This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa
File:                     3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          RFhrg4bv5ZNSWmuLud5F/oLaU4cTEMAfMqrRIOATFAw=
Subject key identifier:   C6:71:A4:37:72:FF:FD:7F:D8:6F:A2:36:99:8C:A7:33:C8:06:03:A0
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       30989DEEF0D8DE26D90FD35582739D7EDBD105F3
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa
Signing time:             Tue 11 Nov 2025 05:49:50 +0000
ROA not before:           Tue 11 Nov 2025 05:44:50 +0000
ROA not after:            Tue 10 Nov 2026 05:49:50 +0000
asID:                     395793
IP address blocks:        203.84.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 11:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:98:9d:ee:f0:d8:de:26:d9:0f:d3:55:82:73:9d:7e:db:d1:05:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Nov 11 05:44:50 2025 GMT
            Not After : Nov 10 05:49:50 2026 GMT
        Subject: CN=C671A43772FFFD7FD86FA236998CA733C80603A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2d:a6:aa:59:68:44:21:40:e8:b2:95:03:5a:
                    6f:c9:21:ba:77:2a:97:e7:3a:b0:da:17:46:ef:ff:
                    57:bf:c9:4d:6d:77:2f:9c:aa:7f:31:c2:80:7b:31:
                    2f:ad:77:a8:0f:c1:37:d0:69:36:ee:33:a1:f0:57:
                    e5:72:d5:76:e0:2e:43:dd:bc:17:11:e8:31:84:18:
                    be:c1:c3:65:f4:f1:99:da:73:82:f3:e2:5e:78:4d:
                    ad:fc:d6:c7:85:cf:43:b2:bc:35:c5:a1:a1:49:83:
                    ca:e9:8c:bf:de:07:0c:3d:3e:1b:79:f4:d9:17:6d:
                    b1:0f:d7:37:2b:31:e1:e2:ce:4b:d4:70:54:26:55:
                    7f:a1:72:d2:72:27:12:32:c0:c6:28:2a:ed:f3:04:
                    9e:b0:3a:b3:50:90:da:22:11:71:72:be:43:7d:57:
                    7a:a5:eb:ff:e1:1f:00:c5:6e:f1:7a:1d:dc:22:79:
                    5f:fc:91:72:4b:5c:b5:ec:f0:dd:3e:4c:f2:81:7d:
                    b6:89:76:7b:84:55:a7:2f:6f:bb:67:f9:c8:79:4f:
                    8f:9f:bd:41:12:99:87:34:13:e5:e0:ec:29:62:93:
                    b3:09:e0:75:bd:18:ce:5c:e1:2d:18:e8:4d:a1:06:
                    5c:20:3b:60:c9:59:fb:ac:cc:f2:97:97:62:74:ad:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:71:A4:37:72:FF:FD:7F:D8:6F:A2:36:99:8C:A7:33:C8:06:03:A0
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133362e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:8e:af:2e:9c:1c:e5:c7:97:2d:1a:59:04:ca:71:98:f0:
         cb:d8:e4:7e:1f:26:b8:a0:19:b0:c8:ba:78:b6:7f:84:ce:b9:
         ad:2e:35:89:32:ee:33:e7:65:64:84:0f:6c:57:9c:7a:f0:21:
         7a:c8:e5:d0:a1:23:3b:52:7a:0f:0a:22:ed:4c:2d:c2:1a:90:
         0d:e0:a4:83:d0:1c:2f:44:7a:cc:6c:c8:76:c0:70:04:ac:85:
         92:4d:b0:59:bd:30:e1:fa:29:2d:55:28:4f:e2:15:8d:8f:4e:
         6b:f8:3d:4e:23:66:db:95:a5:a4:b6:70:de:8e:70:0f:9f:e5:
         ea:4d:b6:73:e9:b4:61:1a:02:40:5a:2f:2f:3f:97:79:1a:15:
         97:1b:ea:58:63:12:f0:f9:50:2e:3d:e2:c0:6a:31:7f:4c:fd:
         cd:ec:a2:f0:d9:04:cf:d5:57:51:e9:af:10:c1:7e:6e:bc:23:
         8b:5f:ff:39:3e:65:4c:d1:32:08:76:28:8c:b6:55:60:69:5c:
         8b:b7:ba:dc:3c:72:8b:80:af:10:54:eb:87:26:4a:08:9b:75:
         9b:af:33:06:57:c1:3b:50:b1:44:c8:e8:51:89:a9:59:66:47:
         b6:b7:b2:46:ef:7b:e3:e4:8f:3a:47:ca:02:d2:58:bb:e2:9c:
         07:7a:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:36:17 2025 by rpki-client