This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
File:                     3131312e36382e32382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          9gW/gDrS5M+meNB8DH240JCZZ/+dYKmLblxStXo0uQc=
Subject key identifier:   73:78:CC:E6:12:AB:EA:E3:EC:AD:7C:BF:54:5D:7B:81:9C:5D:92:39
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       3D4C657B96F7A8772965227CEF5B6CFE639BF46F
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 22 Nov 2025 18:01:09 +0000
ROA not before:           Sat 22 Nov 2025 17:56:09 +0000
ROA not after:            Sat 21 Nov 2026 18:01:09 +0000
asID:                     149746
IP address blocks:        111.68.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4c:65:7b:96:f7:a8:77:29:65:22:7c:ef:5b:6c:fe:63:9b:f4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Nov 22 17:56:09 2025 GMT
            Not After : Nov 21 18:01:09 2026 GMT
        Subject: CN=7378CCE612ABEAE3ECAD7CBF545D7B819C5D9239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:01:29:e8:2d:18:ff:a9:54:77:3b:58:65:
                    c1:44:45:6d:13:d1:0f:5f:ed:00:9c:df:7d:5c:22:
                    ee:ee:42:5d:88:39:5e:dd:d1:63:bf:fa:32:21:6f:
                    d0:44:98:e5:ca:b4:33:84:13:08:25:eb:a6:9e:ea:
                    ea:e1:b9:84:80:c3:95:94:11:0b:c8:00:3a:c3:a9:
                    83:03:6e:d9:10:c9:36:4f:9d:74:9b:f7:6d:2a:a2:
                    e1:c8:0b:65:54:e1:15:67:e6:b2:db:87:40:aa:1d:
                    bc:61:ad:50:59:23:b9:96:a8:7b:c0:49:fc:a8:15:
                    e5:4a:57:b5:e4:48:e8:64:a9:79:59:7c:2b:90:a7:
                    c6:f5:df:80:5e:96:12:c3:fa:ab:fa:da:1c:28:78:
                    55:61:43:80:07:47:54:8c:ee:96:58:da:05:09:88:
                    c6:d4:34:af:00:e2:07:4f:2d:c2:5c:13:bd:cd:25:
                    36:67:e2:d1:d2:7c:76:ff:94:a3:c4:a8:50:c3:61:
                    5e:57:c3:b7:64:aa:ae:11:57:d6:1b:90:4c:02:0a:
                    ea:ad:f5:d2:22:26:41:fe:97:2f:99:70:b5:35:d7:
                    e1:5b:fb:4d:9b:04:b2:2d:65:68:c5:b8:a7:0e:c0:
                    96:cb:3c:12:12:44:3a:48:74:d2:94:7f:75:9a:dd:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:CC:E6:12:AB:EA:E3:EC:AD:7C:BF:54:5D:7B:81:9C:5D:92:39
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131312e36382e32382e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.68.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:0b:dc:eb:ff:c6:6c:74:b5:69:e6:18:17:c8:9b:c5:38:
         8f:82:fd:0b:18:29:62:96:18:d8:73:86:8b:f1:3a:bf:ad:1c:
         52:7b:87:14:a9:2d:ec:6b:52:57:69:30:45:a2:c5:a5:38:34:
         df:40:d1:3f:5c:54:34:f1:2f:bd:97:ec:c6:6b:b9:29:de:7d:
         46:a1:c1:83:1e:11:d2:2c:51:f7:82:97:9e:96:6a:68:71:be:
         e8:94:af:0f:2c:98:7b:0b:28:74:24:0c:ea:f9:32:55:7c:85:
         e9:ea:d4:e8:94:c6:f0:fb:f5:47:de:a2:fd:0a:21:95:56:06:
         1a:28:39:df:2e:0f:a0:ca:68:70:7c:3c:f8:28:99:37:59:a8:
         e3:8a:b0:5b:cd:44:15:14:d4:62:99:70:dc:81:a3:03:ce:23:
         7f:d8:04:33:78:b7:78:44:cd:67:a6:6e:f2:4b:56:c9:fb:27:
         a5:cb:6e:bc:ff:3a:95:89:b0:25:5b:67:86:9d:bc:55:8a:95:
         73:7c:54:8a:e5:9e:8c:1b:38:ce:00:3f:c8:d6:02:68:b0:57:
         d2:72:3a:8b:4d:4b:1d:b5:14:ce:d8:ab:b3:d7:15:b0:fb:44:
         43:03:a0:41:19:72:3d:e9:a2:57:1d:e4:63:42:72:a4:b9:7a:
         a7:7f:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:31 2025 by rpki-client