This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          /v2BtEYA2GaIqbz85019bI+UhWXbAYSUe0r0TcaDwE4=
Subject key identifier:   E7:24:A2:92:EF:61:87:C5:B1:D4:DA:40:67:BA:D5:A4:43:BA:22:E5
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       0BD64D3A5CD4E5F90A940630648A83ABA91670B4
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 07 Nov 2025 13:00:01 +0000
ROA not before:           Fri 07 Nov 2025 12:55:01 +0000
ROA not after:            Fri 06 Nov 2026 13:00:01 +0000
asID:                     58369
IP address blocks:        2403:fd80:8000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d6:4d:3a:5c:d4:e5:f9:0a:94:06:30:64:8a:83:ab:a9:16:70:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Nov  7 12:55:01 2025 GMT
            Not After : Nov  6 13:00:01 2026 GMT
        Subject: CN=E724A292EF6187C5B1D4DA4067BAD5A443BA22E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:bd:8e:54:c6:a3:96:a0:2f:95:ed:5b:0c:
                    30:4b:13:92:31:2b:09:a5:15:50:e0:24:af:85:66:
                    39:93:b9:cf:e8:fd:c9:e5:a9:7c:44:8b:de:30:15:
                    ce:97:db:9c:3d:f4:0c:90:18:c2:1c:bb:94:ce:aa:
                    2a:ae:a2:d3:d4:15:b7:2f:5b:3a:21:d8:f1:11:db:
                    f5:00:8c:22:a7:7b:ce:c1:f5:ee:ba:af:3d:fe:1e:
                    ba:e5:90:62:7e:b5:e4:42:ca:3e:7c:88:da:5a:2d:
                    e9:1e:e7:9c:b7:0a:a5:8a:62:84:d0:84:43:f1:f1:
                    ea:6c:14:28:6c:2b:6e:11:fe:de:50:96:5d:ac:2a:
                    90:40:78:3b:78:4c:b0:20:5e:99:fa:8f:37:fe:71:
                    81:95:2c:02:ba:f4:2c:9e:14:6a:c6:64:c6:9c:59:
                    30:b0:3a:c8:0f:ee:f3:28:31:b1:73:8c:62:50:7b:
                    dc:40:b0:a2:1e:76:5b:5a:30:ff:d9:1e:6b:c8:d9:
                    a0:b2:de:dc:95:85:39:18:87:f4:a3:36:07:86:d4:
                    f0:eb:e6:83:df:4b:1f:48:01:8b:39:11:3f:d7:8f:
                    94:27:12:09:55:da:01:24:63:23:db:38:7e:ed:99:
                    4c:16:43:46:ed:22:dc:d4:35:b0:09:67:a6:43:68:
                    d9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:A2:92:EF:61:87:C5:B1:D4:DA:40:67:BA:D5:A4:43:BA:22:E5
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a383030303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:fe:08:a0:30:69:e6:39:e6:35:e9:43:1a:c9:f8:6f:22:
         7e:ca:c6:64:9a:ab:ed:3c:86:04:70:11:58:e2:bb:97:c5:fc:
         cd:06:57:9a:cc:ae:49:c1:cb:98:00:a2:17:53:47:5d:ac:95:
         79:03:3d:f4:e6:73:70:45:25:7d:a7:a9:58:af:bd:fe:f8:19:
         32:7e:36:df:f9:da:43:1d:24:f7:b4:0a:a2:3c:2f:5c:9e:15:
         d7:75:d0:c4:2d:f0:7b:88:a7:1e:06:df:e3:64:48:cd:59:77:
         60:1f:d3:9e:92:c4:6a:10:56:73:53:16:cf:48:34:92:9d:01:
         84:e1:46:cf:93:22:08:aa:89:99:1b:24:d3:f9:dd:f2:cd:76:
         b8:be:15:23:39:0d:f1:55:ec:ae:a2:ef:9f:42:3e:12:82:e2:
         ef:46:54:58:b3:8d:3d:04:8f:09:1e:12:9c:a7:44:7c:96:93:
         0f:08:30:53:77:0d:9c:ab:ae:79:87:b7:d1:c6:7b:66:54:45:
         8d:7b:3d:2f:9f:05:88:02:1a:43:40:93:bc:b1:ec:3e:bb:e7:
         48:3c:dc:3e:08:f1:10:d6:0f:35:a0:dd:12:cc:c8:dd:f8:2f:
         b7:2c:86:1d:7f:cd:ee:11:f8:40:73:14:0e:26:39:d2:a7:84:
         4f:e5:04:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:20:47 2025 by rpki-client