This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa
File:                     3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (raw, json)
Hash identifier:          /XfV+lJcb9X56N7rlaHL4tfgC5CfK4dQVit65blaNYo=
Subject key identifier:   EE:CA:05:EE:37:CD:66:83:F8:50:0B:93:AE:E0:80:99:81:71:60:36
Certificate issuer:       /CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Certificate serial:       52AB74DD906AF44FDEFFD69603D805796221E14B
Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa
Signing time:             Wed 21 Jan 2026 07:32:20 +0000
ROA not before:           Wed 21 Jan 2026 07:27:20 +0000
ROA not after:            Wed 20 Jan 2027 07:32:20 +0000
asID:                     139997
IP address blocks:        114.141.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
                          rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ab:74:dd:90:6a:f4:4f:de:ff:d6:96:03:d8:05:79:62:21:e1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586
        Validity
            Not Before: Jan 21 07:27:20 2026 GMT
            Not After : Jan 20 07:32:20 2027 GMT
        Subject: CN=EECA05EE37CD6683F8500B93AEE0809981716036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:84:aa:92:31:23:15:f0:b8:0d:55:cf:26:8b:
                    00:c0:d1:d5:bc:4c:ef:fd:0b:ab:0a:fa:b1:84:6e:
                    46:15:c5:cf:e0:6a:7c:95:a7:fc:51:85:57:ba:35:
                    88:1a:6d:8f:e1:30:83:a7:dc:24:15:5a:81:23:20:
                    4c:90:77:81:dc:a2:92:e4:11:e3:e9:96:c2:b6:b4:
                    52:5c:19:37:56:f1:68:77:51:f3:82:09:35:77:57:
                    9d:c8:73:06:a9:19:3e:5c:89:5f:df:33:bb:5a:6e:
                    c8:f6:e9:e8:29:41:7a:ca:39:f5:4c:e3:02:09:d4:
                    75:b5:25:91:10:e4:e8:13:8e:81:90:3d:61:8b:f0:
                    cb:24:1b:88:da:63:cd:d2:ec:0a:9b:cb:07:fa:c5:
                    67:2a:a6:fc:05:00:0a:49:c1:b5:a6:a2:2a:2c:6c:
                    a0:44:a9:ea:9c:9d:32:e5:36:fc:55:d8:dd:1c:9e:
                    02:ff:14:43:20:f7:22:09:63:26:83:29:57:96:c2:
                    3e:b4:3f:9e:01:c2:64:9c:5f:b2:ef:9a:21:b1:86:
                    5d:fd:a7:20:59:53:49:7e:bd:e0:c2:85:ef:da:47:
                    d1:da:fb:44:ce:b4:ad:eb:28:50:d7:7c:65:37:ee:
                    78:b1:c5:05:2b:0b:c4:40:4c:56:7c:df:bb:6b:1a:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CA:05:EE:37:CD:66:83:F8:50:0B:93:AE:E0:80:99:81:71:60:36
            X509v3 Authority Key Identifier:
                keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:de:a0:88:9c:59:4a:10:09:bd:a7:eb:9b:77:db:0e:42:
         6b:8c:4b:bf:1a:80:8d:98:5d:e9:61:9c:cf:d5:3c:28:07:00:
         51:b2:5a:d9:8a:f1:d9:5f:4f:05:b1:5b:89:c5:89:5b:fb:86:
         e8:f2:8e:0b:36:93:de:dd:53:1a:73:3f:28:cb:ce:27:09:44:
         18:49:a3:a6:54:cf:10:e1:03:07:64:cd:68:bf:c2:32:48:9c:
         7c:d1:6c:9d:89:0c:17:03:58:21:54:ec:7f:11:8e:e5:07:76:
         ed:cd:a7:3d:1c:d4:2f:5c:f7:5a:a6:f5:f6:e8:54:dd:9c:2f:
         38:e7:93:b4:3d:24:51:88:07:de:b0:a7:e9:d9:09:d1:23:d3:
         4d:31:eb:a3:23:aa:c1:eb:11:fa:96:cb:25:e8:09:a4:66:7f:
         b6:02:63:1e:b0:53:dd:24:e2:d7:33:b3:f9:12:0a:45:5b:b0:
         0a:4b:66:c8:11:df:8f:a3:53:8d:2b:2f:55:b2:df:93:e9:e6:
         14:7b:de:45:54:1b:0b:53:61:ec:ca:21:21:72:2c:10:63:31:
         e6:4a:8a:bf:e5:d5:bf:94:a3:72:c4:39:ad:e1:cf:33:4f:2e:
         f4:f9:e8:59:44:f1:42:ea:81:8e:15:e8:97:30:5f:91:89:32:
         14:67:ab:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:45 2026 by rpki-client