This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
File:                     3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          ILDuTAsK8lVD87kg3m/pYLNNkFpQ3NK/TkzPdZb+cXI=
Subject key identifier:   36:F3:6B:93:27:8E:15:46:00:43:BF:41:E9:C9:6A:08:12:9E:50:CB
Certificate issuer:       /CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
Certificate serial:       7528765C31CC1281BCA19256D5D0FA87305752F4
Authority key identifier: C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa
Signing time:             Sun 04 Jan 2026 07:00:02 +0000
ROA not before:           Sun 04 Jan 2026 06:55:02 +0000
ROA not after:            Sun 03 Jan 2027 07:00:02 +0000
asID:                     142375
IP address blocks:        203.145.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl
                          rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 00:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:28:76:5c:31:cc:12:81:bc:a1:92:56:d5:d0:fa:87:30:57:52:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F956B126884B5EFD8DDADCEB0E33E1B5306336
        Validity
            Not Before: Jan  4 06:55:02 2026 GMT
            Not After : Jan  3 07:00:02 2027 GMT
        Subject: CN=36F36B93278E15460043BF41E9C96A08129E50CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:82:5b:7e:83:fe:4e:36:41:af:99:99:ed:aa:
                    fd:72:69:1d:b9:74:12:a3:3b:4e:ac:26:4f:d7:3e:
                    0a:d3:fc:f1:d7:8b:01:2f:3c:1f:bf:58:f4:f5:07:
                    e2:0a:cf:a1:71:bb:f3:68:9b:b9:a3:75:23:02:60:
                    2b:cd:aa:54:c7:cc:4d:5a:c0:b8:00:b0:8a:14:5d:
                    46:2a:b3:2f:47:13:9e:92:98:72:64:95:34:01:ca:
                    1d:bc:43:58:1c:46:c7:84:46:7e:f0:de:92:f0:b9:
                    ee:64:7b:7a:10:9d:72:47:fd:b9:00:57:03:7d:1a:
                    11:02:db:d9:af:a0:a4:5c:43:f4:b2:e6:07:80:85:
                    be:f4:b5:37:b2:ce:a3:33:b0:90:b5:02:06:5e:bd:
                    22:fc:dd:6d:f2:a5:28:26:22:09:68:c4:0a:df:9d:
                    ac:67:89:19:45:5b:d3:79:96:d5:c8:06:61:5c:db:
                    09:d1:2c:80:85:bb:a9:3d:3b:5e:d7:5f:db:37:fc:
                    29:8a:80:ba:de:92:ec:99:04:54:fa:61:2d:ef:70:
                    4b:db:11:62:f0:0e:44:0b:2e:c9:fd:6d:92:0a:01:
                    e5:ea:10:6b:02:d8:61:d4:8e:cd:7d:9a:c8:ad:f6:
                    43:bb:74:9b:20:04:17:cb:51:1b:3e:00:17:8d:cf:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F3:6B:93:27:8E:15:46:00:43:BF:41:E9:C9:6A:08:12:9E:50:CB
            X509v3 Authority Key Identifier:
                keyid:C2:F9:56:B1:26:88:4B:5E:FD:8D:DA:DC:EB:0E:33:E1:B5:30:63:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2F956B126884B5EFD8DDADCEB0E33E1B5306336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36aa3beb-5761-4c34-88d3-015ccc64002f/0/3230332e3134352e35392e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:33:cb:4a:f0:bc:65:04:fd:fb:42:00:b1:ab:b1:38:02:d5:
         a2:aa:a5:2d:9e:f4:2e:87:fd:6e:8f:20:35:1c:34:6d:d9:58:
         32:aa:73:ec:1b:2c:65:fd:14:2b:e9:87:e3:4b:05:41:f3:73:
         52:71:c4:9f:0a:e9:2b:fd:8a:1c:d6:1e:67:ef:bb:9f:10:44:
         d0:09:b3:0d:3b:b0:77:b0:64:43:a0:1d:6f:36:e6:0b:0d:5b:
         82:84:bd:f9:d4:fc:6b:59:65:b5:12:0e:20:8d:af:ac:69:b0:
         29:c5:e5:6f:e0:3a:64:d7:84:2f:6e:44:0e:1b:9b:1a:77:78:
         82:67:2b:95:39:a3:7a:7d:31:c1:6b:60:32:2f:8c:e0:27:3d:
         01:35:f3:67:8b:15:c2:c0:c4:64:64:c2:15:e9:03:3c:c9:58:
         bf:cc:c0:24:5e:3d:8d:d9:06:bc:7d:c1:6b:87:dc:ee:ea:d4:
         b7:9f:26:3c:72:2c:64:ae:28:b2:a6:2f:ad:88:ad:0a:c5:27:
         0c:fc:bf:60:21:2d:09:21:5e:ae:8f:75:16:49:9e:8b:be:fb:
         dd:f2:4a:10:9f:23:82:cb:18:0f:eb:69:bd:4a:7a:66:86:68:
         19:dd:57:78:6f:8c:75:d4:6b:d7:31:eb:bf:f0:e2:aa:fc:6b:
         fc:f5:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:56 2026 by rpki-client