This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          FEOMpISNixMgQtTRyBlFrAbAvcVU8H7Saw/dgHCHtZY=
Subject key identifier:   A9:64:4F:EF:3A:25:ED:44:16:FB:B3:FC:0B:41:5D:4C:2F:38:B2:16
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       4B613E98CAC0B470AD38DA43A769F23E557BF8B7
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa
Signing time:             Sat 03 Jan 2026 10:00:00 +0000
ROA not before:           Sat 03 Jan 2026 09:55:00 +0000
ROA not after:            Sat 02 Jan 2027 10:00:00 +0000
asID:                     9794
IP address blocks:        115.178.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 19:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:61:3e:98:ca:c0:b4:70:ad:38:da:43:a7:69:f2:3e:55:7b:f8:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jan  3 09:55:00 2026 GMT
            Not After : Jan  2 10:00:00 2027 GMT
        Subject: CN=A9644FEF3A25ED4416FBB3FC0B415D4C2F38B216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:27:59:b0:99:4b:04:e0:c1:87:37:85:cc:
                    f4:35:69:a1:6e:08:d0:c3:41:e8:39:0d:c0:fe:a5:
                    3a:b0:0a:06:b9:86:4b:69:8c:f7:ad:51:95:c2:9b:
                    b4:c9:5a:5f:9a:5e:29:fd:30:51:3a:d8:65:80:e0:
                    54:16:e7:82:81:ac:bb:d5:43:ee:99:f3:11:79:ea:
                    2b:72:10:3d:f0:59:18:0b:61:66:f3:69:ff:e6:81:
                    8e:d1:71:06:17:30:08:1b:a6:b8:b1:03:3c:ad:e3:
                    3e:18:18:60:dd:e4:c9:8c:fd:35:21:9d:db:a7:bb:
                    1d:3a:1b:0b:0e:1d:53:db:dd:76:3b:bf:ef:d3:82:
                    9f:36:cd:c3:65:9f:dc:a1:15:41:c6:a3:d5:b4:b5:
                    ab:17:c0:31:d7:ae:e8:1b:50:30:36:5f:a4:42:79:
                    2c:bd:26:49:c5:11:cc:6a:9e:78:97:a7:48:fc:d2:
                    90:34:dc:f0:5a:2c:02:f8:91:71:de:0f:b9:2a:34:
                    0b:47:e8:b9:67:77:2a:43:75:ff:e3:a8:e6:e1:ca:
                    7d:39:01:c1:24:76:96:aa:ef:dd:d7:70:8a:68:a8:
                    0f:6c:1c:92:26:ce:8c:46:fd:e0:6e:86:85:5f:0d:
                    69:08:1c:1b:c5:db:c7:e0:8f:25:30:bc:6f:01:0c:
                    01:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:4F:EF:3A:25:ED:44:16:FB:B3:FC:0B:41:5D:4C:2F:38:B2:16
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133352e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:74:33:c9:ac:99:d3:ee:89:70:44:40:ed:a8:66:60:a7:79:
         ab:4e:13:ce:20:32:05:36:24:90:df:c1:f9:eb:e3:5e:8f:27:
         27:4f:8b:af:82:61:6a:96:63:2a:81:a7:dd:c1:c9:af:bd:8c:
         ed:37:05:d4:21:b4:d0:3e:8d:28:b4:3f:7f:e7:04:87:4d:8f:
         d1:05:62:3e:87:d2:5a:88:d4:83:a4:dd:cd:60:ff:4f:d5:7b:
         e3:02:3f:83:ff:7e:98:b4:03:95:5b:11:b6:3c:da:5e:3f:40:
         83:5b:ad:61:a0:7a:af:c9:44:95:e5:dc:9b:b0:b7:b6:d2:61:
         78:6a:dd:6f:85:ad:93:6f:b8:4d:b0:ae:d8:b3:6c:ec:09:02:
         f1:66:48:84:b3:2b:d6:70:4b:9f:13:01:86:a2:2c:38:53:a1:
         c4:80:b7:bb:e3:73:56:3b:a3:77:2a:98:3d:34:87:37:c6:74:
         85:d1:f0:4d:b1:0d:e9:4d:9a:30:13:1b:af:f5:84:3f:d2:40:
         22:17:a5:1e:2c:b0:c6:bd:98:47:3a:24:45:09:d5:97:f9:52:
         21:0f:3c:9b:32:b2:77:67:73:3c:58:1e:98:32:c8:3b:7c:70:
         54:98:43:8d:69:44:0d:fa:41:b3:c4:ba:56:2a:4c:d9:d0:f6:
         75:2e:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:56:48 2026 by rpki-client