This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa
File:                     323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa (raw, json)
Hash identifier:          mPh7GdsHOCij5+t8LRe0pT3jX8ibPd0uc3fcqsjEKco=
Subject key identifier:   A8:AC:48:CB:90:46:8D:D4:5E:63:E8:A0:6D:62:57:5F:18:FA:E4:FC
Certificate issuer:       /CN=1952B074D19D5AB562D7EE537AD3059EA097353B
Certificate serial:       371E191887821966222331E2B83DD311973B7AFC
Authority key identifier: 19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa
Signing time:             Wed 22 Oct 2025 04:03:16 +0000
ROA not before:           Wed 22 Oct 2025 03:58:16 +0000
ROA not after:            Wed 21 Oct 2026 04:03:16 +0000
asID:                     141675
IP address blocks:        2406:aec0:c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl
                          rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 02:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1e:19:18:87:82:19:66:22:23:31:e2:b8:3d:d3:11:97:3b:7a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1952B074D19D5AB562D7EE537AD3059EA097353B
        Validity
            Not Before: Oct 22 03:58:16 2025 GMT
            Not After : Oct 21 04:03:16 2026 GMT
        Subject: CN=A8AC48CB90468DD45E63E8A06D62575F18FAE4FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:8d:a7:02:3f:8d:97:c4:d2:0b:2b:b4:f3:
                    ad:fe:d1:74:f5:76:de:10:a5:a6:9b:69:ae:1b:84:
                    e5:fd:4c:75:8a:78:2c:84:1d:b4:30:29:a8:d5:1f:
                    18:9b:8a:bb:74:34:6b:a4:f8:a7:0a:b9:50:6f:9a:
                    35:1f:c9:d5:f1:7b:d3:d2:52:fd:6e:7b:a8:0d:54:
                    38:b7:f5:86:17:42:01:93:f4:36:49:e0:e4:79:c3:
                    10:68:b2:4f:ee:bb:0c:a4:e0:15:77:71:85:6e:6e:
                    19:b7:40:92:75:68:49:a1:60:b7:ac:0f:1f:67:6c:
                    06:34:0d:5f:4f:c9:7f:3e:43:ce:f7:14:2c:68:fa:
                    53:88:3e:d5:e8:1f:94:94:ca:ac:1c:2f:8c:ce:f9:
                    70:a5:3c:c2:ac:9e:7b:60:2c:78:d2:d0:77:49:f2:
                    04:5f:a8:6b:4d:61:7e:40:52:a1:7e:15:9b:8e:c7:
                    d3:74:0f:e9:40:cd:80:19:9a:47:79:b5:6d:ab:7d:
                    11:e5:86:64:38:1e:97:ab:dc:cf:52:1a:34:a9:b5:
                    d1:c2:e0:58:d0:99:5c:09:87:62:e2:b2:4a:38:eb:
                    83:57:69:01:2d:d5:46:a1:72:8f:63:48:9a:a4:ba:
                    32:f8:1a:0d:c5:5d:ca:1e:1b:b4:ce:45:96:3a:92:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AC:48:CB:90:46:8D:D4:5E:63:E8:A0:6D:62:57:5F:18:FA:E4:FC
            X509v3 Authority Key Identifier:
                keyid:19:52:B0:74:D1:9D:5A:B5:62:D7:EE:53:7A:D3:05:9E:A0:97:35:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/1952B074D19D5AB562D7EE537AD3059EA097353B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1952B074D19D5AB562D7EE537AD3059EA097353B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f2c025-1d76-4a36-8160-a9e8afe3579f/0/323430363a616563303a633a3a2f34382d3438203d3e20313431363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:aec0:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:be:08:eb:5c:97:c3:56:a8:10:1b:21:05:ed:95:f2:34:
         10:98:73:40:6d:78:c2:fb:b4:ca:bd:1c:76:15:31:74:05:bb:
         c1:ae:46:fc:8a:15:72:f7:c2:fd:b5:2e:6e:f7:16:6b:fb:46:
         f0:00:32:e4:22:a0:16:35:5b:4f:ff:0b:f9:e1:57:61:9c:e6:
         fc:31:58:f2:d2:19:c7:49:81:14:5f:85:67:c8:67:e1:28:a1:
         ab:cc:3b:24:79:87:5f:71:3f:3c:14:3b:68:58:ce:29:1c:1b:
         23:02:b2:6a:f3:a5:1c:34:d8:88:69:ad:02:cb:17:53:81:b7:
         88:0a:01:0c:d6:e3:80:dd:b8:2d:fb:63:32:b9:58:93:4a:3d:
         5f:67:e1:5a:10:5d:6a:4e:53:37:94:68:dc:87:2d:ea:3c:2a:
         7d:d5:47:10:7c:1f:b8:d1:74:84:90:00:82:ec:12:15:8d:a9:
         d7:82:5b:74:98:2d:63:7d:f2:73:34:c3:63:ec:d1:c7:e6:ea:
         f4:f2:59:02:e8:dc:90:58:c4:51:64:a9:0f:f9:9b:d2:7a:86:
         05:60:6c:a5:8b:44:eb:a4:11:1a:0f:2a:2c:e8:05:b6:b3:6b:
         d5:70:ff:de:62:39:cd:b8:e7:63:c9:38:ec:e9:d4:82:e3:0b:
         c0:53:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:30 2025 by rpki-client