This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa
File:                     3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa (raw, json)
Hash identifier:          hVDdsRw37YOoglqOJwZyDY8apTHRaTWXa81vwH+XLtQ=
Subject key identifier:   BD:86:2D:8B:91:5C:E6:B2:EE:37:CB:5B:99:80:05:C2:FC:50:AE:19
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       56B3F52AD536D7CBBDC5D284974CE1BE4CD87172
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa
Signing time:             Tue 20 Jan 2026 03:00:02 +0000
ROA not before:           Tue 20 Jan 2026 02:55:02 +0000
ROA not after:            Tue 19 Jan 2027 03:00:02 +0000
asID:                     9341
IP address blocks:        124.158.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 14:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b3:f5:2a:d5:36:d7:cb:bd:c5:d2:84:97:4c:e1:be:4c:d8:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jan 20 02:55:02 2026 GMT
            Not After : Jan 19 03:00:02 2027 GMT
        Subject: CN=BD862D8B915CE6B2EE37CB5B998005C2FC50AE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f9:a5:d3:00:4a:34:bc:ce:d6:6e:3f:36:b7:
                    3f:26:52:b4:b1:cc:cc:fd:8e:f9:cd:7d:66:25:57:
                    35:53:1a:99:28:63:3e:42:ef:58:81:a1:aa:de:11:
                    63:d2:1c:df:ef:93:7d:80:00:86:c7:a3:5a:1c:86:
                    bd:c0:93:22:0c:8f:34:9e:f0:89:0a:e5:36:54:6a:
                    76:ac:dd:ac:96:01:8a:b9:a6:fa:d5:82:0c:bb:3b:
                    96:ca:5b:cd:35:48:4e:98:24:84:e2:4c:e0:40:41:
                    16:8a:a8:27:0e:bb:f6:7e:ac:f4:30:c7:bc:e2:6c:
                    60:42:07:78:31:09:0d:2a:9b:52:0f:de:dc:ca:7b:
                    4a:53:78:d2:11:43:e4:de:67:d8:35:14:fd:6b:ad:
                    b1:47:76:3a:3a:fe:eb:48:f8:aa:23:3e:d0:b6:4c:
                    12:67:c9:8f:2e:52:65:61:88:8d:39:2e:e8:62:5c:
                    b2:c5:0b:12:99:39:7b:1b:3b:de:ac:01:1e:30:fa:
                    29:a3:8b:2c:0e:a0:3e:47:8c:19:18:fa:52:fe:30:
                    42:13:36:25:03:1c:b0:5f:2a:83:89:f6:40:ba:03:
                    63:a1:97:cc:d8:48:30:a3:d6:e0:db:df:0f:93:04:
                    3d:b8:0f:79:5a:6b:74:f4:0d:a2:8d:5a:83:ae:bd:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:86:2D:8B:91:5C:E6:B2:EE:37:CB:5B:99:80:05:C2:FC:50:AE:19
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3132342e3135382e3136302e302f32302d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.158.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:e9:b8:50:f7:db:4e:78:73:b4:de:23:b1:40:35:25:78:
         f8:2f:d1:b5:56:7b:54:62:f8:fb:27:ec:87:b5:d2:47:41:31:
         72:36:97:f0:da:c5:0d:ec:c4:22:6b:fb:ef:68:9b:b9:e3:2a:
         ba:26:c0:83:7f:4b:a6:34:3c:9d:b2:af:d7:b6:4c:d3:5d:0f:
         d5:ae:21:f5:ae:98:cd:c4:c6:2c:7a:d1:21:f1:fe:6c:5b:82:
         2a:ad:33:d5:d6:d6:3e:4a:2c:e7:00:da:6c:8a:78:16:f6:e2:
         7c:eb:98:27:89:a7:69:24:a5:64:67:07:b2:eb:b9:b9:6e:39:
         2b:a6:cf:12:e0:3f:f8:57:da:dc:8f:4e:9d:32:a4:c8:a4:0c:
         35:09:e6:fc:1b:9a:4e:98:07:42:f1:e2:10:5c:bc:a4:9c:68:
         41:0a:b5:dd:f4:72:61:85:36:31:0d:c2:32:d4:89:70:93:3a:
         83:cd:f6:ab:61:2c:b6:2b:15:82:98:1a:26:75:5f:94:0a:ce:
         e3:a1:67:9f:1b:a3:d1:f7:5f:9c:1f:21:50:ce:b3:b6:88:f7:
         df:03:a3:06:45:6d:e2:2e:83:56:71:2d:1f:b0:f5:d7:10:31:
         70:2c:bb:4a:f7:3b:87:c0:92:fa:6e:e9:4b:39:cb:13:89:b7:
         fa:37:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:09:37 2026 by rpki-client