This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          qD8s1j6c6E/53+wbhAG6QWSb242H/IPBLMzYCAimk5Q=
Subject key identifier:   A4:46:33:07:31:7B:AE:C0:7F:70:3D:47:DD:E5:00:24:1F:B4:B5:83
Certificate issuer:       /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial:       7593DB26FED70851E09E612CF45D8A9FD2322F8D
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa
Signing time:             Tue 27 Jan 2026 05:46:49 +0000
ROA not before:           Tue 27 Jan 2026 05:41:49 +0000
ROA not after:            Tue 26 Jan 2027 05:46:49 +0000
asID:                     38522
IP address blocks:        122.49.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
                          rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:db:26:fe:d7:08:51:e0:9e:61:2c:f4:5d:8a:9f:d2:32:2f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
        Validity
            Not Before: Jan 27 05:41:49 2026 GMT
            Not After : Jan 26 05:46:49 2027 GMT
        Subject: CN=A4463307317BAEC07F703D47DDE500241FB4B583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:06:dc:5b:90:7e:1e:fa:3a:91:d8:3e:1d:92:
                    43:e7:33:f8:56:1f:e0:d6:97:f4:c3:f8:9b:1d:43:
                    b0:b0:51:d4:9f:4b:cf:b9:0a:96:b0:57:69:74:81:
                    87:a2:22:17:a0:a1:93:8b:64:f9:98:a1:f9:8e:10:
                    62:15:17:87:fe:1e:d1:69:42:1c:83:bc:74:15:45:
                    4c:4f:4b:39:4c:3a:38:d7:56:15:ea:f9:f1:a5:56:
                    0c:af:42:45:eb:ed:38:26:73:32:e3:b2:8d:07:4f:
                    48:06:67:4e:32:f1:f3:ec:4e:8a:2b:16:35:3c:1a:
                    ab:f0:5a:9f:e0:0b:26:cc:54:92:7e:e4:99:3e:fa:
                    a3:3b:63:4c:c1:e6:a3:b5:df:93:32:3c:16:0a:32:
                    ca:65:ea:57:9c:a1:40:42:a6:84:3d:ba:51:ef:ee:
                    87:9a:ea:31:5f:44:a2:5f:80:65:8d:f1:17:ce:2c:
                    61:77:48:df:2c:eb:5d:15:9d:6e:77:84:4d:ab:57:
                    3f:09:f7:cb:56:63:d2:e3:a8:c8:a8:f7:44:fc:8f:
                    e3:dd:19:c4:b4:58:5b:ae:95:22:c1:a0:4a:88:1c:
                    d9:1b:64:c9:8d:17:45:db:ed:3c:c8:1d:61:bd:39:
                    dc:b1:9a:57:ef:e5:86:e2:e6:62:d9:2d:37:60:73:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:33:07:31:7B:AE:C0:7F:70:3D:47:DD:E5:00:24:1F:B4:B5:83
            X509v3 Authority Key Identifier:
                keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3233312e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:80:9d:59:95:b6:77:fe:6c:38:77:cc:f2:20:dc:cd:e3:41:
         5f:4b:4d:4d:30:ca:c5:67:54:69:19:ba:f6:7a:fd:4c:64:bd:
         61:92:bf:69:ca:27:0f:68:ee:27:be:3a:d2:7c:55:2e:47:f2:
         79:20:b1:f4:58:05:c9:bd:10:f8:41:3d:eb:18:61:b4:53:73:
         ba:cb:23:8a:bf:ce:55:f9:34:62:4a:31:c7:b6:b6:0b:06:5f:
         d4:b2:00:16:e0:5b:b3:53:96:13:77:f7:90:6d:f5:d1:4e:a0:
         cb:b2:87:2a:05:ee:b9:41:cb:ee:c9:a4:67:06:99:31:0a:11:
         6c:ad:e9:38:bd:c9:28:29:a8:73:a1:78:35:ad:41:ce:1c:95:
         a3:50:70:ea:9e:92:c6:bf:d8:0c:72:94:20:3e:af:11:c4:4d:
         54:43:d6:c2:b4:49:56:ff:14:4e:5a:88:48:01:a4:1d:94:ce:
         b9:63:f3:66:e7:7b:82:56:fa:7f:88:b5:d3:ac:a6:80:78:61:
         44:be:11:3d:b1:4f:53:b4:71:9e:d3:b9:50:c6:35:98:10:4f:
         26:4d:10:44:05:54:88:8c:ed:31:c3:68:1d:28:40:64:70:97:
         f8:29:ac:20:26:48:7d:c1:19:4b:25:34:2b:ad:6d:bb:4c:1c:
         e1:d9:c7:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdZPbJv7XCFHgnmEs9F2Kn9IyL40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5
MzU0RTgyRDAeFw0yNjAxMjcwNTQxNDlaFw0yNzAxMjYwNTQ2NDlaMDMxMTAvBgNV
BAMTKEE0NDYzMzA3MzE3QkFFQzA3RjcwM0Q0N0RERTUwMDI0MUZCNEI1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBtxbkH4e+jqR2D4dkkPnM/hW
H+DWl/TD+JsdQ7CwUdSfS8+5CpawV2l0gYeiIhegoZOLZPmYofmOEGIVF4f+HtFp
QhyDvHQVRUxPSzlMOjjXVhXq+fGlVgyvQkXr7TgmczLjso0HT0gGZ04y8fPsToor
FjU8GqvwWp/gCybMVJJ+5Jk++qM7Y0zB5qO135MyPBYKMspl6lecoUBCpoQ9ulHv
7oea6jFfRKJfgGWN8RfOLGF3SN8s610VnW53hE2rVz8J98tWY9LjqMio90T8j+Pd
GcS0WFuulSLBoEqIHNkbZMmNF0Xb7TzIHWG9Odyxmlfv5Ybi5mLZLTdgc1KbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpEYzBzF7rsB/cD1H3eUAJB+0tYMwHwYDVR0j
BBgwFoAUVKuTH1E/zE3MH7PWBWR0IZNU6C0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZTQzNDk4MS0zNmJiLTQ1MzktOWI1NS0wN2I2NzIwOGZkMDYvMC81NEFCOTMxRjUx
M0ZDQzREQ0MxRkIzRDYwNTY0NzQyMTkzNTRFODJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTRBQjkzMUY1MTNGQ0M0RENDMUZCM0Q2MDU2NDc0MjE5MzU0
RTgyRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlNDM0OTgxLTM2YmItNDUzOS05
YjU1LTA3YjY3MjA4ZmQwNi8wLzMxMzIzMjJlMzQzOTJlMzIzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHox5zANBgkqhkiG
9w0BAQsFAAOCAQEAA4CdWZW2d/5sOHfM8iDczeNBX0tNTTDKxWdUaRm69nr9TGS9
YZK/aconD2juJ7460nxVLkfyeSCx9FgFyb0Q+EE96xhhtFNzussjir/OVfk0Ykox
x7a2CwZf1LIAFuBbs1OWE3f3kG310U6gy7KHKgXuuUHL7smkZwaZMQoRbK3pOL3J
KCmoc6F4Na1BzhyVo1Bw6p6Sxr/YDHKUID6vEcRNVEPWwrRJVv8UTlqISAGkHZTO
uWPzZud7glb6f4i106ymgHhhRL4RPbFPU7RxntO5UMY1mBBPJk0QRAVUiIztMcNo
HShAZHCX+CmsICZIfcEZSyU0K61tu0wc4dnHtQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:59:37 2026 by rpki-client