This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
File:                     323430333a666438303a3a2f33362d3336203d3e203538333639.roa (raw, json)
Hash identifier:          AKvb36mUth0nCHxk/cYiVR7+egCTVtmYGKXbo6cATOU=
Subject key identifier:   88:79:01:4F:74:51:41:AB:39:EE:79:58:DA:C9:19:45:2A:FB:51:49
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       5423F2B63056C28CAEDF0981C1DBEE79E0AF0A9F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa
Signing time:             Fri 07 Nov 2025 11:00:44 +0000
ROA not before:           Fri 07 Nov 2025 10:55:44 +0000
ROA not after:            Fri 06 Nov 2026 11:00:44 +0000
asID:                     58369
IP address blocks:        2403:fd80::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:23:f2:b6:30:56:c2:8c:ae:df:09:81:c1:db:ee:79:e0:af:0a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Nov  7 10:55:44 2025 GMT
            Not After : Nov  6 11:00:44 2026 GMT
        Subject: CN=8879014F745141AB39EE7958DAC919452AFB5149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:c2:d7:8b:3b:ed:89:be:5b:75:fe:5f:1f:
                    83:7d:6b:10:46:3e:f4:0b:3f:78:6a:d6:a9:83:62:
                    b1:64:dc:b7:dc:a0:f2:60:87:73:cd:9d:e8:80:be:
                    35:f7:1b:c9:ae:bd:c1:de:29:27:59:2b:07:fa:8f:
                    7f:c1:62:69:05:4d:6f:81:ad:18:2b:c9:14:da:6b:
                    a4:5c:6b:16:8d:fb:51:a2:c2:56:2b:4d:b8:bb:08:
                    a7:67:b1:b5:60:03:c0:51:1a:56:aa:24:a2:7d:66:
                    3d:ee:9c:81:2a:e9:0c:e3:ad:fd:01:87:5b:2a:8c:
                    74:ca:44:65:ac:d2:b1:5d:08:34:52:3f:e9:fb:49:
                    04:85:fa:d4:f3:f1:74:a2:e4:be:a6:e8:0c:97:8c:
                    bb:27:ea:3c:24:85:2e:fb:a0:df:34:93:ea:e4:2a:
                    38:b7:60:c5:44:b1:51:40:65:ac:95:4a:29:e8:7b:
                    bb:93:06:9f:67:dd:85:34:86:dc:60:54:f7:92:06:
                    3d:54:db:d6:00:85:46:94:e1:a1:c7:4e:f5:cf:65:
                    3b:5e:38:de:91:a3:d0:79:df:a4:27:69:1a:cf:82:
                    b4:81:c2:e6:17:b8:46:9a:f4:61:f0:5f:65:a2:89:
                    c7:70:3c:6e:44:3e:8e:90:6c:dd:5a:95:47:03:01:
                    1f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:01:4F:74:51:41:AB:39:EE:79:58:DA:C9:19:45:2A:FB:51:49
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/323430333a666438303a3a2f33362d3336203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fd80::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:c0:b7:71:86:1a:5a:ee:c6:d6:8c:fa:59:b8:cf:63:e4:
         48:5d:2b:31:d3:1d:ae:ab:50:72:80:91:59:32:21:ed:70:78:
         4b:08:5f:ac:a6:4c:cb:c7:b7:8c:51:12:01:64:89:43:b1:eb:
         f0:62:c0:2a:b9:ca:5d:4e:95:4c:4e:c3:21:9f:5e:72:d9:db:
         dd:3b:f1:97:bf:dd:4a:7f:d6:f0:9e:6d:bf:11:4b:21:51:b0:
         2b:b4:e3:9f:6d:a5:c1:20:6a:74:6a:74:99:61:c2:92:19:a2:
         67:65:ab:bf:a6:67:5b:cc:5f:98:17:01:89:f6:0e:06:29:31:
         c2:36:44:eb:5e:36:10:b0:22:a6:9b:60:21:21:4a:41:7e:55:
         8d:5a:fe:10:6d:b0:bd:4f:44:f2:a6:00:0c:77:c6:74:5c:25:
         c6:87:44:da:6f:92:06:a0:9d:78:d4:68:ce:36:2e:18:dc:f7:
         6e:d8:58:62:46:b9:5e:8f:e2:b2:d8:0e:20:ba:9a:bb:52:54:
         c4:d0:71:ff:ff:67:10:84:b8:5b:0d:c3:63:93:aa:2c:bc:95:
         9a:bd:8b:9e:f0:6a:07:fa:b7:89:bd:48:6c:7b:d4:d6:d9:37:
         ab:21:72:10:61:b0:66:09:01:82:d3:90:8f:f7:3d:7c:98:41:
         d1:06:ad:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:22:40 2025 by rpki-client