This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
File:                     3131342e33302e39342e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          kiE3+lYmjpJsdRa9ciV8AF9OmNawxDRSz9mh7tD4R1o=
Subject key identifier:   D1:DA:30:CA:42:0E:C7:0F:23:B9:88:1B:FD:BF:5C:B1:1A:1C:B8:43
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       22F2F980CF2785FD7C2B0715613E0C570073116F
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 29 Dec 2025 03:00:01 +0000
ROA not before:           Mon 29 Dec 2025 02:55:01 +0000
ROA not after:            Mon 28 Dec 2026 03:00:01 +0000
asID:                     38165
IP address blocks:        114.30.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f2:f9:80:cf:27:85:fd:7c:2b:07:15:61:3e:0c:57:00:73:11:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 29 02:55:01 2025 GMT
            Not After : Dec 28 03:00:01 2026 GMT
        Subject: CN=D1DA30CA420EC70F23B9881BFDBF5CB11A1CB843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:ae:6b:67:16:c3:66:b7:da:5a:01:69:8e:
                    2d:b3:ea:cc:58:ad:6d:f1:90:10:7a:28:30:c1:66:
                    4f:d9:fe:34:6f:5a:22:8b:de:7f:d0:94:e8:ba:f5:
                    54:9e:8b:8d:32:20:9e:46:a5:45:c6:8e:be:6c:21:
                    0c:c7:37:22:17:aa:ef:4d:ca:38:13:fd:f7:48:c7:
                    80:a7:48:71:2d:6a:87:c8:70:9b:5d:06:8b:4e:f9:
                    32:65:72:00:b1:8c:07:f1:ff:7b:c2:d4:d6:3e:ff:
                    68:7d:7c:73:da:05:63:10:bc:02:0f:92:52:91:e9:
                    b7:e8:2a:0e:52:15:cc:f9:65:ed:33:40:62:ea:29:
                    1e:94:d1:e1:de:45:ed:54:a1:59:45:38:c1:b9:96:
                    fe:a4:9c:70:a6:08:4c:9b:83:d0:5b:ae:53:67:8d:
                    92:c8:cd:0e:b0:ef:fa:f6:53:66:c7:4d:90:bf:65:
                    bf:a0:dc:5c:56:dc:b4:20:8b:a7:bb:2d:4a:3b:db:
                    e3:ba:7b:8d:8f:bb:5c:45:1b:9b:13:36:b8:28:5b:
                    8a:e9:0e:4a:80:77:c6:0b:dc:89:94:1d:fd:ad:35:
                    fc:b1:30:52:04:a3:1c:46:fc:d2:c3:d7:ce:8b:cf:
                    00:66:bf:13:49:e5:19:ef:47:f6:3a:fb:14:6b:57:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:30:CA:42:0E:C7:0F:23:B9:88:1B:FD:BF:5C:B1:1A:1C:B8:43
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131342e33302e39342e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:0e:5a:86:e4:e3:d4:70:3c:d5:1c:46:c2:d0:f1:e0:73:
         37:c8:b2:6b:d7:39:a7:af:96:ee:f6:7b:63:28:21:41:63:13:
         d9:37:a6:15:1e:33:3f:db:33:f5:48:74:c8:46:4e:aa:02:66:
         c5:27:1b:58:c0:ba:40:a5:c8:09:05:ae:70:05:d2:c8:a4:b4:
         6b:5f:14:da:88:7f:eb:2e:30:db:01:90:42:57:d1:7a:4c:78:
         c2:69:95:05:6b:ee:c0:82:c4:ea:56:2b:51:d6:7d:24:19:97:
         d1:7a:3c:46:55:48:24:54:79:a3:16:63:c0:42:71:58:72:9d:
         0e:92:44:11:4c:d5:c3:8b:a2:c0:bc:36:36:1a:4f:f1:75:de:
         ef:a2:d1:72:4c:03:ce:02:29:d0:eb:eb:da:16:79:b0:b9:2c:
         ad:2d:24:b9:40:3b:38:ba:90:1f:63:00:70:13:6b:a1:83:01:
         6f:24:39:56:a0:dc:e6:7a:b4:75:ab:69:8c:10:8b:d1:c4:18:
         a8:c7:0a:37:55:bc:2d:c6:ec:e5:0f:60:d7:66:3d:66:02:7b:
         d3:0d:24:10:b0:1c:3c:3d:74:6d:68:97:98:c2:5e:e0:cd:2a:
         c3:f6:bb:c0:cd:89:ed:4a:90:67:e5:dc:49:76:ce:8d:71:50:
         48:c3:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:52 2026 by rpki-client