This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232382e302f32342d3234203d3e20313431383931.roa
File:                     3132322e34392e3232382e302f32342d3234203d3e20313431383931.roa (raw, json)
Hash identifier:          aP7PL7XZhyf/6+vny/DbpLcCqykJoucSdCMpYg0S1ck=
Subject key identifier:   E0:D5:A0:D6:FC:A9:1E:88:63:1C:6C:13:4D:D0:33:E2:18:92:C1:C8
Certificate issuer:       /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial:       1E684644D89AF1363CAB315C09B6C9DF5224582D
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232382e302f32342d3234203d3e20313431383931.roa
Signing time:             Tue 27 Jan 2026 02:30:52 +0000
ROA not before:           Tue 27 Jan 2026 02:25:52 +0000
ROA not after:            Tue 26 Jan 2027 02:30:52 +0000
asID:                     141891
IP address blocks:        122.49.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
                          rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:46:44:d8:9a:f1:36:3c:ab:31:5c:09:b6:c9:df:52:24:58:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
        Validity
            Not Before: Jan 27 02:25:52 2026 GMT
            Not After : Jan 26 02:30:52 2027 GMT
        Subject: CN=E0D5A0D6FCA91E88631C6C134DD033E21892C1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:48:9b:22:f3:5b:56:d1:b0:cd:ed:93:4f:8b:
                    3f:2f:0d:60:d1:d7:b0:4c:dd:a3:aa:fd:06:b3:b8:
                    6d:f4:a7:64:93:e7:f3:ab:b7:a6:0b:85:6b:78:d2:
                    49:a9:cc:6a:ae:02:a9:fb:88:74:6d:ff:46:83:32:
                    98:e7:a2:5a:99:3b:3a:cb:e1:08:20:b6:00:4b:4a:
                    87:0a:34:be:d0:ed:ab:c6:08:85:68:ac:1c:54:9f:
                    c3:66:ee:66:7e:15:5a:2d:93:79:aa:81:f8:5a:f3:
                    2a:15:2b:56:8b:49:5f:bd:6e:ca:af:6d:aa:c4:e3:
                    8f:87:c5:27:dc:7e:42:d8:28:83:84:68:52:10:5a:
                    67:35:b2:be:09:40:6d:40:20:c1:84:0f:b9:20:ff:
                    68:03:1c:cc:77:01:a3:0e:71:ac:d2:8a:ed:90:aa:
                    e1:09:ea:9d:f7:52:bf:cd:d5:3b:64:e0:50:a0:74:
                    ba:c5:95:94:27:3f:e9:a2:46:14:c4:e2:61:a5:80:
                    66:4f:9b:4f:a7:7a:73:ce:8a:4b:44:26:e5:32:05:
                    c9:85:00:57:5c:67:3d:90:7e:5c:9f:7f:4e:c8:50:
                    63:7a:8f:be:31:7f:bb:af:45:a1:31:55:65:5a:fd:
                    d7:ae:b2:70:51:a4:68:5e:fc:18:d7:00:79:8b:9f:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D5:A0:D6:FC:A9:1E:88:63:1C:6C:13:4D:D0:33:E2:18:92:C1:C8
            X509v3 Authority Key Identifier:
                keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232382e302f32342d3234203d3e20313431383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1a:56:6f:70:47:fe:bf:71:dd:82:fd:82:f9:41:47:d6:b2:
         e3:9f:8b:ad:12:bc:9b:80:3e:0a:06:8f:5c:40:be:22:52:3c:
         53:6d:b3:45:da:69:2c:1d:2f:80:0f:34:2f:b8:b1:3b:e8:d2:
         9d:d6:93:3f:5e:be:df:26:14:40:9b:69:90:ea:59:1c:5e:d4:
         84:a8:8d:b4:7d:b7:d4:be:39:41:97:74:99:13:aa:f4:42:79:
         3f:7f:99:4d:44:a1:8f:d0:97:c2:2c:b6:f1:33:42:ad:df:16:
         60:c7:7b:b0:be:4a:91:62:af:2f:de:5e:65:f9:9f:14:f1:77:
         31:74:2a:ba:41:17:a8:2e:09:d7:38:0d:6f:76:34:55:06:8c:
         52:7e:2e:00:21:b2:a4:19:f3:35:3c:72:82:77:cf:a9:9a:a5:
         1e:68:8c:b7:87:30:56:a5:57:46:ab:85:8d:b2:69:60:f5:66:
         77:c9:8d:d8:67:93:9f:d3:45:c5:4e:55:62:4b:af:9e:b4:97:
         c3:bb:58:80:03:ae:24:f5:9f:a8:07:56:e8:fc:79:6e:44:ab:
         22:9f:76:79:99:51:eb:d5:71:c6:33:55:74:06:37:90:7b:d1:
         c9:ca:c6:5e:e1:b0:19:8a:72:71:71:4e:68:49:50:3f:3c:5e:
         a1:7b:3a:d2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHmhGRNia8TY8qzFcCbbJ31IkWC0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5
MzU0RTgyRDAeFw0yNjAxMjcwMjI1NTJaFw0yNzAxMjYwMjMwNTJaMDMxMTAvBgNV
BAMTKEUwRDVBMEQ2RkNBOTFFODg2MzFDNkMxMzRERDAzM0UyMTg5MkMxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SJsi81tW0bDN7ZNPiz8vDWDR
17BM3aOq/QazuG30p2ST5/Ort6YLhWt40kmpzGquAqn7iHRt/0aDMpjnolqZOzrL
4QggtgBLSocKNL7Q7avGCIVorBxUn8Nm7mZ+FVotk3mqgfha8yoVK1aLSV+9bsqv
barE44+HxSfcfkLYKIOEaFIQWmc1sr4JQG1AIMGED7kg/2gDHMx3AaMOcazSiu2Q
quEJ6p33Ur/N1Ttk4FCgdLrFlZQnP+miRhTE4mGlgGZPm0+nenPOiktEJuUyBcmF
AFdcZz2Qflyff07IUGN6j74xf7uvRaExVWVa/deusnBRpGhe/BjXAHmLn32DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4NWg1vypHohjHGwTTdAz4hiSwcgwHwYDVR0j
BBgwFoAUVKuTH1E/zE3MH7PWBWR0IZNU6C0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC81NEFCOTMxRjUx
M0ZDQzREQ0MxRkIzRDYwNTY0NzQyMTkzNTRFODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5MzU0
RTgyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05
YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAejHkMA0GCSqG
SIb3DQEBCwUAA4IBAQCBGlZvcEf+v3Hdgv2C+UFH1rLjn4utErybgD4KBo9cQL4i
UjxTbbNF2mksHS+ADzQvuLE76NKd1pM/Xr7fJhRAm2mQ6lkcXtSEqI20fbfUvjlB
l3SZE6r0Qnk/f5lNRKGP0JfCLLbxM0Kt3xZgx3uwvkqRYq8v3l5l+Z8U8XcxdCq6
QReoLgnXOA1vdjRVBoxSfi4AIbKkGfM1PHKCd8+pmqUeaIy3hzBWpVdGq4WNsmlg
9WZ3yY3YZ5Of00XFTlViS6+etJfDu1iAA64k9Z+oB1bo/HluRKsin3Z5mVHr1XHG
M1V0BjeQe9HJysZe4bAZinJxcU5oSVA/PF6hezrS
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:35 2026 by rpki-client