This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa
File:                     3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          CzsB1i2n8blmvNya3o9w8kwH8dKsWQzSUJDKNEk5v+Y=
Subject key identifier:   62:FA:0E:C7:BA:BD:60:E9:86:22:7D:19:4A:40:59:A5:45:A4:BE:34
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       1CCB480C06541A7E13ACC57CED223C22FE05EB1F
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa
Signing time:             Tue 11 Nov 2025 05:34:12 +0000
ROA not before:           Tue 11 Nov 2025 05:29:12 +0000
ROA not after:            Tue 10 Nov 2026 05:34:12 +0000
asID:                     395793
IP address blocks:        110.44.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cb:48:0c:06:54:1a:7e:13:ac:c5:7c:ed:22:3c:22:fe:05:eb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Nov 11 05:29:12 2025 GMT
            Not After : Nov 10 05:34:12 2026 GMT
        Subject: CN=62FA0EC7BABD60E986227D194A4059A545A4BE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:ca:67:26:e6:e4:66:37:b8:82:9d:88:02:
                    6e:9b:48:d9:24:db:47:a3:8f:24:88:2d:92:b1:5e:
                    95:26:bd:3e:5d:92:fa:44:89:bc:98:bb:1b:77:c1:
                    7c:eb:a0:62:11:a3:88:9c:52:5c:1a:ee:b5:5b:41:
                    fb:23:a2:50:d2:5a:41:c9:58:23:09:46:1a:1f:39:
                    c4:ab:1b:3b:37:61:4e:eb:94:eb:fa:16:43:47:2d:
                    9f:0b:cc:28:48:f4:a9:d9:c8:03:1b:c7:ac:6a:b0:
                    13:b1:32:3f:b1:7d:d2:bd:35:a9:57:d6:d2:c3:d6:
                    b0:19:44:7c:b4:c5:c6:4c:49:dd:3e:db:9d:52:0c:
                    cf:53:65:ac:da:1a:0c:06:fd:38:96:13:60:ce:6b:
                    ad:8b:1b:a2:da:3d:c2:fb:7a:0b:79:6c:8e:10:ff:
                    cb:6f:f4:c8:81:6a:b5:fb:3e:0f:ce:e3:b0:aa:2b:
                    7a:ec:1f:ed:da:c5:a1:a9:f8:fa:bf:76:f1:60:90:
                    74:8f:dd:f3:70:ac:81:0b:58:85:d9:ba:cb:64:97:
                    f8:8b:67:3c:71:40:c2:4a:81:03:4a:bb:f8:bb:6c:
                    0d:0d:40:55:f5:70:8d:37:66:9d:2d:39:56:1c:bb:
                    ea:91:34:8a:ff:5e:cc:98:4c:dd:3c:06:74:18:41:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FA:0E:C7:BA:BD:60:E9:86:22:7D:19:4A:40:59:A5:45:A4:BE:34
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:23:40:17:7a:64:47:49:a7:c8:75:bd:6e:96:0f:56:4b:
         e5:70:cb:e6:62:0e:38:f3:eb:a2:d3:14:89:a2:01:5f:e5:16:
         ea:fe:af:f4:bc:3b:80:78:7b:50:2e:f5:5a:8f:3b:46:fc:92:
         ed:fd:b1:e1:f1:02:ca:44:d7:56:e2:78:15:69:ae:ee:bd:76:
         05:16:cc:80:d5:a1:7c:55:a0:52:bb:e4:c7:3f:94:74:1e:0c:
         ed:e0:09:68:26:21:3d:1b:69:83:11:f9:3a:a5:af:d5:1b:c2:
         86:cb:92:fc:7a:e1:ac:ee:dd:ba:ed:c9:c2:a8:18:2d:77:ed:
         a3:6f:29:75:87:3e:87:64:19:7d:e6:06:f9:e4:6d:b7:98:e7:
         d4:24:14:85:cb:56:14:63:21:9a:5d:f7:57:94:48:c8:45:23:
         52:25:1a:90:1a:d2:4f:e8:55:73:29:85:4b:b8:46:b3:15:82:
         0a:a8:c4:b0:ea:40:97:82:d4:cc:d0:98:1c:e3:fc:3a:14:4c:
         3b:06:22:67:6e:92:8e:69:13:05:38:79:8e:cb:d7:ee:0c:de:
         90:96:01:ef:58:e4:ed:48:2b:61:ef:45:ac:2c:44:6a:f4:ad:
         ac:e2:e8:fd:10:01:32:e8:be:c1:b8:50:43:2e:e3:ad:af:4f:
         b7:5c:e6:14
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHMtIDAZUGn4TrMV87SI8Iv4F6x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC
MEMxMDhBOTAeFw0yNTExMTEwNTI5MTJaFw0yNjExMTAwNTM0MTJaMDMxMTAvBgNV
BAMTKDYyRkEwRUM3QkFCRDYwRTk4NjIyN0QxOTRBNDA1OUE1NDVBNEJFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX0cpnJubkZje4gp2IAm6bSNkk
20ejjySILZKxXpUmvT5dkvpEibyYuxt3wXzroGIRo4icUlwa7rVbQfsjolDSWkHJ
WCMJRhofOcSrGzs3YU7rlOv6FkNHLZ8LzChI9KnZyAMbx6xqsBOxMj+xfdK9NalX
1tLD1rAZRHy0xcZMSd0+251SDM9TZazaGgwG/TiWE2DOa62LG6LaPcL7egt5bI4Q
/8tv9MiBarX7Pg/O47CqK3rsH+3axaGp+Pq/dvFgkHSP3fNwrIELWIXZustkl/iL
ZzxxQMJKgQNKu/i7bA0NQFX1cI03Zp0tOVYcu+qRNIr/XsyYTN08BnQYQcY3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYvoOx7q9YOmGIn0ZSkBZpUWkvjQwHwYDVR0j
BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD
NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx
MDhBOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzOTM1MzczOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbiyrMA0GCSqG
SIb3DQEBCwUAA4IBAQC0XyNAF3pkR0mnyHW9bpYPVkvlcMvmYg448+ui0xSJogFf
5Rbq/q/0vDuAeHtQLvVajztG/JLt/bHh8QLKRNdW4ngVaa7uvXYFFsyA1aF8VaBS
u+THP5R0Hgzt4AloJiE9G2mDEfk6pa/VG8KGy5L8euGs7t267cnCqBgtd+2jbyl1
hz6HZBl95gb55G23mOfUJBSFy1YUYyGaXfdXlEjIRSNSJRqQGtJP6FVzKYVLuEaz
FYIKqMSw6kCXgtTM0Jgc4/w6FEw7BiJnbpKOaRMFOHmOy9fuDN6QlgHvWOTtSCth
70WsLERq9K2s4uj9EAEy6L7BuFBDLuOtr0+3XOYU
-----END CERTIFICATE-----
Generated at Wed Dec 3 17:36:17 2025 by rpki-client