This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
File:                     3230322e31302e36332e302f32342d3234203d3e203535363533.roa (raw, json)
Hash identifier:          zwjRbhAd37vYOMqQTMDgbFZLcXrfLuBXrkpquQN03WE=
Subject key identifier:   B5:44:B3:C4:ED:F3:7F:10:A1:8C:2E:A1:3E:E0:A4:35:11:4C:24:3F
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       0F132D9D9A127797B5954B72F559DEE2B2CBBD68
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa
Signing time:             Fri 16 Jan 2026 03:00:02 +0000
ROA not before:           Fri 16 Jan 2026 02:55:02 +0000
ROA not after:            Fri 15 Jan 2027 03:00:02 +0000
asID:                     55653
IP address blocks:        202.10.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 01:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:13:2d:9d:9a:12:77:97:b5:95:4b:72:f5:59:de:e2:b2:cb:bd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Jan 16 02:55:02 2026 GMT
            Not After : Jan 15 03:00:02 2027 GMT
        Subject: CN=B544B3C4EDF37F10A18C2EA13EE0A435114C243F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:f4:78:12:2e:eb:92:57:f5:41:43:41:41:
                    48:16:a2:a8:28:f6:fe:f8:d5:46:f2:fe:47:39:54:
                    9e:08:41:70:02:65:d5:9e:25:ca:33:b7:e6:43:c5:
                    dc:36:fe:0f:33:75:c1:95:21:ae:0a:78:15:a3:5e:
                    6a:ff:2b:91:c6:6f:9e:df:11:ee:e6:fc:ed:5e:6f:
                    4e:69:d7:f2:47:3d:42:1c:9a:3a:28:8b:5c:34:6a:
                    d4:ca:69:77:f4:e2:d3:43:a3:d3:38:20:b2:86:e5:
                    53:dc:be:85:90:82:43:86:e8:f8:1a:54:cc:34:29:
                    d1:a8:64:17:96:f6:71:e6:2b:b7:2a:ee:e1:e9:24:
                    71:e4:01:6a:81:92:f4:a9:ea:99:38:c9:72:fc:54:
                    70:9e:56:1c:2c:16:e7:2d:23:88:d6:17:94:e8:37:
                    3b:a2:4e:bf:fd:1f:7f:8c:8d:34:88:78:0b:88:0e:
                    3f:07:ee:14:3b:3f:3d:3b:37:87:ed:f9:12:80:7b:
                    99:72:fc:d4:8d:72:11:fc:e4:03:9a:f5:fa:6a:fe:
                    47:4a:c2:03:98:7d:2a:62:f0:1c:d0:05:f9:3f:5a:
                    b2:5d:c4:3e:dc:03:7c:2d:55:49:6a:7e:7e:82:22:
                    78:67:47:d6:1e:96:92:59:e9:ce:9a:30:2d:c6:26:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:B3:C4:ED:F3:7F:10:A1:8C:2E:A1:3E:E0:A4:35:11:4C:24:3F
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3230322e31302e36332e302f32342d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:de:67:1c:1b:18:c6:be:0e:7c:e1:e2:8f:9c:78:6e:38:70:
         50:79:3c:88:70:3c:82:b0:7e:f5:fd:be:c1:c5:bc:82:2a:4d:
         91:00:f7:fa:e2:ec:32:28:51:b2:a9:1b:4e:da:2f:7e:e2:27:
         dc:40:22:78:b6:00:63:26:83:cc:5a:91:9b:0c:57:e3:e4:17:
         07:2e:37:4f:88:75:8a:82:2a:1b:7f:52:38:b8:b3:86:80:64:
         86:95:41:66:b3:15:98:48:e1:85:cb:de:d4:b7:cb:61:df:cb:
         46:58:49:2d:a0:ad:63:6f:d8:32:24:bf:d9:83:74:18:aa:9f:
         3a:ab:61:69:95:a0:b6:3d:38:ab:9b:00:2d:19:a2:03:2a:dd:
         c7:f4:2f:cb:d3:60:63:b6:68:b3:f0:1a:fb:33:ea:15:53:11:
         07:3f:25:ba:dd:dd:48:3a:f8:61:b0:d0:28:9e:6d:86:96:b3:
         f4:14:e4:be:f1:fd:58:99:a9:a4:44:c3:d1:f2:e5:ac:95:fa:
         bc:f4:fb:41:c3:aa:04:e2:b2:4a:bc:28:06:5a:46:b1:f8:21:
         19:52:ae:1d:20:f4:da:fd:88:a2:7f:af:9e:2a:94:37:8d:4a:
         48:7f:27:b5:82:64:79:a3:d6:11:77:b0:e6:c9:89:9a:7c:32:
         42:38:e6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:54 2026 by rpki-client