This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          8PV6FmxJPz6HATGqik7wB/3x5mPnU8C7d717vBIUUsQ=
Subject key identifier:   98:10:E9:AB:2C:C1:FF:C7:E1:7D:DD:4C:8E:4D:14:6D:67:65:B5:96
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       1148BE50B8806F45028FAF8DCD4056BBCC5095BA
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:01 +0000
ROA not before:           Fri 07 Nov 2025 13:55:01 +0000
ROA not after:            Fri 06 Nov 2026 14:00:01 +0000
asID:                     137316
IP address blocks:        2402:7ac0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:48:be:50:b8:80:6f:45:02:8f:af:8d:cd:40:56:bb:cc:50:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:01 2025 GMT
            Not After : Nov  6 14:00:01 2026 GMT
        Subject: CN=9810E9AB2CC1FFC7E17DDD4C8E4D146D6765B596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:4b:ad:d9:f9:1d:60:02:65:8b:2c:c0:cf:
                    42:80:46:61:e3:07:fa:14:c1:c6:32:02:4a:ae:24:
                    fd:f7:94:ec:00:f2:74:d1:73:9f:72:64:01:89:71:
                    f5:31:36:05:09:e5:b8:b9:fb:fe:45:36:92:30:b9:
                    a7:db:8d:c1:ac:12:91:7f:e2:e2:09:94:0d:44:b8:
                    3f:64:93:d0:cb:fb:97:9f:e4:cf:df:08:88:87:52:
                    2c:79:1b:8f:94:9a:83:bd:82:ff:7c:00:0f:30:cd:
                    fb:83:36:32:46:e9:7d:7a:ae:3f:c3:67:ed:8e:c8:
                    ad:8f:83:38:c9:4f:e6:b0:6c:1f:6c:4e:d9:3b:82:
                    18:00:94:42:32:5c:11:ce:b4:39:7d:13:1e:6b:72:
                    9c:61:35:73:82:dd:c2:5b:79:56:c1:3e:24:99:07:
                    13:e4:f1:a3:bf:1f:f2:01:d4:1f:da:b1:3e:43:01:
                    35:24:ec:5d:ca:ee:50:90:b8:1b:4c:f3:40:c7:a4:
                    a8:96:85:7d:7b:b6:bb:07:0d:6a:31:0c:00:1d:ff:
                    37:81:99:b3:6f:ca:e5:fc:62:3b:b7:6d:63:6c:22:
                    cd:7a:b4:44:e1:50:63:3e:21:cd:3a:2c:f5:9e:20:
                    7e:5e:30:be:3b:7a:a9:26:4d:ea:14:e3:12:4c:71:
                    45:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:10:E9:AB:2C:C1:FF:C7:E1:7D:DD:4C:8E:4D:14:6D:67:65:B5:96
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a313030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:83:5f:78:c7:3f:33:94:a4:00:27:97:9e:c7:b6:89:f0:
         58:6a:b2:aa:02:62:59:7e:0c:36:a5:df:be:d6:05:cf:66:31:
         c7:e8:4b:2b:d8:68:5e:a7:83:a9:74:01:2a:1e:f2:3b:af:41:
         c1:a7:b6:4d:85:79:82:5c:d6:a1:3e:77:06:9a:f4:80:48:db:
         16:54:56:d6:c8:a1:b7:4a:b5:b0:fe:73:4e:02:7f:94:6c:7d:
         3d:41:64:aa:ca:db:67:33:17:7e:d5:a0:42:a5:65:48:53:b3:
         ce:24:cf:4e:b6:66:f4:cd:1d:19:85:93:78:75:d9:f1:b6:80:
         a1:60:e7:86:da:5f:91:a4:6b:d9:59:eb:0b:df:00:80:b2:df:
         b2:bb:1f:50:d1:5c:6f:b8:9f:ee:47:08:45:49:89:54:9c:cf:
         b2:a2:51:03:48:e1:48:b6:b3:b3:5a:cc:92:53:f1:bd:62:25:
         f1:48:94:8b:8b:51:6a:0f:3b:ac:6c:e9:07:b9:b2:90:3e:e2:
         f7:2d:f6:ab:e9:3d:fd:5d:1b:be:13:21:93:dc:1f:7c:f9:99:
         cd:af:c1:ff:58:b6:2a:b4:71:46:cc:43:43:4a:0d:3f:3e:4d:
         04:f5:61:63:2b:92:18:64:b1:f9:7f:15:ff:cd:e3:1d:af:47:
         7d:4f:ca:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:57 2025 by rpki-client