This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
File:                     AS56242.roa (raw, json)
Hash identifier:          JpQlm6EguumgusAuixpO/E9VZWPqiHiCL/UKJY9kd4I=
Subject key identifier:   E6:A5:BE:5A:59:AA:47:9B:8C:65:67:B4:97:7E:D6:A2:4B:6F:63:D0
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       1539DE59233E2B9945AB8805BCEF48F5A21E66BB
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa
Signing time:             Tue 09 Dec 2025 11:00:00 +0000
ROA not before:           Tue 09 Dec 2025 10:55:00 +0000
ROA not after:            Tue 08 Dec 2026 11:00:00 +0000
asID:                     56242
IP address blocks:        101.255.170.0/23 maxlen: 23
                          115.124.70.0/23 maxlen: 23
                          115.124.70.0/24 maxlen: 24
                          115.124.71.0/24 maxlen: 24
                          202.182.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl
                          rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 08:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:39:de:59:23:3e:2b:99:45:ab:88:05:bc:ef:48:f5:a2:1e:66:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Dec  9 10:55:00 2025 GMT
            Not After : Dec  8 11:00:00 2026 GMT
        Subject: CN=E6A5BE5A59AA479B8C6567B4977ED6A24B6F63D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:77:b3:36:4b:90:22:7f:6c:c7:7e:b0:62:35:
                    1b:a5:77:59:82:7d:8b:86:51:b7:7a:e5:ff:d2:a4:
                    59:e8:f2:2c:41:44:21:ca:ef:2d:c1:8c:97:b6:3c:
                    62:e5:c8:eb:b7:15:56:c2:57:ad:f5:9a:da:4b:47:
                    6d:a0:70:6e:6c:80:39:41:9d:d1:41:dc:23:81:e6:
                    44:a4:44:16:d1:ad:73:d3:82:7d:65:88:5b:79:62:
                    ed:f3:a3:0c:7e:d0:3c:0e:92:62:51:f6:cc:83:a9:
                    e5:18:a4:f2:bc:36:96:3e:87:12:98:39:63:4a:27:
                    94:a4:20:f1:1b:9a:76:11:f4:b0:cd:96:04:df:48:
                    b7:cf:0c:15:0e:a0:01:4b:98:ea:ef:79:28:c2:fb:
                    af:0e:c5:c8:c2:fd:e1:57:d4:d2:78:3c:fe:e6:81:
                    9a:7a:cc:c4:61:cb:84:0a:ec:b4:73:93:c3:1d:d5:
                    39:b1:52:ed:8a:18:ce:84:c8:91:cc:fd:eb:5b:d8:
                    bc:7e:02:51:60:42:ff:b0:a3:4a:80:ee:ac:4b:d5:
                    21:24:32:50:0d:f6:41:e0:1e:e5:21:52:45:28:fd:
                    4c:ff:72:bd:59:ff:29:1d:d6:84:c7:70:e6:23:df:
                    e8:76:46:92:43:37:1b:74:8b:bd:8d:44:4d:d2:67:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:BE:5A:59:AA:47:9B:8C:65:67:B4:97:7E:D6:A2:4B:6F:63:D0
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/AS56242.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.170.0/23
                  115.124.70.0/23
                  202.182.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:65:26:9a:02:5b:cf:0d:0e:a0:02:77:d8:ea:f4:5c:0c:13:
         60:5c:4f:0b:bd:91:6f:c6:d6:e8:58:97:ce:8f:8c:3a:45:2a:
         6b:e7:1b:83:fb:aa:2a:d5:64:2d:79:6a:9b:ac:6b:49:80:c9:
         3c:64:cc:6e:50:bb:e1:da:cf:35:0e:7a:86:4a:da:c6:20:ec:
         21:59:c0:95:d2:b6:90:ab:67:6f:70:61:14:15:76:ce:37:e6:
         4a:4f:62:80:87:49:f2:15:40:45:37:3b:68:d8:ea:1d:16:35:
         4d:bd:ca:73:30:21:20:a2:a6:99:8f:e5:71:6c:00:bf:88:1b:
         1d:64:ac:69:8d:52:a9:37:87:ec:ea:b7:2a:f5:ca:cc:36:e7:
         bb:57:e7:3b:a8:b7:42:4b:f0:a2:5d:63:c7:3d:36:f3:72:bd:
         02:1d:09:7a:a7:93:5e:7a:b5:47:37:d5:9d:7b:1f:e3:33:a9:
         3e:dc:ee:ab:e3:64:9f:d9:12:22:6a:e2:d0:96:55:6b:e2:fd:
         dc:91:f9:78:1f:4d:55:3f:5a:55:3c:97:1f:88:23:88:a4:38:
         42:f6:0b:50:0d:b7:a8:43:9f:51:2e:ba:a3:bf:fa:4c:9f:06:
         8b:82:73:b2:98:8b:a0:37:c0:02:42:60:b5:2f:9d:cd:b4:4e:
         46:b1:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 08:37:17 2025 by rpki-client