This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34362e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          YxA5d8frdiioKJkZ+eyBBNG2j0c6+K9zJSEZHuxMvKs=
Subject key identifier:   C2:BC:B3:6C:B6:8A:2A:D8:D7:9A:04:BF:E9:7A:A0:22:EA:A1:29:F6
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       021FD5A5B0A327F915B8EE4F68F7F9E1129D3DF9
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 29 Dec 2025 02:00:01 +0000
ROA not before:           Mon 29 Dec 2025 01:55:01 +0000
ROA not after:            Mon 28 Dec 2026 02:00:01 +0000
asID:                     38165
IP address blocks:        116.12.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1f:d5:a5:b0:a3:27:f9:15:b8:ee:4f:68:f7:f9:e1:12:9d:3d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 29 01:55:01 2025 GMT
            Not After : Dec 28 02:00:01 2026 GMT
        Subject: CN=C2BCB36CB68A2AD8D79A04BFE97AA022EAA129F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:2e:6b:1b:6d:81:05:f2:3e:9e:3b:83:9b:
                    24:78:86:1a:7e:52:d2:6d:3f:c2:29:d6:c2:d5:8d:
                    89:9f:16:a4:f0:c0:d4:bc:78:24:34:ba:5c:f0:d9:
                    ef:d8:e7:54:2e:d1:f2:bb:39:21:96:91:79:4d:84:
                    87:0d:a4:e9:3d:d3:16:11:cc:8b:57:ab:b2:a7:97:
                    42:f8:8f:6d:7d:e0:5b:bd:56:11:30:02:c0:b0:41:
                    ba:fc:eb:ce:a5:c5:ef:b3:d3:f3:9a:db:ce:6a:72:
                    ae:fd:44:46:20:8e:09:a5:a0:b7:49:d6:de:ea:99:
                    85:32:bd:21:d5:29:d2:4f:86:4c:24:56:0c:cb:f4:
                    ef:2f:aa:46:5e:44:03:21:b1:77:a0:19:a8:8e:bb:
                    b6:29:c6:43:9e:77:b1:fd:8c:48:71:fb:e7:49:b8:
                    9e:c1:99:03:8a:2e:33:87:ec:e0:70:46:fe:f7:35:
                    7c:ec:df:ea:18:9b:35:41:1f:bb:c8:a5:cb:ad:75:
                    59:2a:5c:be:1f:04:9a:97:7a:48:aa:77:a2:e8:2f:
                    c3:43:92:7b:d0:ee:12:f3:43:46:7e:0c:8c:f4:82:
                    0f:f7:72:59:93:68:36:0e:d2:7c:c0:49:18:84:80:
                    d0:bf:81:d7:59:d4:24:2a:e4:ae:8a:d5:68:57:99:
                    71:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BC:B3:6C:B6:8A:2A:D8:D7:9A:04:BF:E9:7A:A0:22:EA:A1:29:F6
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:65:07:a6:4a:27:eb:7d:f9:51:d3:7f:ee:c3:63:44:be:e8:
         96:55:74:83:fe:a9:69:0a:0e:11:2b:c2:57:0e:70:c1:15:7c:
         80:44:2a:17:5e:07:47:9c:c4:cb:83:b1:4a:17:c2:ef:3e:51:
         97:3c:5a:0c:a3:d6:e0:af:11:66:3f:fa:d9:b9:b2:8b:b4:14:
         47:99:0e:5d:9e:44:bb:a7:a9:df:01:00:8e:0b:57:50:3e:bd:
         dd:49:cc:f9:9c:9c:58:94:92:d7:4d:5f:0f:72:a0:dd:06:ee:
         00:e5:1e:3c:b5:d1:76:ed:b9:6d:5c:c7:b9:94:a3:36:55:c7:
         65:54:d9:5c:24:1a:1c:3f:a2:f3:df:e5:c0:bf:54:5e:05:8e:
         14:e0:d0:82:71:f1:16:e2:8c:6b:67:ed:d6:32:68:bd:2b:2a:
         29:23:83:25:b8:df:9a:d3:88:36:7a:4d:db:61:b6:85:56:60:
         c7:29:a4:eb:b0:d7:d9:9e:a6:fc:c4:ba:f7:c5:34:2e:29:d4:
         61:65:f1:5d:77:03:25:0c:b2:37:85:c4:2a:c8:fc:5b:c4:79:
         34:ae:aa:d4:bb:c4:d9:ee:b6:71:73:fa:b2:08:40:f9:e0:0f:
         1e:61:ca:60:68:6b:08:8e:39:92:14:58:f3:31:63:8c:18:9e:
         d8:04:6a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:55:53 2026 by rpki-client