This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
File:                     3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (raw, json)
Hash identifier:          Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=
Subject key identifier:   15:7A:16:E2:76:C0:CF:27:00:42:54:47:CA:20:09:9C:1E:EA:6D:2E
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       778A98033B2B1E0175B32D7A3D8C4760D55C90E8
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa
Signing time:             Sun 09 Nov 2025 02:00:01 +0000
ROA not before:           Sun 09 Nov 2025 01:55:01 +0000
ROA not after:            Sun 08 Nov 2026 02:00:01 +0000
asID:                     139981
IP address blocks:        202.57.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8a:98:03:3b:2b:1e:01:75:b3:2d:7a:3d:8c:47:60:d5:5c:90:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Nov  9 01:55:01 2025 GMT
            Not After : Nov  8 02:00:01 2026 GMT
        Subject: CN=157A16E276C0CF2700425447CA20099C1EEA6D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:ea:8c:1a:3e:85:02:96:fc:0d:5a:33:3f:
                    29:18:52:5f:1d:4a:d6:e6:b9:6d:2c:cc:8e:59:24:
                    39:78:31:a6:f9:7d:4a:93:e3:da:ff:fb:78:42:66:
                    91:de:75:92:e5:24:4a:1a:ad:5f:f1:d1:dc:8f:67:
                    dc:7b:27:6b:24:65:50:10:77:6a:d8:d1:d5:eb:24:
                    6b:2c:7e:b1:af:d9:18:a0:33:e5:71:f5:a8:90:1b:
                    3b:f3:81:8b:d6:ac:a8:d6:32:fc:a5:cc:87:8d:cd:
                    2d:fb:d3:2f:6d:ce:41:fb:e2:ee:de:7a:4d:ff:9d:
                    32:1d:67:96:c3:b9:12:22:e2:87:ee:86:4e:21:bd:
                    9d:97:49:bd:a6:f5:d8:d7:d0:6f:d6:d0:2c:de:e9:
                    4b:16:17:9e:91:79:68:d2:e7:c5:53:1e:eb:6d:a1:
                    61:3a:4d:bb:34:85:9f:11:ca:cf:47:2e:7c:50:a3:
                    6a:b0:bd:e4:3c:80:11:65:82:aa:95:87:3c:8d:13:
                    00:51:21:df:ff:a0:03:b4:97:a0:17:ab:6c:06:75:
                    2d:90:fd:7d:ea:80:4f:73:12:37:6e:c9:ed:60:01:
                    bc:b8:25:0c:7f:f9:4f:d3:e7:ae:f7:45:ba:98:b6:
                    54:70:fd:01:6e:54:80:1a:99:6d:f5:c8:f9:f5:c6:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7A:16:E2:76:C0:CF:27:00:42:54:47:CA:20:09:9C:1E:EA:6D:2E
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e31392e302f32342d3234203d3e20313339393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:77:29:91:bd:5c:ee:42:9c:74:ba:a6:e1:ed:78:b4:92:
         ed:be:cd:71:0f:a6:c8:0c:56:43:cf:c7:31:a1:f2:2d:61:a0:
         78:bf:d7:24:05:ef:3c:b2:ab:3a:69:5a:28:db:ad:ed:f7:6c:
         49:72:b3:a6:f2:f1:ee:48:03:b3:89:17:4e:24:28:47:34:ee:
         6e:63:fe:fa:6d:0c:6e:01:7b:f5:08:bb:5e:8d:c5:a3:7d:54:
         d7:1e:b4:ce:f7:c8:7c:f0:fd:ac:da:97:ab:6d:a4:ed:73:e5:
         61:77:de:46:0a:da:23:7e:83:27:fd:d4:17:06:48:cf:58:40:
         5b:d3:80:84:9b:78:f8:30:4c:0b:3b:da:c9:54:86:89:df:a6:
         ce:aa:3e:2b:11:b9:8b:59:e4:63:79:31:d5:57:dd:16:2c:3c:
         8e:be:9e:67:2f:d0:8d:22:d7:7d:91:98:3b:c0:b9:0a:68:08:
         6d:c4:49:40:7b:f4:27:c2:69:ed:a8:12:80:06:b8:22:c9:66:
         38:12:0f:b1:18:2f:ab:00:88:5d:59:14:6f:12:80:37:c0:89:
         cb:b4:04:9b:cb:0f:eb:cb:65:70:ff:b2:fe:36:1e:b8:45:a9:
         e4:7a:4f:0b:e9:51:b0:cf:e1:81:36:4f:57:6d:e9:dc:39:8b:
         e5:12:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:05:27 2025 by rpki-client