This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
File:                     3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (raw, json)
Hash identifier:          xK1cySsZG++2I6rCYVHEbww86m1izKvQx6hrvB42kz0=
Subject key identifier:   A9:5E:7A:78:D9:E4:BA:DB:09:40:2E:26:DD:14:3C:4C:D7:31:C1:95
Certificate issuer:       /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Certificate serial:       4F13B290BCD1251163AE3D5F49F92E6FDFB859EF
Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
Signing time:             Tue 11 Nov 2025 03:02:02 +0000
ROA not before:           Tue 11 Nov 2025 02:57:02 +0000
ROA not after:            Tue 10 Nov 2026 03:02:02 +0000
asID:                     153082
IP address blocks:        160.22.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl
                          rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 18:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:13:b2:90:bc:d1:25:11:63:ae:3d:5f:49:f9:2e:6f:df:b8:59:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
        Validity
            Not Before: Nov 11 02:57:02 2025 GMT
            Not After : Nov 10 03:02:02 2026 GMT
        Subject: CN=A95E7A78D9E4BADB09402E26DD143C4CD731C195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:1c:68:8b:08:b2:70:6b:22:94:72:24:7c:
                    24:22:e4:4d:bd:85:22:2b:ce:52:f6:99:b8:e0:dd:
                    41:53:e6:f6:8a:03:f1:5e:b3:5c:06:04:e9:f9:ee:
                    26:e9:fd:ed:db:cb:5a:b1:3a:47:d0:37:1f:9b:63:
                    6d:51:42:30:ff:2b:32:48:72:bb:e8:19:bd:05:8a:
                    83:48:50:9d:88:78:ae:40:85:ea:ff:51:e5:25:54:
                    34:dc:69:c1:ca:8d:bc:37:73:3d:92:bd:cf:65:8e:
                    d0:c9:a2:6e:58:b5:4f:2f:8f:a3:e8:69:c9:f6:27:
                    bb:13:4b:7a:1f:d0:77:02:c1:50:4e:65:16:53:7c:
                    d7:28:78:7a:8a:8f:46:58:50:42:76:41:af:f5:a3:
                    ff:07:bd:fe:48:74:51:5e:a6:d8:f2:ae:40:3d:be:
                    ee:c5:58:18:70:8d:d1:51:4a:02:43:a5:a5:7a:b2:
                    c4:5c:df:a1:f0:b1:c7:48:3f:0d:62:b2:62:0a:f1:
                    9c:a5:63:d1:b2:ed:db:3c:98:b7:d3:e6:fe:73:74:
                    11:ba:16:87:fb:02:9b:04:49:57:68:10:77:db:9a:
                    73:30:a6:d2:dd:9c:64:36:60:90:3a:78:74:f2:b9:
                    8c:98:05:9b:49:8b:d4:5c:ab:0a:cc:7e:52:44:ca:
                    eb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:7A:78:D9:E4:BA:DB:09:40:2E:26:DD:14:3C:4C:D7:31:C1:95
            X509v3 Authority Key Identifier:
                keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:75:15:11:2f:51:0b:05:05:91:da:66:44:a4:7f:62:cc:57:
         13:5f:bc:8f:95:7c:0f:90:2a:b5:65:b9:a9:95:ef:9c:6f:4a:
         23:d9:fa:33:7e:3a:15:ed:f6:b6:76:4e:a8:55:be:a7:84:71:
         c0:b6:3c:35:22:58:b7:4b:7a:08:30:d8:19:ae:60:9b:13:58:
         3d:39:83:13:98:1c:3e:c5:40:d5:83:2d:45:40:ad:91:53:05:
         2a:79:5b:71:92:41:37:68:3a:1d:d7:38:9e:ef:7f:40:dd:dd:
         e7:c4:9c:e4:ca:c1:86:43:49:0d:2d:97:ed:f9:0d:86:62:be:
         18:62:86:f3:cc:20:9c:aa:95:28:1f:c6:e5:04:32:3e:5d:ea:
         ba:b7:76:ac:77:06:7e:a4:7b:20:fa:0d:91:5b:62:55:51:51:
         05:fe:b6:d7:b7:42:41:17:00:7b:23:33:ff:20:67:6b:05:ee:
         8a:10:f8:1b:d4:93:97:6c:e5:a8:47:60:34:ed:b8:38:41:e3:
         7d:28:10:0c:a5:f8:5c:39:82:33:20:56:9d:ce:c9:97:95:40:
         4d:80:ce:e0:54:19:f7:e6:fd:1f:a7:96:53:bd:5a:ac:36:eb:
         cf:06:fc:da:01:c8:f2:c1:ed:4c:3e:67:3e:c2:f2:dc:91:35:
         78:dd:47:90
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTxOykLzRJRFjrj1fSfkub9+4We8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3
Q0NCRTQ0MTAeFw0yNTExMTEwMjU3MDJaFw0yNjExMTAwMzAyMDJaMDMxMTAvBgNV
BAMTKEE5NUU3QTc4RDlFNEJBREIwOTQwMkUyNkREMTQzQzRDRDczMUMxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNRxoiwiycGsilHIkfCQi5E29
hSIrzlL2mbjg3UFT5vaKA/Fes1wGBOn57ibp/e3by1qxOkfQNx+bY21RQjD/KzJI
crvoGb0FioNIUJ2IeK5Aher/UeUlVDTcacHKjbw3cz2Svc9ljtDJom5YtU8vj6Po
acn2J7sTS3of0HcCwVBOZRZTfNcoeHqKj0ZYUEJ2Qa/1o/8Hvf5IdFFeptjyrkA9
vu7FWBhwjdFRSgJDpaV6ssRc36HwscdIPw1ismIK8ZylY9Gy7ds8mLfT5v5zdBG6
Fof7ApsESVdoEHfbmnMwptLdnGQ2YJA6eHTyuYyYBZtJi9RcqwrMflJEyuvBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqV56eNnkutsJQC4m3RQ8TNcxwZUwHwYDVR0j
BBgwFoAUkr1Of7aXFuj2SUelmQOv93zL5EEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
Y2RiMmJmOC1iZWIzLTRjYzktODNhZC0yYzlkNTc1Zjk0YWYvMC85MkJENEU3RkI2
OTcxNkU4RjY0OTQ3QTU5OTAzQUZGNzdDQ0JFNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvOTJCRDRFN0ZCNjk3MTZFOEY2NDk0N0E1OTkwM0FGRjc3Q0NC
RTQ0MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjZGIyYmY4LWJlYjMtNGNjOS04
M2FkLTJjOWQ1NzVmOTRhZi8wLzMxMzYzMDJlMzIzMjJlMzIzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbbMA0GCSqG
SIb3DQEBCwUAA4IBAQA7dRURL1ELBQWR2mZEpH9izFcTX7yPlXwPkCq1Zbmple+c
b0oj2fozfjoV7fa2dk6oVb6nhHHAtjw1Ili3S3oIMNgZrmCbE1g9OYMTmBw+xUDV
gy1FQK2RUwUqeVtxkkE3aDod1zie739A3d3nxJzkysGGQ0kNLZft+Q2GYr4YYobz
zCCcqpUoH8blBDI+Xeq6t3asdwZ+pHsg+g2RW2JVUVEF/rbXt0JBFwB7IzP/IGdr
Be6KEPgb1JOXbOWoR2A07bg4QeN9KBAMpfhcOYIzIFadzsmXlUBNgM7gVBn35v0f
p5ZTvVqsNuvPBvzaAcjywe1MPmc+wvLckTV43UeQ
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:43 2025 by rpki-client