05:4e:78:be:8d:01:
         be:f2:f2:35:0d:96:2b:2b:8a:5c:18:97:e0:d9:da:0d:bb:d0:
         16:11:b9:69:32:20:19:d2:1e:51:e2:46:cc:1c:6b:45:f7:3d:
         f8:42:81:d3:a0:84:48:e3:94:f3:7a:60:3c:b2:e9:54:2c:a2:
         d9:b4:75:e5:ab:ca:6d:e3:85:85:96:1a:a7:f1:af:68:b6:32:
         73:46:59:ba:ff:73:ff:53:e4:c4:1f:2d:74:d2:7c:83:20:c8:
         35:2d:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:36 2026 by rpki-client