This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
File:                     3136332e35332e3139322e302f32322d3234203d3e203538333831.roa (raw, json)
Hash identifier:          da+6m2Ao8Np4pQ1E/E3mUNsxrZ/EVmn5FouVzksz9c8=
Subject key identifier:   1E:95:53:5C:4D:6D:9E:2D:F3:7C:08:AB:B2:D5:75:0A:2C:6D:F6:62
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       6997E89135AE6CB60FFBF88F9DE1280F7519D74F
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa
Signing time:             Mon 01 Dec 2025 03:01:09 +0000
ROA not before:           Mon 01 Dec 2025 02:56:09 +0000
ROA not after:            Mon 30 Nov 2026 03:01:09 +0000
asID:                     58381
IP address blocks:        163.53.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 08:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:97:e8:91:35:ae:6c:b6:0f:fb:f8:8f:9d:e1:28:0f:75:19:d7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Dec  1 02:56:09 2025 GMT
            Not After : Nov 30 03:01:09 2026 GMT
        Subject: CN=1E95535C4D6D9E2DF37C08ABB2D5750A2C6DF662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:f0:35:35:92:f8:6d:44:1b:66:ae:51:73:
                    ea:04:b3:ab:97:69:f9:d8:3a:ef:60:ce:39:e1:b0:
                    4e:17:6d:fa:71:8b:16:82:6d:1a:70:36:21:97:07:
                    bb:c4:27:75:ed:db:ca:81:c6:a5:86:44:3b:6f:85:
                    64:b1:99:b8:d4:ad:1d:b1:7c:04:25:fb:f3:a0:1d:
                    7b:c0:49:46:a9:c5:a9:ed:9b:96:89:e4:8b:9a:ce:
                    1f:17:c4:d5:11:be:3a:a5:0f:83:c2:51:47:02:98:
                    b4:55:d6:79:fb:24:0e:96:14:b1:52:bd:12:bf:ea:
                    08:fe:ea:0e:17:57:e0:0a:4a:a1:85:65:56:93:ca:
                    15:86:d3:69:56:fe:55:d4:3e:01:83:a8:1e:4e:9b:
                    97:70:d9:cb:15:fc:45:2a:8b:49:2e:7e:c7:cd:41:
                    0c:d9:22:85:a4:7f:21:2c:9c:5c:57:21:67:e4:15:
                    17:61:8a:e8:d9:5a:cf:93:3d:60:d7:5f:ec:db:65:
                    90:f0:24:c7:a5:e5:67:21:ea:02:c4:73:59:6f:59:
                    98:f0:21:75:9c:08:f6:00:b6:54:72:1b:45:ff:85:
                    f1:f3:a6:80:20:61:e8:c0:72:0e:80:b6:ce:19:30:
                    43:ce:55:54:74:1b:fb:6c:4c:52:68:ac:47:b1:2c:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:95:53:5C:4D:6D:9E:2D:F3:7C:08:AB:B2:D5:75:0A:2C:6D:F6:62
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139322e302f32322d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:72:c5:ba:ec:f1:ef:c5:56:41:b8:92:c1:81:0e:4f:a0:b5:
         5d:47:e2:6b:e0:74:05:7b:c5:a0:06:6c:4b:db:90:10:71:eb:
         7a:19:13:0e:e1:7b:a0:0b:6a:74:25:32:2c:ff:f3:60:fc:7c:
         1d:4b:c3:89:c5:73:29:8a:42:f8:d4:e6:27:c4:6d:07:f2:96:
         28:99:ae:ab:17:37:45:d3:cc:c2:b2:fd:ce:44:e7:e3:c7:19:
         8f:42:81:4c:12:f1:8f:45:bf:b0:0b:cd:4b:37:c8:92:9b:d4:
         6f:b1:8c:29:bc:e8:24:0c:fe:43:0d:f1:33:d4:3b:d7:39:ee:
         2f:f1:74:1e:5f:65:29:1a:95:af:80:df:70:a2:33:ac:45:3b:
         78:b0:34:a7:12:f3:6b:47:5c:c5:f4:d2:d6:71:08:d0:bf:2a:
         29:2b:88:86:49:0f:08:f5:62:06:15:66:ab:c1:7d:2e:49:d8:
         f7:61:05:ea:89:71:e0:da:17:a2:c4:d2:99:42:ba:58:8b:b8:
         fa:b9:f1:bd:72:34:bd:1d:fd:16:e4:db:49:10:06:53:9e:a9:
         ff:83:7b:b3:fc:86:d6:9a:19:8e:ff:1c:69:53:b3:65:e5:ae:
         a4:9e:9f:cb:a7:2d:4f:b7:83:2a:2e:40:3c:60:31:cd:88:af:
         00:ab:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:26 2025 by rpki-client