This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          xioTUNg3YtC13S6Cj3SPOGks7jmJZPc/QomqvXyPDT0=
Subject key identifier:   AA:51:D4:0A:72:60:9D:E9:9A:D5:A9:52:51:64:39:20:F2:56:91:D9
Certificate issuer:       /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial:       4CE8A7EE7B4D371A16BF61D9A6683A5463051A57
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa
Signing time:             Fri 28 Nov 2025 07:46:42 +0000
ROA not before:           Fri 28 Nov 2025 07:41:42 +0000
ROA not after:            Fri 27 Nov 2026 07:46:42 +0000
asID:                     132644
IP address blocks:        116.204.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
                          rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 01:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e8:a7:ee:7b:4d:37:1a:16:bf:61:d9:a6:68:3a:54:63:05:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
        Validity
            Not Before: Nov 28 07:41:42 2025 GMT
            Not After : Nov 27 07:46:42 2026 GMT
        Subject: CN=AA51D40A72609DE99AD5A95251643920F25691D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:51:5f:cc:c2:cf:dd:3f:2d:35:19:54:b9:ef:
                    e2:8c:c9:be:33:b6:8b:70:ea:f5:a2:1d:fb:fd:c6:
                    6a:54:37:89:fe:05:e4:c9:36:10:9c:d4:32:85:45:
                    90:da:8b:85:c6:e5:f3:74:31:db:08:a8:08:5f:5f:
                    1c:4e:76:c8:13:90:66:10:57:08:9e:fd:10:39:f4:
                    ab:f2:71:0f:1f:a9:ed:81:e3:12:01:ed:ff:79:21:
                    74:2d:99:5c:f2:76:c1:c5:97:c5:d7:52:1b:8c:86:
                    14:1b:1a:ba:2e:93:06:f4:62:d8:a2:ef:58:c8:5f:
                    28:bb:e2:23:ce:2d:37:49:16:84:f7:d0:71:53:b4:
                    13:8b:5f:1e:93:b8:a2:45:a0:be:e1:20:27:27:63:
                    8e:24:fb:88:b4:16:7a:8e:aa:03:99:d4:65:e9:39:
                    5a:c8:40:f4:32:56:09:c2:d0:52:38:97:40:f7:70:
                    e1:47:d5:67:d3:28:a9:22:3b:11:0c:e5:4c:9b:67:
                    13:fc:c5:35:bb:ac:fa:e1:8e:ae:13:d1:0a:06:f2:
                    8e:1d:50:03:65:6c:8c:e7:24:00:8d:73:eb:72:96:
                    59:6c:38:e9:06:4c:dc:70:2f:52:1c:85:a6:03:c4:
                    30:be:f0:50:d0:90:3a:15:26:f9:cd:a6:d1:d5:ee:
                    ad:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:D4:0A:72:60:9D:E9:9A:D5:A9:52:51:64:39:20:F2:56:91:D9
            X509v3 Authority Key Identifier:
                keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:1d:a0:d2:43:f0:d5:ab:8b:06:06:c4:16:cb:38:59:e7:
         13:21:04:76:07:3c:e7:de:f4:70:90:01:a8:e8:ad:be:b3:a8:
         5b:d8:6e:76:a0:01:5f:84:7a:07:39:b0:18:1a:81:40:37:c7:
         cb:79:92:12:05:bc:55:2a:a1:30:66:9c:93:03:e3:b6:3d:0f:
         61:1e:e1:2e:d4:19:d7:1f:e5:69:84:9f:4c:58:6a:1f:6f:f6:
         2e:45:29:3a:30:ff:3f:bf:e5:57:c2:e9:7d:b8:84:6e:f0:5f:
         e9:e8:cc:c1:da:74:cd:f4:b3:1b:20:71:33:14:1a:01:81:5d:
         fc:d0:80:43:0a:7a:9f:1e:75:fe:17:f8:48:98:45:ae:fe:f9:
         60:78:0e:3e:84:3f:13:51:08:88:c5:6d:82:44:3d:9c:a9:41:
         5c:fb:e8:db:57:b4:0d:14:b9:84:3d:83:0e:eb:78:00:87:4b:
         7a:61:0d:15:75:ae:50:49:bf:81:f9:c3:e6:5d:05:6e:11:32:
         73:90:bb:6b:1c:78:24:fc:b7:61:fb:ca:2c:10:38:fb:c1:6a:
         a2:4b:e5:df:1b:bb:52:af:c5:05:ac:c1:63:d8:82:ee:06:88:
         d5:a8:ff:9a:87:3c:21:e5:d2:d0:55:33:23:c2:b1:3a:8c:a5:
         14:c7:af:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:46 2025 by rpki-client