This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232362e302f32342d3234203d3e203338353232.roa
File:                     3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (raw, json)
Hash identifier:          5/49liRgKrRjZNgRHRK5jJJ7wjpAUdBAcbJLoooYhxc=
Subject key identifier:   E5:BB:FB:36:75:1B:9F:E7:61:C1:72:50:CE:A5:1F:87:A7:F0:D5:FD
Certificate issuer:       /CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
Certificate serial:       28E51B1E698CC123F5AC2487300F69F555ECCAD6
Authority key identifier: 54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232362e302f32342d3234203d3e203338353232.roa
Signing time:             Fri 19 Dec 2025 11:14:15 +0000
ROA not before:           Fri 19 Dec 2025 11:09:15 +0000
ROA not after:            Fri 18 Dec 2026 11:14:15 +0000
asID:                     38522
IP address blocks:        122.49.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl
                          rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e5:1b:1e:69:8c:c1:23:f5:ac:24:87:30:0f:69:f5:55:ec:ca:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54AB931F513FCC4DCC1FB3D6056474219354E82D
        Validity
            Not Before: Dec 19 11:09:15 2025 GMT
            Not After : Dec 18 11:14:15 2026 GMT
        Subject: CN=E5BBFB36751B9FE761C17250CEA51F87A7F0D5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:77:da:c4:9c:da:4d:10:01:9a:a3:72:3e:
                    eb:d6:f9:8c:bf:bc:5e:8d:bf:0a:5f:a3:4c:f7:d5:
                    b6:3f:df:1f:17:24:75:85:e5:3e:e2:dd:49:ef:43:
                    13:b0:86:e3:fe:14:f5:60:02:3f:71:d3:87:94:f2:
                    2a:f8:55:67:18:ac:e7:dc:ae:cb:10:6c:c7:f9:8e:
                    f0:58:16:66:27:ca:a9:5f:41:91:5e:4f:6f:e1:ab:
                    af:d6:c5:dc:aa:86:35:cf:14:77:9d:eb:9a:3f:9a:
                    07:42:8b:a1:8e:41:9e:5b:16:71:a9:68:17:28:6a:
                    45:9a:16:72:91:3b:c7:32:08:19:72:7c:b7:96:7e:
                    75:e1:05:f5:81:c4:96:14:7f:02:cd:6c:b7:80:f6:
                    b4:15:84:c2:ec:44:7e:da:e5:28:f2:28:36:64:42:
                    3b:2f:71:84:53:81:5d:c5:c8:91:d7:4b:70:6e:ca:
                    9e:05:ed:24:50:5e:1a:ad:fc:b7:30:47:40:7c:cc:
                    72:52:8a:e9:84:82:e0:26:ee:62:93:bc:9a:23:95:
                    d5:fa:7f:43:b6:c2:5f:21:e4:86:bc:3b:1e:a6:72:
                    0f:9e:65:d6:c9:4e:ad:81:d6:0d:ae:b0:88:63:45:
                    ab:d6:6d:49:f6:23:68:58:1d:3c:1b:a0:9d:a9:c0:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:FB:36:75:1B:9F:E7:61:C1:72:50:CE:A5:1F:87:A7:F0:D5:FD
            X509v3 Authority Key Identifier:
                keyid:54:AB:93:1F:51:3F:CC:4D:CC:1F:B3:D6:05:64:74:21:93:54:E8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/54AB931F513FCC4DCC1FB3D6056474219354E82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54AB931F513FCC4DCC1FB3D6056474219354E82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/3132322e34392e3232362e302f32342d3234203d3e203338353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:5c:34:d6:ed:48:ae:de:02:a5:e3:1c:10:53:b6:89:32:
         0d:38:5e:e6:c1:34:7d:f2:78:c0:e2:00:d9:42:be:d8:f8:91:
         67:b5:83:15:cc:27:6b:49:e7:94:62:4c:d1:ee:64:61:88:f7:
         e7:6d:6e:58:ff:53:69:26:47:a4:52:3f:d0:0c:0a:f7:fb:31:
         06:fc:f8:83:60:d2:d2:be:5f:b7:ef:08:34:e0:57:e0:20:ab:
         57:fe:82:68:6f:c1:46:05:2d:54:b2:5d:d1:1f:96:0c:86:e8:
         d2:20:67:c0:7c:a0:7a:56:42:f7:1d:4c:1c:b1:6e:3b:f0:40:
         27:e5:1c:01:c6:10:5a:70:18:6b:7e:ab:ec:67:e7:2b:aa:d7:
         81:ee:56:7a:25:02:15:86:c9:8f:5a:3e:a1:0a:eb:ad:4d:c0:
         7b:88:f0:a3:47:98:5f:8e:55:58:65:d1:d0:bc:7d:38:dc:d0:
         bc:e1:b6:88:de:41:c4:e3:fb:1b:86:3c:fe:1c:5d:57:8a:07:
         28:d5:1f:e6:36:9b:37:b2:66:7b:80:92:46:be:36:29:1d:fb:
         da:34:45:c6:96:4f:46:e4:cf:a9:5c:94:47:f6:bf:a5:ee:75:
         01:43:99:5f:5e:c6:b5:78:19:e6:bb:e1:8b:b2:5a:b0:b3:c4:
         9e:8e:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:43:03 2026 by rpki-client