This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          bD3z2MHh1z8AA6G7X+ZWEL+ijpSpYsmo1zxz1oUdyZ4=
Subject key identifier:   EC:CC:8E:B6:2E:50:AC:BF:E6:63:49:60:31:DC:2B:DE:45:E4:3C:C5
Certificate issuer:       /CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
Certificate serial:       71E5C17F1E3E8D1BCF75EF2E185D6417BDEDAB2C
Authority key identifier: FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa
Signing time:             Fri 28 Nov 2025 07:47:21 +0000
ROA not before:           Fri 28 Nov 2025 07:42:21 +0000
ROA not after:            Fri 27 Nov 2026 07:47:21 +0000
asID:                     132644
IP address blocks:        116.204.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl
                          rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 01:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e5:c1:7f:1e:3e:8d:1b:cf:75:ef:2e:18:5d:64:17:bd:ed:ab:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD09495181408CBE83FD333EACEF29FBCDAD633
        Validity
            Not Before: Nov 28 07:42:21 2025 GMT
            Not After : Nov 27 07:47:21 2026 GMT
        Subject: CN=ECCC8EB62E50ACBFE663496031DC2BDE45E43CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:7f:be:6d:fe:e6:59:d6:50:bf:1b:2c:f8:
                    f0:13:52:be:a0:fb:ed:70:04:c1:fa:74:9a:bf:28:
                    54:4c:96:c6:bc:19:a9:e7:da:71:78:f8:82:b1:c7:
                    b4:ac:c1:cb:ba:e1:05:45:37:fb:e4:c3:91:5d:75:
                    0b:ea:62:af:ed:b4:e8:2e:55:51:bc:a5:3f:60:44:
                    a1:59:d7:03:8a:7b:ed:f2:a0:b1:73:bf:76:4e:a0:
                    7b:c6:16:63:12:46:7a:cf:95:22:28:85:8a:1b:f9:
                    d0:cc:ad:58:fe:8a:35:5c:96:74:a6:c1:5b:34:24:
                    df:99:86:b1:66:96:f6:e9:59:f7:dc:8f:84:b5:7b:
                    3b:58:d3:0b:59:a4:50:0c:ec:b9:f4:ce:71:c7:a9:
                    94:af:e5:a6:a1:24:21:39:59:56:14:91:53:dc:2b:
                    a1:3c:53:a7:54:2b:05:ca:04:ec:39:0f:66:6e:9d:
                    3c:e9:8b:6b:df:d3:44:f4:e7:04:90:55:fc:8b:a6:
                    88:69:4b:99:ee:c3:51:eb:0b:e3:62:11:df:dd:f7:
                    4f:5e:df:23:89:a1:cf:c0:72:ac:b5:e3:8d:5c:bf:
                    35:72:78:0c:83:b0:80:57:96:00:c4:fc:89:52:91:
                    5b:20:f1:c8:6b:6c:ae:f9:b7:8a:a0:b9:d7:a2:ee:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CC:8E:B6:2E:50:AC:BF:E6:63:49:60:31:DC:2B:DE:45:E4:3C:C5
            X509v3 Authority Key Identifier:
                keyid:FF:D0:94:95:18:14:08:CB:E8:3F:D3:33:EA:CE:F2:9F:BC:DA:D6:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/FFD09495181408CBE83FD333EACEF29FBCDAD633.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFD09495181408CBE83FD333EACEF29FBCDAD633.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:93:97:fc:04:49:c9:e9:a2:69:14:03:eb:6f:69:9f:15:
         5f:8a:cb:b5:8d:47:00:d9:1c:f5:cb:1b:9c:0a:54:e0:95:78:
         74:e5:fb:ae:07:e6:e3:dc:57:9e:e7:96:74:d5:1b:ba:3a:8e:
         27:9b:f5:08:f9:fd:c6:95:2c:a9:76:4e:a9:9b:de:54:6f:ba:
         eb:8b:e6:03:12:d5:f9:1a:f7:42:b2:f3:30:a1:89:96:b2:77:
         96:3b:56:b5:0b:13:25:14:5a:0b:1a:0d:a7:c0:3f:b7:a5:0c:
         36:03:43:fe:e3:37:35:93:78:2d:dd:75:08:1a:56:d3:99:c2:
         bb:dd:a4:f9:0a:09:b8:a3:15:28:f8:5a:13:43:ae:27:35:1f:
         fe:8f:3c:e5:88:b8:b2:ab:e4:9b:87:54:00:8e:db:66:4b:36:
         2c:92:af:98:f4:91:96:2c:3a:6e:98:4a:46:a5:86:c8:11:00:
         a7:b5:52:a8:9c:66:e8:c1:c4:ba:f7:9c:a1:60:ef:fe:80:22:
         1e:43:34:7d:75:89:78:ab:63:6b:06:26:bb:a5:bc:5c:a7:d4:
         d8:99:11:1c:02:05:26:53:e7:38:ec:71:db:dd:35:dc:bf:e3:
         0d:11:64:b6:13:2c:4d:f3:48:48:71:cb:7a:66:6e:40:7a:1f:
         6a:1c:96:de
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUceXBfx4+jRvPde8uGF1kF73tqywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZC
Q0RBRDYzMzAeFw0yNTExMjgwNzQyMjFaFw0yNjExMjcwNzQ3MjFaMDMxMTAvBgNV
BAMTKEVDQ0M4RUI2MkU1MEFDQkZFNjYzNDk2MDMxREMyQkRFNDVFNDNDQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUu3++bf7mWdZQvxss+PATUr6g
++1wBMH6dJq/KFRMlsa8Gann2nF4+IKxx7Sswcu64QVFN/vkw5FddQvqYq/ttOgu
VVG8pT9gRKFZ1wOKe+3yoLFzv3ZOoHvGFmMSRnrPlSIohYob+dDMrVj+ijVclnSm
wVs0JN+ZhrFmlvbpWffcj4S1eztY0wtZpFAM7Ln0znHHqZSv5aahJCE5WVYUkVPc
K6E8U6dUKwXKBOw5D2ZunTzpi2vf00T05wSQVfyLpohpS5nuw1HrC+NiEd/d909e
3yOJoc/Acqy1441cvzVyeAyDsIBXlgDE/IlSkVsg8chrbK75t4qgudei7nKvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7MyOti5QrL/mY0lgMdwr3kXkPMUwHwYDVR0j
BBgwFoAU/9CUlRgUCMvoP9Mz6s7yn7za1jMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTM5YWMxZi0zOGUyLTQ1YWEtOTdkYy05OTI3OTY0MTFjYzEvMC9GRkQwOTQ5NTE4
MTQwOENCRTgzRkQzMzNFQUNFRjI5RkJDREFENjMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkZEMDk0OTUxODE0MDhDQkU4M0ZEMzMzRUFDRUYyOUZCQ0RB
RDYzMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMzlhYzFmLTM4ZTItNDVhYS05
N2RjLTk5Mjc5NjQxMWNjMS8wLzMxMzEzNjJlMzIzMDM0MmUzMTMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM0MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0zIMwDQYJ
KoZIhvcNAQELBQADggEBAJLIk5f8BEnJ6aJpFAPrb2mfFV+Ky7WNRwDZHPXLG5wK
VOCVeHTl+64H5uPcV57nlnTVG7o6jieb9Qj5/caVLKl2Tqmb3lRvuuuL5gMS1fka
90Ky8zChiZayd5Y7VrULEyUUWgsaDafAP7elDDYDQ/7jNzWTeC3ddQgaVtOZwrvd
pPkKCbijFSj4WhNDric1H/6PPOWIuLKr5JuHVACO22ZLNiySr5j0kZYsOm6YSkal
hsgRAKe1UqicZujBxLr3nKFg7/6AIh5DNH11iXirY2sGJrulvFyn1NiZERwCBSZT
5zjscdvdNdy/4w0RZLYTLE3zSEhxy3pmbkB6H2oclt4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:52:17 2025 by rpki-client