This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
File:                     3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (raw, json)
Hash identifier:          NbVoKFvZA9x7Z9SpGO7eJhP/PrQvPjMB+U8rXLGAP4o=
Subject key identifier:   64:ED:92:82:AA:42:91:0D:73:C9:24:02:88:BF:57:23:03:DC:60:CE
Certificate issuer:       /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Certificate serial:       140B68A96B0349A210F93BB1673F93FF8512A1E4
Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
Signing time:             Wed 28 Jan 2026 10:00:01 +0000
ROA not before:           Wed 28 Jan 2026 09:55:01 +0000
ROA not after:            Wed 27 Jan 2027 10:00:01 +0000
asID:                     152014
IP address blocks:        203.175.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl
                          rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 20:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0b:68:a9:6b:03:49:a2:10:f9:3b:b1:67:3f:93:ff:85:12:a1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
        Validity
            Not Before: Jan 28 09:55:01 2026 GMT
            Not After : Jan 27 10:00:01 2027 GMT
        Subject: CN=64ED9282AA42910D73C9240288BF572303DC60CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f5:5d:28:3b:d9:b8:49:ba:9e:2b:87:3c:9a:
                    2a:8a:f4:da:32:b7:7d:b3:b4:df:92:f2:0b:a1:aa:
                    37:80:01:17:9e:7a:f5:fe:bd:16:3f:8d:7c:ae:46:
                    f6:88:08:fb:4b:1b:59:1e:f8:44:69:ae:0a:30:42:
                    27:c6:c2:d5:e0:95:3d:5b:b4:39:5a:0b:df:7b:c9:
                    1f:3d:bd:54:d3:1e:c4:3c:15:bc:83:58:68:0a:34:
                    1f:c7:36:bc:d1:7c:b1:24:b3:56:66:ea:8b:3f:ea:
                    48:47:41:96:3b:c1:bc:f3:b8:3b:b0:92:4e:7a:f9:
                    3e:f9:f0:9a:f4:72:6a:0b:6f:e3:0d:b8:42:cb:52:
                    5f:ac:96:b1:84:ef:ba:39:87:d5:50:70:f0:00:8a:
                    f4:7d:fb:2f:9d:30:9f:55:bf:1b:62:8d:a4:4a:5f:
                    b3:e2:29:9b:64:1e:1a:bc:e1:90:30:c6:e7:8b:b0:
                    a7:70:56:c6:32:de:be:9a:2c:61:29:de:14:b2:8d:
                    b2:a8:c0:17:3c:46:fb:1c:ac:a4:f4:2b:97:5e:56:
                    cf:8f:0a:df:73:86:8c:56:db:2f:d3:10:df:da:62:
                    e3:63:5c:e6:af:80:31:fa:90:a9:2e:90:7a:a4:00:
                    0b:71:3e:82:01:6e:47:72:7d:07:7f:cf:36:0f:df:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:ED:92:82:AA:42:91:0D:73:C9:24:02:88:BF:57:23:03:DC:60:CE
            X509v3 Authority Key Identifier:
                keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:55:df:99:5c:ce:a7:d9:df:02:43:5f:75:20:b5:d5:61:b2:
         53:a1:cc:d9:ea:64:7c:f0:cb:71:35:68:bb:4f:3e:e2:34:5c:
         4b:ce:07:b0:2b:1c:db:5d:4f:6f:a7:17:3f:07:47:4a:a4:d5:
         05:b8:f9:ca:ea:ba:97:fe:29:2c:2b:98:65:6a:fb:97:2d:4a:
         5e:55:2c:9b:d3:49:44:8d:9e:e9:6e:ac:ac:1d:2f:c2:d9:35:
         22:fc:9b:fb:37:c5:d2:0f:12:41:d5:7f:c8:39:c8:53:aa:aa:
         25:6c:50:52:49:91:ba:4d:ee:ff:ab:6f:ee:98:ef:70:8e:f7:
         0c:43:38:48:92:e9:36:af:df:cc:d0:51:02:3c:2c:5b:82:77:
         7c:ea:b4:67:2f:95:8b:4f:2d:c3:29:da:e8:2b:62:d5:b5:38:
         5c:51:ea:42:2e:cd:3e:4e:f2:00:88:18:71:4f:c7:47:ae:22:
         24:94:22:8d:b2:56:82:7c:b2:e5:bc:5c:98:bd:b7:e6:78:83:
         6b:14:f8:19:32:49:f0:6b:af:6f:17:26:3f:72:4b:51:f5:9c:
         33:45:01:0f:55:7f:9f:5f:71:4d:c2:ca:7d:03:b1:36:b6:ff:
         4a:0d:b3:de:7f:b1:28:7d:73:7b:4d:17:ac:3f:51:a2:ca:28:
         ff:21:db:05
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFAtoqWsDSaIQ+TuxZz+T/4USoeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2
RTMwRTgwODAeFw0yNjAxMjgwOTU1MDFaFw0yNzAxMjcxMDAwMDFaMDMxMTAvBgNV
BAMTKDY0RUQ5MjgyQUE0MjkxMEQ3M0M5MjQwMjg4QkY1NzIzMDNEQzYwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg9V0oO9m4SbqeK4c8miqK9Noy
t32ztN+S8guhqjeAAReeevX+vRY/jXyuRvaICPtLG1ke+ERprgowQifGwtXglT1b
tDlaC997yR89vVTTHsQ8FbyDWGgKNB/HNrzRfLEks1Zm6os/6khHQZY7wbzzuDuw
kk56+T758Jr0cmoLb+MNuELLUl+slrGE77o5h9VQcPAAivR9+y+dMJ9VvxtijaRK
X7PiKZtkHhq84ZAwxueLsKdwVsYy3r6aLGEp3hSyjbKowBc8RvscrKT0K5deVs+P
Ct9zhoxW2y/TEN/aYuNjXOavgDH6kKkukHqkAAtxPoIBbkdyfQd/zzYP30YxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUZO2SgqpCkQ1zySQCiL9XIwPcYM4wHwYDVR0j
BBgwFoAUGRGuQYRd7i64hJDFdn48Gm4w6AgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
OTU3ZmE1ZC1mYTY3LTRlNmItODkyMC1jNDc0N2FkYjMwYmIvMC8xOTExQUU0MTg0
NURFRTJFQjg4NDkwQzU3NjdFM0MxQTZFMzBFODA4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkxMUFFNDE4NDVERUUyRUI4ODQ5MEM1NzY3RTNDMUE2RTMw
RTgwOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5NTdmYTVkLWZhNjctNGU2Yi04
OTIwLWM0NzQ3YWRiMzBiYi8wLzMyMzAzMzJlMzEzNzM1MmUzMTMwMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzIzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHLr2YwDQYJ
KoZIhvcNAQELBQADggEBALhV35lczqfZ3wJDX3UgtdVhslOhzNnqZHzwy3E1aLtP
PuI0XEvOB7ArHNtdT2+nFz8HR0qk1QW4+crqupf+KSwrmGVq+5ctSl5VLJvTSUSN
nulurKwdL8LZNSL8m/s3xdIPEkHVf8g5yFOqqiVsUFJJkbpN7v+rb+6Y73CO9wxD
OEiS6Tav38zQUQI8LFuCd3zqtGcvlYtPLcMp2ugrYtW1OFxR6kIuzT5O8gCIGHFP
x0euIiSUIo2yVoJ8suW8XJi9t+Z4g2sU+BkySfBrr28XJj9yS1H1nDNFAQ9Vf59f
cU3Cyn0DsTa2/0oNs95/sSh9c3tNF6w/UaLKKP8h2wU=
-----END CERTIFICATE-----
Generated at Mon Feb 2 13:01:29 2026 by rpki-client