This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          8fcnUOhK8Zi0JtTER7FXxfKsNfQc9ELUobCoUnZQBWo=
Subject key identifier:   F0:1A:66:23:6A:A4:87:18:38:A0:CC:C6:F9:43:4A:DF:48:8C:D7:57
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       132FBB15FB34BC7D249668E7F5EDCDB60E66CF1A
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:01 +0000
ROA not before:           Fri 07 Nov 2025 13:55:01 +0000
ROA not after:            Fri 06 Nov 2026 14:00:01 +0000
asID:                     137316
IP address blocks:        2402:7ac0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:bb:15:fb:34:bc:7d:24:96:68:e7:f5:ed:cd:b6:0e:66:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:01 2025 GMT
            Not After : Nov  6 14:00:01 2026 GMT
        Subject: CN=F01A66236AA4871838A0CCC6F9434ADF488CD757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:37:84:6d:47:35:7f:4c:b3:38:90:2a:6c:
                    21:ea:8e:b5:f0:a6:9c:65:9d:5a:e8:b5:f8:9b:99:
                    07:15:83:93:dc:d2:50:50:92:7a:72:49:d6:b8:a4:
                    35:93:79:c0:d2:0d:41:87:6f:11:65:66:a0:51:8d:
                    c2:db:e9:96:34:c0:f4:13:01:45:a3:f5:a2:ae:7f:
                    a8:eb:d1:d5:68:1b:1d:0e:fd:7a:af:b2:ea:cc:8d:
                    cb:14:d1:e2:1b:09:b9:53:2b:50:55:83:b6:d1:11:
                    a5:80:c7:61:22:ff:37:35:ce:0f:1a:80:84:a3:e8:
                    6e:b3:28:7d:37:86:56:b4:6d:ae:a7:36:80:97:76:
                    d5:54:4a:71:76:c5:4c:1c:83:cf:74:34:5a:a9:4b:
                    d7:96:9a:2d:e2:92:ac:b2:aa:f2:a1:aa:e4:dd:31:
                    f2:61:dc:56:02:54:df:41:d3:cd:ef:be:f4:fb:9b:
                    55:a4:57:47:3c:5e:b0:9c:1e:e5:82:42:a8:2b:d8:
                    c0:25:3b:ee:4a:01:93:88:0a:be:1a:02:98:15:13:
                    b1:3f:63:dc:b7:81:2f:32:d8:d7:ce:60:9b:f4:f4:
                    1e:8d:39:1d:5e:96:37:34:b4:c2:7d:1c:1a:a9:72:
                    bb:81:dc:c0:8d:e0:39:65:b3:56:18:19:ee:5a:b7:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:66:23:6A:A4:87:18:38:A0:CC:C6:F9:43:4A:DF:48:8C:D7:57
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a343030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:28:5f:85:60:43:74:88:39:03:95:2a:17:45:dc:3e:3d:7e:
         dd:5a:5e:93:de:a4:28:63:92:d1:b1:f7:c4:58:34:cf:02:ce:
         d1:98:0e:b3:df:29:55:74:b2:43:66:c5:31:b9:f1:db:2a:0b:
         bd:f2:dc:a3:14:9e:2b:28:05:d0:16:2f:ac:71:1a:94:ed:76:
         34:34:fe:be:91:ba:68:a3:11:60:c2:09:38:25:b8:b5:ed:de:
         a9:4c:f0:98:6f:d9:08:79:11:05:c1:12:7a:86:1f:98:ad:9d:
         36:f9:8b:22:09:16:43:e7:95:f5:fb:fd:b8:b8:ff:34:ab:b1:
         34:77:c9:32:e2:d2:d7:90:30:2c:2c:e1:1a:76:b1:46:c5:6c:
         7e:0b:3f:02:41:d0:d5:44:00:77:aa:34:a1:18:11:2a:cf:cb:
         47:c8:5d:a1:d1:c8:56:b8:e6:e8:64:02:d5:6b:c1:f9:c7:b4:
         7a:45:b0:27:55:84:e0:9d:26:20:7f:69:66:3c:06:35:23:24:
         54:4e:37:4e:b8:ac:09:3c:05:c0:79:bc:46:b5:75:ff:66:22:
         fa:43:f4:93:b5:fd:0f:5c:82:88:bc:90:74:ee:46:59:10:9e:
         38:8d:d3:a4:f0:76:ac:21:2c:0b:66:a0:6b:11:7c:cf:99:f7:
         00:1c:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:57 2025 by rpki-client