This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
File:                     323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa (raw, json)
Hash identifier:          3LFDdqYh4K2fY0TB1x/Z0Y/tnScj8iUj1KZp5+O19OA=
Subject key identifier:   C3:0E:2E:A2:F8:13:31:6E:3D:B7:EB:14:1E:C6:A4:55:0E:C6:32:D7
Certificate issuer:       /CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
Certificate serial:       6202008B30E3917CB7F77B60B264F2F55E42BEC5
Authority key identifier: 7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa
Signing time:             Fri 07 Nov 2025 14:00:02 +0000
ROA not before:           Fri 07 Nov 2025 13:55:02 +0000
ROA not after:            Fri 06 Nov 2026 14:00:02 +0000
asID:                     137316
IP address blocks:        2402:7ac0:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl
                          rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:02:00:8b:30:e3:91:7c:b7:f7:7b:60:b2:64:f2:f5:5e:42:be:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B35834A4704C7ED85D62212FC62C46FA5A0666D
        Validity
            Not Before: Nov  7 13:55:02 2025 GMT
            Not After : Nov  6 14:00:02 2026 GMT
        Subject: CN=C30E2EA2F813316E3DB7EB141EC6A4550EC632D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:2f:fd:ad:79:e1:44:f0:a3:bb:93:51:08:
                    db:fc:52:47:62:6b:d6:65:ad:19:00:7b:99:db:2c:
                    d8:34:98:06:49:08:cf:00:2d:7a:f9:be:32:49:e3:
                    ed:43:03:1a:e8:22:45:66:b5:1a:30:7d:1c:57:93:
                    8e:c8:0f:5e:26:f9:4b:55:f1:cb:06:4a:b7:bc:8b:
                    3c:dd:34:59:0f:c2:a0:82:77:4c:12:71:17:5c:24:
                    a3:4e:62:19:38:ee:ff:38:37:eb:e3:66:47:5f:07:
                    cd:00:a6:19:a8:5c:1a:4e:c1:99:e9:e5:b0:65:47:
                    41:72:34:d4:65:37:3e:a5:6b:62:5a:1b:51:6a:81:
                    d2:69:db:b7:e3:d8:ec:7e:05:93:5b:fe:61:4d:9e:
                    89:33:81:1c:f2:6b:0f:95:1e:bd:34:3c:ec:a1:ff:
                    84:62:1c:ed:2b:99:f9:fc:ab:11:3b:7b:a1:76:3e:
                    c4:a0:8d:33:45:44:11:95:e2:ad:1c:2b:eb:ce:23:
                    f0:33:12:46:a6:37:7b:11:b9:13:4b:02:eb:3e:b2:
                    37:20:97:e0:e9:2e:e4:47:d6:b8:eb:8a:b4:0e:a7:
                    3d:89:e7:0c:c9:bc:99:02:c0:7c:7a:c8:d2:37:50:
                    e6:34:fc:48:49:09:78:90:45:37:2a:60:7d:3d:97:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0E:2E:A2:F8:13:31:6E:3D:B7:EB:14:1E:C6:A4:55:0E:C6:32:D7
            X509v3 Authority Key Identifier:
                keyid:7B:35:83:4A:47:04:C7:ED:85:D6:22:12:FC:62:C4:6F:A5:A0:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/7B35834A4704C7ED85D62212FC62C46FA5A0666D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B35834A4704C7ED85D62212FC62C46FA5A0666D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/323430323a376163303a633030303a3a2f33362d3336203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7ac0:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:07:eb:27:0f:f7:7a:83:9a:df:1f:61:b6:09:85:54:3e:e8:
         e1:21:f8:ce:40:1d:58:08:59:6c:c1:79:d7:cf:11:2f:47:53:
         e2:92:0d:bc:c6:c7:92:23:a9:71:e6:f5:d5:91:8d:c4:48:81:
         6c:99:7a:ec:f8:2a:7f:b1:e0:f6:42:44:33:f6:7b:2c:39:10:
         6c:c2:35:72:9a:50:a6:de:69:01:77:41:96:6d:7b:f9:29:ca:
         ff:3b:1d:12:48:54:c3:2b:0c:0f:cf:b6:62:67:4d:f0:5c:4d:
         99:17:5a:75:13:a7:ae:91:64:0d:8f:c7:53:e4:07:76:8c:87:
         ce:bc:3f:b3:67:f5:b0:4a:b9:e9:d7:87:3f:82:e7:8b:ad:fe:
         e7:67:53:a6:3f:f4:90:e4:d0:c9:b3:66:ee:4c:ac:16:4e:5e:
         88:54:bb:b7:ab:df:3b:05:59:3e:55:09:08:62:c8:e6:f3:63:
         19:98:a3:c3:85:b7:87:08:3f:3f:14:c2:95:e3:52:97:3b:89:
         c8:99:1f:dc:5e:ed:fe:0f:eb:a2:d2:f8:72:e7:81:dd:be:42:
         5d:d0:d4:45:f4:84:72:e9:bb:97:65:84:4a:6a:ca:a2:73:55:
         c4:fa:f1:1d:2c:6f:e8:00:50:f0:6f:d6:26:26:2b:fb:ec:6d:
         b8:9a:2c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:08:58 2025 by rpki-client