This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa
File:                     3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (raw, json)
Hash identifier:          pWSLLsfuqLMss5goT0TCm2Xrlt+/JZKU0FLP/cfm62g=
Subject key identifier:   8B:DE:06:05:CB:1C:1B:42:81:E3:F8:0B:53:BA:90:33:BF:64:F0:17
Certificate issuer:       /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
Certificate serial:       040884B603D9E98805B5E8321BF75DE417F63D77
Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa
Signing time:             Thu 29 Jan 2026 15:00:00 +0000
ROA not before:           Thu 29 Jan 2026 14:55:00 +0000
ROA not after:            Thu 28 Jan 2027 15:00:00 +0000
asID:                     18056
IP address blocks:        202.46.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl
                          rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 10:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:08:84:b6:03:d9:e9:88:05:b5:e8:32:1b:f7:5d:e4:17:f6:3d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB
        Validity
            Not Before: Jan 29 14:55:00 2026 GMT
            Not After : Jan 28 15:00:00 2027 GMT
        Subject: CN=8BDE0605CB1C1B4281E3F80B53BA9033BF64F017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:61:88:0c:10:3c:a6:98:7a:d3:74:13:35:
                    dd:c2:47:51:0b:9a:b3:79:68:e8:d2:1e:67:31:24:
                    14:30:01:e2:31:82:a7:07:74:e7:a1:ff:42:63:9a:
                    66:d5:17:2a:3b:ac:a4:d1:9e:69:74:bc:f2:61:40:
                    e0:89:ea:a2:bd:cb:5e:2e:de:c7:5d:72:d7:08:b0:
                    ef:49:03:ff:c3:9a:b6:03:4c:b5:01:18:29:44:1c:
                    ff:4b:d8:9c:5f:d7:4b:41:17:67:a2:75:b6:87:3b:
                    a3:1c:0d:73:b6:aa:ff:dc:e2:9b:c3:19:97:8f:ba:
                    3c:a9:47:34:ae:78:06:56:67:ec:fc:00:63:f3:6c:
                    b0:05:1f:c5:59:47:d2:75:5e:04:99:17:a3:58:b2:
                    c7:b9:50:9c:cb:8c:48:2b:96:43:0b:4d:a6:15:43:
                    37:c3:a0:1a:e6:b2:a9:76:7f:a9:15:d9:30:4f:f3:
                    59:11:fc:a7:85:31:e7:d3:fb:ff:4c:66:b6:e2:a4:
                    11:5a:29:90:92:2b:41:a0:07:d6:01:8d:1a:50:c2:
                    37:e3:c2:bf:db:ab:de:c8:6d:59:7d:0a:30:e9:29:
                    03:6f:87:83:fb:8b:99:27:7b:ff:8e:ff:12:dc:83:
                    0c:0c:95:0a:a3:03:70:3a:65:38:16:0a:40:22:1f:
                    17:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DE:06:05:CB:1C:1B:42:81:E3:F8:0B:53:BA:90:33:BF:64:F0:17
            X509v3 Authority Key Identifier:
                keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3230322e34362e3134342e302f32322d3234203d3e203138303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.46.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:e4:6e:20:06:58:ea:36:e5:92:b5:f0:6a:79:40:be:ed:
         2d:d9:09:2c:57:42:a2:03:59:be:18:72:0a:a3:16:77:e0:8b:
         16:f3:fd:5d:6d:47:b3:63:dd:40:d7:e6:d4:a5:54:a3:c4:c4:
         0c:94:a6:ae:64:b7:d8:37:18:cd:7f:8f:03:89:a0:40:05:77:
         9c:ec:f0:b0:f9:60:0d:81:54:99:1c:b4:3f:eb:05:46:94:74:
         4b:11:04:5c:9e:f2:43:70:34:51:25:de:0a:6e:97:b2:54:89:
         b3:ce:b4:a4:6b:cc:fe:ee:11:ff:4d:05:47:b0:15:62:83:0f:
         36:18:23:a3:1e:1c:02:f7:2d:c4:8f:36:af:68:29:7c:03:20:
         bc:19:e9:12:2b:29:16:7a:a4:7c:d0:a3:ea:a2:43:4b:db:f9:
         19:e2:fa:5f:65:dd:27:99:41:a1:4c:65:4a:53:5f:df:c4:56:
         fb:35:f4:1b:3b:35:c2:60:70:a8:7a:1d:b2:14:a2:6c:ce:23:
         04:49:19:3c:5e:8b:9b:28:2a:a2:09:3a:df:a6:3d:6a:fb:12:
         09:db:5c:85:48:46:4a:5e:b6:d5:55:41:e3:ed:c3:6e:22:22:
         54:73:83:f5:10:88:43:95:43:4d:44:3f:40:4b:d3:76:dd:2b:
         b5:24:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:55 2026 by rpki-client