This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          P1YBvGHSMw2KSmorZM6GVpNPSOsIMTGTDkbnAUEcz4U=
Subject key identifier:   E5:C1:59:92:8A:96:9C:AE:CC:16:7F:86:1E:C1:B4:ED:96:28:5B:8A
Certificate issuer:       /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial:       066E1C1E18FBEE9B962EBC42EED599CE9D2EB643
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
Signing time:             Fri 28 Nov 2025 07:45:53 +0000
ROA not before:           Fri 28 Nov 2025 07:40:53 +0000
ROA not after:            Fri 27 Nov 2026 07:45:53 +0000
asID:                     132644
IP address blocks:        116.204.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
                          rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 01:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6e:1c:1e:18:fb:ee:9b:96:2e:bc:42:ee:d5:99:ce:9d:2e:b6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
        Validity
            Not Before: Nov 28 07:40:53 2025 GMT
            Not After : Nov 27 07:45:53 2026 GMT
        Subject: CN=E5C159928A969CAECC167F861EC1B4ED96285B8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:6b:64:d0:96:07:86:56:e7:0a:30:f6:98:
                    bd:f9:ca:a0:4a:01:ae:65:df:6c:f5:c1:4d:d8:56:
                    59:b3:59:6b:40:d1:8f:d6:18:04:7d:30:a7:d6:3d:
                    66:aa:5c:fe:3f:94:c2:15:88:5d:32:da:04:9f:d3:
                    18:1a:94:c7:ad:0e:92:fe:66:47:38:88:98:95:39:
                    53:14:94:c8:50:51:11:0b:8f:53:01:07:fb:9a:3f:
                    8a:ba:3d:33:f1:f2:0b:65:cf:34:fe:9d:84:61:24:
                    17:de:4d:28:c0:14:59:e2:10:55:69:74:69:9b:9f:
                    66:de:cf:4b:54:2e:92:6f:d3:54:ce:60:89:db:5e:
                    82:07:be:3c:d4:f2:4c:1f:1c:50:e0:20:d4:94:73:
                    b0:0e:c8:e7:33:85:93:e8:27:3a:a3:40:fc:e7:b7:
                    7a:03:02:39:8b:b1:25:ee:90:82:38:17:7b:17:a6:
                    1d:b0:78:35:81:9c:e2:82:cc:13:3c:e0:c8:27:30:
                    f0:7f:39:4d:c5:e4:38:9e:ff:cf:d3:5c:15:d9:9f:
                    cb:a7:3b:47:f8:b5:75:71:18:ac:6c:d7:d9:47:6a:
                    f3:8c:e9:d1:c5:c8:0e:b1:5b:f4:81:41:26:9a:33:
                    7a:11:08:89:2d:0a:b5:96:64:6e:51:29:cb:3e:88:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C1:59:92:8A:96:9C:AE:CC:16:7F:86:1E:C1:B4:ED:96:28:5B:8A
            X509v3 Authority Key Identifier:
                keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:c6:e0:5b:a7:7e:e8:94:1a:6b:a3:af:fc:72:d1:64:6b:
         9d:20:74:f2:ef:26:84:7f:45:df:50:c8:8f:d5:c5:4f:fa:ef:
         4d:d0:51:08:7f:0f:72:09:93:a8:66:c4:c8:68:b1:19:86:a4:
         c0:c2:1d:93:51:4d:d8:a4:37:0f:97:f8:cd:ba:01:2a:e9:53:
         fa:dc:52:09:08:23:74:4f:45:d2:be:18:c3:7e:2a:9f:97:ab:
         3c:b4:93:46:22:31:e4:37:5c:3c:c9:e6:bd:10:e5:e9:54:7d:
         9b:16:ec:00:f6:01:31:4a:67:30:2a:2a:d4:04:3b:eb:6f:92:
         86:ac:7e:d1:f9:2b:c2:32:1a:b6:78:90:58:03:0d:2b:7b:1f:
         6f:b6:fa:e5:da:1d:2f:d8:34:64:5c:ac:1f:1f:f6:e8:65:aa:
         0e:d1:f8:20:8f:a4:60:a1:2b:38:cb:b1:90:c9:9b:77:3d:5a:
         b6:08:43:ed:fb:96:a5:5f:52:6e:77:95:d5:9b:f7:96:53:e4:
         3f:fd:8b:74:9c:0d:79:1c:5b:7f:10:17:7f:79:64:3d:fd:b2:
         0b:38:54:d4:38:88:08:54:16:e8:e5:a3:e4:59:2b:43:1c:81:
         c3:e6:a1:a9:e1:69:21:88:82:71:eb:a7:47:4a:d0:9a:03:77:
         2a:6a:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:18 2025 by rpki-client