This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e38382e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          VFLKzAScRDGCujPz6753qd99HDl2MoXNma2DWQQ9K8U=
Subject key identifier:   49:29:A5:F0:E9:3A:59:33:C1:B4:53:BA:A9:7A:65:1E:11:16:3D:C2
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       02647C7DAD5BFEF6079E3962A6CD6E72B1D88664
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 29 Dec 2025 03:00:03 +0000
ROA not before:           Mon 29 Dec 2025 02:55:03 +0000
ROA not after:            Mon 28 Dec 2026 03:00:03 +0000
asID:                     38165
IP address blocks:        114.30.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:7c:7d:ad:5b:fe:f6:07:9e:39:62:a6:cd:6e:72:b1:d8:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 29 02:55:03 2025 GMT
            Not After : Dec 28 03:00:03 2026 GMT
        Subject: CN=4929A5F0E93A5933C1B453BAA97A651E11163DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:eb:34:d5:6d:73:1c:81:b7:72:a2:2e:ef:a0:
                    77:36:59:47:46:a8:70:5d:12:06:cc:70:b0:51:f2:
                    f4:aa:20:94:7f:58:5e:06:1c:85:1e:90:43:d7:0d:
                    c9:23:f3:a7:50:de:a9:5e:02:70:64:a7:d9:a0:86:
                    cf:69:e6:79:e8:3f:94:3b:de:54:bd:ed:a7:71:d9:
                    f5:cc:59:f0:7f:be:4f:ec:33:c6:cc:52:a8:53:7e:
                    4a:22:77:9c:54:85:e3:70:15:25:1a:57:53:4a:93:
                    3b:e7:16:ca:9b:01:75:61:08:e4:66:70:70:ed:72:
                    1f:03:24:7a:5c:7f:9b:6e:5e:37:ee:3d:5c:76:16:
                    24:28:72:f1:da:35:ee:f4:16:22:b9:f6:71:4b:15:
                    12:77:ef:8d:32:eb:15:7e:45:53:71:4d:c7:2f:93:
                    e7:6c:7b:92:87:57:c6:89:bb:e8:41:aa:c0:b5:30:
                    ad:02:9e:9c:cc:bf:c7:29:1c:0f:56:dc:e3:25:7d:
                    1f:6a:29:6c:0f:11:02:6b:c6:72:d6:b9:bc:a4:16:
                    f9:88:fb:b8:f1:d8:38:8f:03:93:cb:d4:97:23:eb:
                    a3:65:9e:b3:ca:84:ed:c1:8b:fd:15:8e:fe:76:6c:
                    ef:b0:c6:b9:8c:86:f2:d5:b7:b9:36:ea:49:95:f3:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:A5:F0:E9:3A:59:33:C1:B4:53:BA:A9:7A:65:1E:11:16:3D:C2
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e38382e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:4e:9e:8f:cd:20:6c:51:23:84:2c:c2:d1:32:94:42:36:
         ea:9f:93:b5:e0:ca:67:41:a7:43:ac:1b:c6:8b:48:91:7e:cb:
         40:53:38:2b:d1:69:77:2e:f1:01:23:50:8e:3f:75:e4:7f:26:
         09:63:0d:11:e1:3c:1d:e1:0f:14:12:6a:d6:53:5a:9a:70:e6:
         a8:43:98:ed:7a:14:a8:cf:4e:71:1b:e7:e6:91:7c:8f:c2:b9:
         a2:15:01:98:28:b5:e9:0e:45:79:05:a4:e3:ad:9d:b6:4c:e5:
         4b:eb:c2:0a:28:f4:43:c6:48:63:b3:7f:c8:95:88:50:fb:52:
         7b:ab:84:bd:62:5a:fe:13:5f:2c:da:c9:54:fc:07:22:6b:2d:
         e3:35:3b:18:70:7b:8c:ac:8b:77:60:ac:b3:5a:28:36:2a:82:
         8b:15:f8:05:fb:84:ad:c5:be:7a:8b:77:2a:53:90:9b:a9:4c:
         67:bd:50:4d:63:88:0a:dc:14:16:bc:6a:54:8d:5d:6a:4c:23:
         3c:28:ec:96:52:85:96:bc:72:90:d7:d0:1c:59:20:c3:38:fd:
         33:65:39:4c:fb:1f:31:c9:cf:dd:19:c6:e4:14:6f:39:9a:12:
         36:2f:3c:9d:12:c0:59:8b:47:93:d8:55:fa:18:58:82:ab:81:
         cf:9c:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:12:49 2026 by rpki-client