This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa
File:                     3131322e37382e33382e302f32342d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          ExAeQuV2nwMk6MuMAQPtG+claobmvvbve+qtKVWxRzM=
Subject key identifier:   01:94:9E:53:33:C6:A9:39:B6:21:E8:FC:37:FC:CD:A8:6C:71:41:AA
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       6C7E7C5412E1C3C7900008E2288D79E0F42D89F4
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa
Signing time:             Sat 22 Nov 2025 18:01:10 +0000
ROA not before:           Sat 22 Nov 2025 17:56:10 +0000
ROA not after:            Sat 21 Nov 2026 18:01:10 +0000
asID:                     149746
IP address blocks:        112.78.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:7c:54:12:e1:c3:c7:90:00:08:e2:28:8d:79:e0:f4:2d:89:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Nov 22 17:56:10 2025 GMT
            Not After : Nov 21 18:01:10 2026 GMT
        Subject: CN=01949E5333C6A939B621E8FC37FCCDA86C7141AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:a1:15:1e:ed:1d:02:5b:23:8a:c6:40:8b:
                    a7:aa:33:dd:75:33:93:e0:2a:13:21:da:d7:75:b9:
                    67:59:36:da:14:0d:9e:aa:3c:bb:03:9d:d4:c2:38:
                    d9:27:2e:c0:af:f1:0b:15:23:1b:4e:26:e9:c5:13:
                    31:4f:dc:4e:bb:f4:c8:c9:f9:88:b4:73:60:f0:84:
                    c3:8c:23:12:34:ff:1c:9d:d3:3f:b8:e8:a1:eb:2f:
                    60:e1:38:75:fa:36:74:95:52:e7:e7:0f:d6:88:e7:
                    56:59:0d:18:5c:a8:ff:72:c1:db:b8:da:78:ef:07:
                    9c:19:a3:31:45:25:8e:07:90:ab:01:38:16:41:f6:
                    4a:ae:bb:d7:da:22:60:0f:91:55:52:95:ec:fa:e0:
                    18:f4:ad:64:50:a3:31:01:e1:6b:eb:d8:24:6f:37:
                    12:f0:1b:bb:5d:81:fd:47:08:d4:86:78:1e:86:05:
                    45:25:86:12:66:dd:45:1e:10:ae:58:4c:2e:97:e6:
                    90:57:bd:e5:2d:33:d9:f9:66:32:b8:df:62:b2:02:
                    13:7a:76:8a:2e:5d:17:28:c0:77:ee:c5:21:3b:af:
                    cb:ed:91:d3:00:57:58:db:f0:f5:59:b1:e7:bf:e2:
                    f6:64:58:a4:85:28:fd:02:d8:00:41:8b:e0:5c:38:
                    3e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:94:9E:53:33:C6:A9:39:B6:21:E8:FC:37:FC:CD:A8:6C:71:41:AA
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3131322e37382e33382e302f32342d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:74:12:f9:cb:8e:17:4b:e1:ef:0f:90:c5:96:8a:14:9c:
         fe:ce:cb:1c:81:85:c8:a8:ee:68:86:0c:ca:8e:23:d4:a4:91:
         4d:c9:a4:53:2f:88:ca:1d:4b:21:95:ac:72:42:e7:c4:10:79:
         7e:b6:1d:ef:86:2a:bd:26:2a:b3:af:c2:32:58:51:75:46:d2:
         3f:59:6e:e1:69:6b:75:ae:99:94:63:66:89:a6:86:33:4f:f0:
         5b:06:11:f4:ae:67:11:e5:9e:89:26:d8:ec:22:54:bd:f2:81:
         e0:0e:49:7d:7c:dd:24:47:82:74:09:ef:53:d8:10:db:19:b3:
         3d:f1:26:49:02:8a:5a:d9:40:8b:02:83:18:4c:cd:be:8b:37:
         f6:20:25:40:1e:b5:86:f5:2c:50:17:df:6f:4e:f7:64:a8:7d:
         51:64:f5:cd:f9:c0:ae:65:7c:ad:af:7c:8a:9e:c3:ad:de:13:
         99:f5:e2:9d:75:4c:01:dc:be:67:1a:3d:ed:0a:ba:78:d7:a4:
         58:d1:45:9c:ef:c7:48:eb:88:49:ab:b6:4f:9a:97:84:a2:1a:
         e7:b2:06:96:34:21:d2:9c:be:6d:3c:5b:7f:a4:87:fa:f3:57:
         2e:00:6d:b0:38:ba:8c:9c:cd:ec:01:fc:f1:0c:46:b4:9b:37:
         9d:bc:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:14 2025 by rpki-client