This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34352e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          UmB2X5v4VIH+98divp59evKIvCGKidZHcV9Jdt+T6t4=
Subject key identifier:   1B:EE:5E:B2:8F:D6:07:62:C8:43:4C:16:66:8E:1F:73:AB:2F:08:9D
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       012E673306662F7CABAC29B4A2BD6C32A4599A8A
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 29 Dec 2025 03:00:01 +0000
ROA not before:           Mon 29 Dec 2025 02:55:01 +0000
ROA not after:            Mon 28 Dec 2026 03:00:01 +0000
asID:                     38165
IP address blocks:        116.12.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2e:67:33:06:66:2f:7c:ab:ac:29:b4:a2:bd:6c:32:a4:59:9a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 29 02:55:01 2025 GMT
            Not After : Dec 28 03:00:01 2026 GMT
        Subject: CN=1BEE5EB28FD60762C8434C16668E1F73AB2F089D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:43:b4:4c:28:dd:d1:b9:e3:90:4e:d8:bb:
                    fb:86:65:41:0a:7f:4b:4f:44:fa:64:e2:18:24:1c:
                    20:05:be:b8:8d:cb:ce:05:13:0e:2e:0a:e1:d8:56:
                    65:b1:a8:01:b8:0d:29:8e:59:63:b1:b8:85:9c:0e:
                    42:4b:80:c1:69:69:c4:fe:ad:f1:7e:92:dc:dd:47:
                    19:a1:c3:26:08:8c:e5:3c:8b:b5:7e:1a:e6:74:3b:
                    d6:aa:08:19:f7:51:4c:71:bc:ae:8e:35:d4:0b:ef:
                    88:df:32:04:ff:98:c9:6e:a8:e4:ef:7e:ca:58:df:
                    dd:f8:05:c4:dd:28:b7:25:98:5b:26:e2:86:cf:6a:
                    0a:d0:86:b1:1c:9e:2f:59:b3:dd:80:de:5e:11:01:
                    f4:27:47:61:76:1a:fb:56:05:2b:d0:d2:6a:09:a5:
                    0a:69:56:b9:6b:ec:40:0a:44:68:1a:9b:42:a4:f8:
                    4a:1e:d5:8a:a1:c7:1b:ba:3a:94:44:64:fe:40:e2:
                    81:a5:7f:75:89:11:e0:e6:82:29:56:1c:18:8e:d6:
                    c0:eb:46:16:9f:04:78:ab:3f:bb:bc:cb:39:62:16:
                    67:f5:66:91:c3:86:ff:5e:f4:b0:9a:bc:4c:b1:24:
                    63:23:b2:ce:fd:93:25:73:56:c8:2d:39:99:6b:c0:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EE:5E:B2:8F:D6:07:62:C8:43:4C:16:66:8E:1F:73:AB:2F:08:9D
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34352e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:8e:8d:93:cb:8c:ac:f6:15:33:2a:d4:2f:92:f3:53:cd:df:
         ff:0e:e4:1a:66:d0:2b:54:32:ce:21:81:ed:d4:8c:29:a5:24:
         f7:ce:48:81:1c:a0:11:a8:08:f8:81:5d:d3:a5:ef:75:de:60:
         5a:c5:d5:62:e0:64:b0:2e:1d:98:fe:6c:6f:d9:51:a1:6b:20:
         f9:dc:d3:62:aa:8d:9c:f1:38:e1:03:1d:5c:bd:71:f6:98:c5:
         ba:e5:59:4f:3d:b4:d4:aa:54:cd:fc:3c:39:4b:94:7f:f2:cb:
         4c:64:76:b9:f0:23:94:5a:9b:92:18:f1:33:f2:7c:62:e8:7a:
         bc:3a:36:77:96:06:e1:ab:fd:bb:88:9c:e1:c0:ce:a7:ce:48:
         0f:d8:03:11:0e:72:48:b9:78:20:a7:12:50:89:2e:e4:e0:63:
         76:e4:5e:a8:3f:de:08:67:0b:20:65:70:83:50:6c:15:77:b2:
         d4:aa:c8:f6:0d:1b:6b:75:95:66:10:be:d9:d3:2b:ed:88:51:
         4e:d0:91:43:db:a9:bf:09:2a:35:b4:40:fd:69:a2:42:1f:18:
         6d:30:d0:4d:e4:94:91:d1:9f:d0:89:c6:34:23:e7:f3:9d:4e:
         ca:65:ef:26:23:85:29:56:7e:a8:54:28:0b:0d:7a:3e:5c:3c:
         f4:83:29:99
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAS5nMwZmL3yrrCm0or1sMqRZmoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNTEyMjkwMjU1MDFaFw0yNjEyMjgwMzAwMDFaMDMxMTAvBgNV
BAMTKDFCRUU1RUIyOEZENjA3NjJDODQzNEMxNjY2OEUxRjczQUIyRjA4OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNc0O0TCjd0bnjkE7Yu/uGZUEK
f0tPRPpk4hgkHCAFvriNy84FEw4uCuHYVmWxqAG4DSmOWWOxuIWcDkJLgMFpacT+
rfF+ktzdRxmhwyYIjOU8i7V+GuZ0O9aqCBn3UUxxvK6ONdQL74jfMgT/mMluqOTv
fspY3934BcTdKLclmFsm4obPagrQhrEcni9Zs92A3l4RAfQnR2F2GvtWBSvQ0moJ
pQppVrlr7EAKRGgam0Kk+Eoe1Yqhxxu6OpREZP5A4oGlf3WJEeDmgilWHBiO1sDr
RhafBHirP7u8yzliFmf1ZpHDhv9e9LCavEyxJGMjss79kyVzVsgtOZlrwIrnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUG+5eso/WB2LIQ0wWZo4fc6svCJ0wHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNjJlMzEzMjJlMzQzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0DC0wDQYJKoZIhvcN
AQELBQADggEBAFOOjZPLjKz2FTMq1C+S81PN3/8O5Bpm0CtUMs4hge3UjCmlJPfO
SIEcoBGoCPiBXdOl73XeYFrF1WLgZLAuHZj+bG/ZUaFrIPnc02KqjZzxOOEDHVy9
cfaYxbrlWU89tNSqVM38PDlLlH/yy0xkdrnwI5Ram5IY8TPyfGLoerw6NneWBuGr
/buInOHAzqfOSA/YAxEOcki5eCCnElCJLuTgY3bkXqg/3ghnCyBlcINQbBV3stSq
yPYNG2t1lWYQvtnTK+2IUU7QkUPbqb8JKjW0QP1pokIfGG0w0E3klJHRn9CJxjQj
5/OdTspl7yYjhSlWfqhUKAsNej5cPPSDKZk=
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:56 2026 by rpki-client