This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa
File:                     3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          u/hRr1E7iAZVxPG4K+GYy4e7bkPpI7qrdTq8mm4/3Ao=
Subject key identifier:   C4:F3:31:BB:86:29:D9:C3:AF:2B:C2:D9:91:0A:2C:5A:B2:2D:0C:87
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       0ECD44E5A47D6D70A70CCDF0ED8BAD84C576370A
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa
Signing time:             Wed 29 Oct 2025 07:00:00 +0000
ROA not before:           Wed 29 Oct 2025 06:55:00 +0000
ROA not after:            Wed 28 Oct 2026 07:00:00 +0000
asID:                     138077
IP address blocks:        110.44.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Dec 2025 08:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cd:44:e5:a4:7d:6d:70:a7:0c:cd:f0:ed:8b:ad:84:c5:76:37:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Oct 29 06:55:00 2025 GMT
            Not After : Oct 28 07:00:00 2026 GMT
        Subject: CN=C4F331BB8629D9C3AF2BC2D9910A2C5AB22D0C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:19:5d:03:d7:9a:4f:9f:09:2d:a3:b5:74:c5:
                    9d:fe:a6:8a:71:be:9c:e4:2a:d2:b7:df:6d:09:d2:
                    9d:b5:60:16:f9:97:70:77:08:c5:0a:2a:52:81:b2:
                    21:fe:d7:07:58:5f:a8:4f:b8:09:9d:18:78:32:7f:
                    22:bd:c8:4b:a2:38:fd:ca:0e:5d:c7:e5:18:20:e8:
                    d3:c6:7a:4f:88:ff:f0:1a:e3:c8:46:6c:eb:bf:47:
                    ac:57:bb:0f:e7:70:39:85:16:a6:ec:f6:01:51:88:
                    9b:e5:1b:7e:f3:42:71:8a:51:80:f5:60:d0:5b:9e:
                    8f:8b:95:ed:6f:1c:e5:1c:51:10:bb:3d:69:10:97:
                    d6:e5:ae:ef:80:9c:38:52:c1:2b:e9:4b:80:01:ae:
                    2d:50:0e:b2:3d:4b:41:b4:a2:39:18:5e:1c:1d:be:
                    63:cc:a4:de:6f:cc:68:95:97:db:61:40:03:ce:36:
                    54:d6:d8:87:bb:da:e6:86:51:5a:a4:20:b1:f5:95:
                    c5:49:44:a6:da:64:76:fc:1e:32:d9:5c:f2:f7:cf:
                    d2:cc:63:e0:dc:c0:c1:88:da:05:71:2d:9e:7f:3b:
                    78:59:92:21:1a:d2:bc:b3:64:66:17:0d:66:2c:61:
                    05:67:3e:4f:d7:7c:7f:d2:cd:e2:c2:10:26:5d:65:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F3:31:BB:86:29:D9:C3:AF:2B:C2:D9:91:0A:2C:5A:B2:2D:0C:87
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137302e302f32342d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:03:90:f6:f2:16:98:d2:c9:f0:bb:48:9f:42:a2:40:b1:a8:
         e8:3a:65:d1:6b:5c:3c:c7:7f:14:fa:f6:37:72:0d:73:95:06:
         19:07:06:52:ac:e6:a5:e6:ac:b7:3a:aa:f2:a2:57:39:1d:2c:
         96:37:9a:7d:e8:dc:73:63:f8:4d:28:ed:be:b0:e0:13:24:61:
         ae:98:3b:ac:ae:4f:f1:bd:57:01:49:8c:b9:6c:8b:11:73:01:
         22:db:15:7c:50:82:3e:c2:33:7a:47:f3:cb:47:c3:ae:7d:da:
         e2:f0:46:35:17:4c:fe:0b:d5:02:7c:2a:f0:a0:d1:3c:90:0e:
         a5:1a:63:cc:8b:5c:ac:a1:40:40:01:6e:c4:7b:a8:cf:bf:74:
         ad:03:c3:b6:7d:98:92:d8:fd:c6:51:4b:a9:8f:ef:26:ba:27:
         ec:31:01:6b:52:15:aa:8d:53:4b:48:81:82:c2:1a:17:6a:49:
         6a:8e:bf:12:fb:66:3e:3d:db:b7:09:f6:d8:ea:a3:b4:df:d2:
         86:ae:95:0e:81:77:b5:fc:d3:da:0c:76:49:fb:7c:59:86:99:
         6c:7f:ac:07:92:1d:86:1c:d8:42:ce:f7:83:6e:f2:af:e1:cf:
         38:8b:cb:bf:a5:de:0f:21:0a:f2:9e:7e:2f:8b:11:97:c7:68:
         d4:49:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 06:11:23 2025 by rpki-client