This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3230322e342e3138362e302f32342d3234203d3e203633353130.roa
File:                     3230322e342e3138362e302f32342d3234203d3e203633353130.roa (raw, json)
Hash identifier:          IUKB7IZZcAxdadF7KgMG0SMyWM3kl7UBq8kwg4xktxk=
Subject key identifier:   FF:B9:0A:9B:D3:BC:9B:83:8E:A9:BD:C0:1B:30:6F:48:F0:26:80:9F
Certificate issuer:       /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial:       45E2585A3A46795425F89957F8EEC389091CB04C
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3230322e342e3138362e302f32342d3234203d3e203633353130.roa
Signing time:             Thu 18 Dec 2025 04:03:59 +0000
ROA not before:           Thu 18 Dec 2025 03:58:59 +0000
ROA not after:            Thu 17 Dec 2026 04:03:59 +0000
asID:                     63510
IP address blocks:        202.4.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
                          rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 09:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e2:58:5a:3a:46:79:54:25:f8:99:57:f8:ee:c3:89:09:1c:b0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
        Validity
            Not Before: Dec 18 03:58:59 2025 GMT
            Not After : Dec 17 04:03:59 2026 GMT
        Subject: CN=FFB90A9BD3BC9B838EA9BDC01B306F48F026809F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:63:07:db:5a:e5:65:e7:a5:c6:a2:5d:2f:2b:
                    5e:3d:6e:25:0f:58:c0:e9:06:9f:98:78:d7:a7:16:
                    ad:aa:9e:06:2e:68:6e:59:c3:15:31:cf:e6:3c:3c:
                    38:1e:a1:9d:27:75:3c:43:3d:0e:4c:18:16:f6:24:
                    3a:5f:c8:69:86:73:cd:d1:0d:ec:73:c2:31:64:46:
                    35:ee:82:d8:f4:3c:ce:82:ae:1a:fa:df:41:6f:e4:
                    9b:61:a2:3f:2a:0a:2f:96:c3:20:88:fc:8d:6c:bf:
                    a1:12:08:4e:2d:58:07:4a:fd:72:b3:c8:3b:b3:3c:
                    f8:4e:fc:86:af:c7:e5:2d:09:79:ed:f3:95:84:bf:
                    a4:6f:a4:f4:48:4a:92:d4:c0:1d:cc:82:03:26:e5:
                    65:ee:d8:19:85:d7:fd:74:38:72:fb:f7:34:5c:81:
                    f0:c4:94:b1:46:26:70:33:2c:6e:c7:0e:2a:82:89:
                    fe:c9:1d:ba:86:ee:6d:07:03:ed:6b:fb:8f:16:ff:
                    a5:19:7c:eb:3f:33:8e:0c:ea:60:bf:66:9e:69:be:
                    90:20:be:52:2c:78:4a:ca:a6:51:6d:3a:a7:f1:ab:
                    09:5a:a5:a9:31:c8:57:0c:3f:a2:6b:77:a2:2c:bf:
                    ab:70:9e:fd:a6:36:c6:96:8f:90:61:70:e1:d2:6a:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B9:0A:9B:D3:BC:9B:83:8E:A9:BD:C0:1B:30:6F:48:F0:26:80:9F
            X509v3 Authority Key Identifier:
                keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3230322e342e3138362e302f32342d3234203d3e203633353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.4.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:12:65:1e:0e:b5:1d:78:08:f3:67:2c:34:42:cd:b5:07:b3:
         9f:b9:2c:71:b6:47:b4:66:cb:8e:09:9d:41:83:2a:85:ab:97:
         f9:0e:f7:68:1c:72:1b:27:02:6c:12:62:bb:ea:33:fd:8d:af:
         36:57:ff:2c:ab:95:8f:d8:db:21:ed:e8:e6:ca:54:83:df:b9:
         0b:9c:38:aa:f2:84:2b:91:fd:a6:07:59:6f:f6:86:be:c0:17:
         4b:8e:94:7d:38:28:72:94:97:1e:b8:2c:5a:6c:b2:48:d3:e0:
         b2:c6:76:fe:1c:59:07:4e:3f:59:0d:40:e2:c7:d6:aa:1b:4a:
         c6:1a:19:06:21:7e:ec:f3:08:3c:5d:1e:b3:f7:65:8d:6b:87:
         10:95:9e:53:fe:bd:7c:7c:cb:a5:6a:ba:d2:62:d6:23:12:75:
         88:3e:ac:12:4c:42:cb:2d:fd:dc:30:7d:1d:fd:80:85:cf:93:
         6f:60:51:71:f3:5b:a9:84:1e:29:90:b2:87:37:a7:47:4d:fa:
         7f:bc:31:14:56:d1:37:ed:ba:ac:8a:78:61:32:08:94:cc:c5:
         86:91:d2:56:2e:07:ec:19:3d:87:1f:19:a4:fa:fd:7a:fa:55:
         dc:fd:11:a2:b0:0e:96:3d:2f:53:c2:d8:44:57:a2:bd:b6:28:
         ff:19:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:39:53 2025 by rpki-client