This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3137302e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          +0ZLXMjflCG5nZva08SSEPQM/bx3qZsSJSdh0Evb5/g=
Subject key identifier:   9B:69:EA:38:95:2B:42:D4:C9:6F:86:FE:99:F5:FA:D7:F3:BA:7D:9C
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       1B4943E9DC4ADA18F04D1C8D987D158320346E65
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa
Signing time:             Sun 01 Feb 2026 05:48:31 +0000
ROA not before:           Sun 01 Feb 2026 05:43:31 +0000
ROA not after:            Sun 31 Jan 2027 05:48:31 +0000
asID:                     23671
IP address blocks:        111.92.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 07:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:49:43:e9:dc:4a:da:18:f0:4d:1c:8d:98:7d:15:83:20:34:6e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Feb  1 05:43:31 2026 GMT
            Not After : Jan 31 05:48:31 2027 GMT
        Subject: CN=9B69EA38952B42D4C96F86FE99F5FAD7F3BA7D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:e3:d4:b9:3b:d4:d6:46:f4:03:51:77:47:
                    19:23:63:66:05:58:5e:68:98:89:ce:9e:d6:b0:a0:
                    14:3e:eb:22:5f:5e:9f:35:f2:3d:e6:59:23:66:67:
                    21:5f:b2:86:36:a8:c7:cd:eb:e9:d4:f4:4d:a1:b4:
                    d5:d4:12:82:95:9b:f0:f3:c3:ad:b1:36:73:68:3e:
                    bc:83:a3:15:28:21:b6:cd:35:75:1d:5a:83:f1:da:
                    9a:09:30:e6:07:db:c8:fb:b9:02:36:4a:8b:91:19:
                    b7:c7:f9:b4:8e:02:94:61:f0:7b:48:c3:0f:35:ad:
                    f5:2a:35:a8:2f:e9:5c:cd:dc:5e:f0:7d:2f:06:d5:
                    5d:8f:ec:ca:7f:12:b1:0a:e8:dc:49:bf:ce:c8:75:
                    a3:fd:67:bf:50:b3:40:df:5f:e6:70:7c:c7:a3:f9:
                    47:c0:08:fd:bc:c3:74:7f:7d:04:59:f9:20:4a:1f:
                    9e:fe:ee:ed:bd:18:99:65:b4:e8:8c:f1:d6:89:38:
                    73:7d:bd:94:62:75:14:86:62:b7:02:93:9d:a2:ad:
                    0c:c3:af:ce:ef:19:94:66:5c:ad:6c:11:df:24:9e:
                    53:8d:7d:7c:52:8c:de:3e:99:bb:9c:23:78:a9:de:
                    d0:25:28:a2:47:db:81:4d:6e:da:a9:dc:44:09:8f:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:69:EA:38:95:2B:42:D4:C9:6F:86:FE:99:F5:FA:D7:F3:BA:7D:9C
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137302e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:40:fc:da:78:95:eb:6a:98:71:d4:43:53:85:c6:78:fd:79:
         04:df:a9:80:70:5e:e5:b1:73:d8:7f:80:fb:da:38:d8:43:4e:
         11:2e:8b:f1:cb:b2:78:d1:ef:ad:a9:b5:89:00:e7:94:a1:88:
         53:b8:8b:19:71:2f:54:95:2d:b1:12:5c:5a:df:dc:ca:23:35:
         f1:58:0b:8f:90:0e:98:31:9b:47:e4:fb:6e:48:3e:8c:01:bd:
         f7:68:55:11:bf:1b:8c:a7:94:d7:a8:0c:94:ac:2b:12:81:07:
         21:07:bb:33:73:4f:19:f3:9a:e3:8f:6b:a7:38:75:c6:24:1e:
         ed:bc:a8:55:75:cf:36:60:d7:46:50:06:0d:19:e4:32:3d:d2:
         29:ab:ea:d5:5b:71:6c:22:12:a3:db:a1:63:10:3b:7e:97:2e:
         4d:a5:7a:81:bf:5b:0b:ee:29:76:e8:12:9d:da:19:0b:b7:02:
         77:1b:b4:f7:72:c5:9d:35:e6:ba:17:61:c7:de:7b:ff:17:36:
         35:68:2a:0f:fc:8b:10:e5:9c:c9:da:fc:a8:22:9b:51:4e:b6:
         5f:00:82:44:f7:c3:f5:13:e2:da:01:f9:76:d7:11:aa:d1:76:
         57:c6:ec:23:bb:12:7a:88:6e:58:9a:52:55:a7:25:a8:9c:88:
         72:22:66:e9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUG0lD6dxK2hjwTRyNmH0VgyA0bmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yNjAyMDEwNTQzMzFaFw0yNzAxMzEwNTQ4MzFaMDMxMTAvBgNV
BAMTKDlCNjlFQTM4OTUyQjQyRDRDOTZGODZGRTk5RjVGQUQ3RjNCQTdEOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPe+PUuTvU1kb0A1F3RxkjY2YF
WF5omInOntawoBQ+6yJfXp818j3mWSNmZyFfsoY2qMfN6+nU9E2htNXUEoKVm/Dz
w62xNnNoPryDoxUoIbbNNXUdWoPx2poJMOYH28j7uQI2SouRGbfH+bSOApRh8HtI
ww81rfUqNagv6VzN3F7wfS8G1V2P7Mp/ErEK6NxJv87IdaP9Z79Qs0DfX+ZwfMej
+UfACP28w3R/fQRZ+SBKH57+7u29GJlltOiM8daJOHN9vZRidRSGYrcCk52irQzD
r87vGZRmXK1sEd8knlONfXxSjN4+mbucI3ip3tAlKKJH24FNbtqp3EQJj+etAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUm2nqOJUrQtTJb4b+mfX61/O6fZwwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMxMzEzMTJlMzkzMjJlMzEzNzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG9cqjANBgkqhkiG
9w0BAQsFAAOCAQEAcED82niV62qYcdRDU4XGeP15BN+pgHBe5bFz2H+A+9o42ENO
ES6L8cuyeNHvram1iQDnlKGIU7iLGXEvVJUtsRJcWt/cyiM18VgLj5AOmDGbR+T7
bkg+jAG992hVEb8bjKeU16gMlKwrEoEHIQe7M3NPGfOa449rpzh1xiQe7byoVXXP
NmDXRlAGDRnkMj3SKavq1VtxbCISo9uhYxA7fpcuTaV6gb9bC+4pdugSndoZC7cC
dxu093LFnTXmuhdhx957/xc2NWgqD/yLEOWcydr8qCKbUU62XwCCRPfD9RPi2gH5
dtcRqtF2V8bsI7sSeohuWJpSVaclqJyIciJm6Q==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:42:51 2026 by rpki-client