This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          AEoX+uo/7A//318jQHObGipGbmWQnrGVjmU+2/4LHbg=
Subject key identifier:   82:52:6A:B2:EC:66:54:6E:CF:4E:E3:30:8E:7D:66:2A:91:1C:C1:C1
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       7973122B1BF6D9C2DE2EF5EE207DCDE1017B8BB7
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 29 Dec 2025 03:00:03 +0000
ROA not before:           Mon 29 Dec 2025 02:55:03 +0000
ROA not after:            Mon 28 Dec 2026 03:00:03 +0000
asID:                     38165
IP address blocks:        116.12.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:73:12:2b:1b:f6:d9:c2:de:2e:f5:ee:20:7d:cd:e1:01:7b:8b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 29 02:55:03 2025 GMT
            Not After : Dec 28 03:00:03 2026 GMT
        Subject: CN=82526AB2EC66546ECF4EE3308E7D662A911CC1C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7b:04:b1:da:e3:a9:85:bd:bf:52:40:29:bd:
                    3e:cc:73:da:0c:c0:3b:64:4b:a3:36:91:02:2c:c0:
                    e9:21:79:f4:68:32:c5:ce:11:ee:90:f6:80:c6:8a:
                    39:f6:24:0f:aa:61:b9:84:50:a6:c6:42:70:32:e5:
                    57:2f:95:6b:20:62:5e:0c:34:cd:30:bf:a0:44:21:
                    94:0b:79:95:7c:20:42:da:ec:4a:b2:01:42:87:bd:
                    82:d9:27:bb:bc:ca:bf:a2:ae:50:40:bb:74:70:1c:
                    62:9e:29:18:81:d6:a9:2a:df:62:5b:25:63:43:26:
                    a0:ab:6f:df:8d:54:64:f3:e3:0e:07:f6:0e:4a:21:
                    54:f9:9f:ea:09:19:ed:78:b3:e6:81:5e:f7:ee:fd:
                    42:d2:db:d4:85:75:d1:92:db:e0:71:02:22:20:cc:
                    20:90:a2:2e:5b:98:8a:f3:72:e3:5f:f0:bf:21:4c:
                    7e:36:b2:98:6b:66:40:0e:7a:53:d1:f9:34:e4:5d:
                    e6:ff:71:0f:d3:56:ea:0f:7f:f8:6e:c3:80:8f:bb:
                    35:e5:fd:85:ce:9c:69:8a:61:7c:04:d7:a7:9f:29:
                    02:f3:23:cd:1b:1f:4c:2b:44:87:59:a6:e1:8d:57:
                    4a:dc:ba:31:9e:02:d3:4a:ea:f2:c2:94:25:e0:24:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:52:6A:B2:EC:66:54:6E:CF:4E:E3:30:8E:7D:66:2A:91:1C:C1:C1
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:d9:3d:65:a0:77:08:eb:0f:cb:e1:d6:b2:42:86:69:ab:
         29:2f:a6:15:da:30:05:8c:78:4e:af:11:34:5d:79:c0:80:fb:
         43:61:c1:f5:b5:28:de:37:b9:0c:7d:42:0d:5e:58:d7:44:28:
         26:c9:9d:0c:04:7c:d9:b6:6c:e9:ac:c3:bc:4a:44:f1:bd:02:
         3a:65:35:63:4e:05:14:80:92:5e:fd:dd:c4:85:9b:5b:27:71:
         b4:0f:30:47:1d:ba:6f:2d:0c:62:ae:2e:b9:d0:39:03:76:ca:
         22:6a:8b:e9:ca:8a:ae:93:52:92:7f:d5:eb:18:80:35:b7:98:
         d3:99:fa:0e:b9:75:17:14:0d:b9:59:7d:aa:be:41:1e:01:8a:
         85:26:df:7e:63:23:ea:75:2d:96:39:3b:af:b5:9c:99:24:7e:
         92:0e:a0:ba:21:09:cb:0c:4c:14:69:18:9a:0e:a6:77:32:ab:
         2c:4d:d5:7f:54:7b:ce:8e:06:5e:3e:95:8b:45:f2:1b:13:0b:
         b7:c6:97:6a:4b:2d:a3:d8:ee:7d:54:3a:b0:0e:c6:ee:7b:eb:
         58:1b:af:3e:aa:78:59:f8:24:23:1b:3f:58:31:51:1c:73:92:
         40:c7:40:15:91:df:c4:19:9e:57:8c:be:c9:68:4c:2a:e1:9f:
         96:1f:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:14:47 2026 by rpki-client