This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
File:                     3131362e39302e3136382e302f32342d3234203d3e203338373635.roa (raw, json)
Hash identifier:          Bz9G6REq2EBUUZjBZz/J8mYJRlMvkTr02i5X0IizZzc=
Subject key identifier:   C8:8F:2D:41:ED:CC:15:6E:6A:D7:6D:1D:50:8F:22:92:FF:61:78:2C
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       69CF2C79176450696CC91E46613659C7872A28AE
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa
Signing time:             Mon 22 Dec 2025 05:59:13 +0000
ROA not before:           Mon 22 Dec 2025 05:54:13 +0000
ROA not after:            Mon 21 Dec 2026 05:59:13 +0000
asID:                     38765
IP address blocks:        116.90.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:2c:79:17:64:50:69:6c:c9:1e:46:61:36:59:c7:87:2a:28:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Dec 22 05:54:13 2025 GMT
            Not After : Dec 21 05:59:13 2026 GMT
        Subject: CN=C88F2D41EDCC156E6AD76D1D508F2292FF61782C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:10:6e:14:b7:d0:65:ad:2c:d2:4c:48:8e:
                    07:90:01:64:2c:1c:9e:74:37:94:72:ac:1a:ef:8d:
                    bd:9d:7f:ff:ea:75:1d:11:a0:ad:4e:b9:0a:ef:9a:
                    14:e0:2a:bb:bc:34:64:77:39:fc:5a:2c:72:c8:39:
                    e3:83:fe:49:1d:42:4c:ef:28:f5:a6:f4:3e:b6:2c:
                    e3:7e:a5:42:a5:e1:f3:b1:9a:04:75:ae:63:dc:e0:
                    38:44:72:d2:e6:8a:dd:28:0b:19:c6:5a:c9:07:8a:
                    27:08:32:5f:c6:aa:76:c0:5c:52:9e:28:d5:53:7c:
                    ff:36:04:2e:2d:27:e5:6e:70:57:52:33:78:05:89:
                    37:80:1d:20:24:d2:0d:c7:d3:dc:c0:4c:7d:16:20:
                    bc:68:58:0c:ae:4c:ff:dd:11:b7:19:39:b4:48:e5:
                    13:a6:24:f6:3a:b3:1d:e7:28:68:43:83:2e:84:0f:
                    90:33:5e:1d:b1:94:83:3b:22:a4:d5:57:29:bc:a4:
                    95:97:a7:ee:2c:4f:1d:3f:25:e0:3a:c3:f2:70:36:
                    3e:e9:7e:0f:74:2f:81:dc:3d:dc:32:e2:22:ba:e5:
                    36:33:97:2a:94:15:4c:17:62:1b:08:9a:7d:3d:54:
                    3c:17:36:2f:30:1c:73:79:24:b7:08:db:17:f5:79:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:2D:41:ED:CC:15:6E:6A:D7:6D:1D:50:8F:22:92:FF:61:78:2C
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136382e302f32342d3234203d3e203338373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:41:07:fd:9c:e3:af:6b:94:39:b2:e0:99:9c:77:0e:53:
         be:e7:45:0e:a7:29:60:97:b7:b7:4b:44:cd:ca:63:ba:a3:72:
         db:53:d9:d6:cc:fe:44:2f:ae:cc:2a:b7:f3:cd:a0:3a:71:95:
         6b:dc:ec:00:61:ac:be:79:ba:e0:97:8d:fe:e8:08:da:7b:37:
         00:ca:b3:4a:6b:b3:96:43:df:06:88:fe:91:63:c6:6a:1b:6d:
         35:0e:88:10:48:c6:0a:62:1c:f2:b3:97:54:a9:8d:dc:e1:01:
         fe:64:fd:1d:c0:ca:b0:ff:da:72:3a:31:b7:5a:e7:62:59:92:
         33:17:37:c8:fc:26:75:7f:9b:94:4b:66:c1:42:4c:68:3c:a1:
         05:7d:7b:8f:53:9d:c7:0d:64:eb:a1:a3:ed:f2:29:56:a4:b6:
         22:e5:ac:f7:d2:0e:c2:58:9a:17:94:0b:b5:3c:5e:c5:d3:b1:
         0f:64:6b:32:0f:72:a5:97:df:c9:8b:16:20:61:6f:cb:a3:7e:
         39:15:ae:7d:3b:b7:f1:19:a4:7d:27:78:7a:83:2a:17:12:9b:
         0c:ac:c1:b8:a3:b3:aa:c1:a6:48:1e:4b:c9:43:96:3d:97:90:
         d3:58:54:f5:c4:1c:3c:72:72:b2:88:68:a2:cc:79:ff:74:c9:
         4f:a7:8d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:28 2026 by rpki-client