This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa
File:                     3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (raw, json)
Hash identifier:          XWuaYLYmlK9hExFjkzInUKqGyFC8YbxMTIf12TewHWo=
Subject key identifier:   0A:FA:93:65:06:CC:3D:00:4A:D8:99:42:A1:7C:30:55:51:5F:FD:C6
Certificate issuer:       /CN=C42304B7D0E216E2F73305D25EBA185E1A321586
Certificate serial:       4C7BFEA725934A8644A51D4D26A3A793AF910C03
Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa
Signing time:             Wed 21 Jan 2026 07:32:45 +0000
ROA not before:           Wed 21 Jan 2026 07:27:45 +0000
ROA not after:            Wed 20 Jan 2027 07:32:45 +0000
asID:                     139997
IP address blocks:        114.141.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl
                          rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7b:fe:a7:25:93:4a:86:44:a5:1d:4d:26:a3:a7:93:af:91:0c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586
        Validity
            Not Before: Jan 21 07:27:45 2026 GMT
            Not After : Jan 20 07:32:45 2027 GMT
        Subject: CN=0AFA936506CC3D004AD89942A17C3055515FFDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:da:ed:ad:58:99:be:2e:c4:2b:4f:36:14:
                    cc:67:90:04:06:fa:52:d4:f7:93:f6:b0:88:a3:51:
                    a2:99:b5:51:8c:e6:f6:1d:72:91:cf:b6:b4:cf:5d:
                    17:4f:50:0c:d6:b1:57:f3:5e:b7:df:f1:dd:18:0a:
                    7c:f4:ec:22:98:f4:05:3a:a2:06:58:f5:ed:87:f2:
                    f1:9d:8e:5c:6d:e9:0d:95:d8:5b:d7:10:95:e9:34:
                    fd:83:cb:c3:cf:1e:5c:66:2f:c3:11:7e:ff:82:cc:
                    9f:7b:6a:d2:43:7f:61:fc:be:5c:5c:95:2c:bc:70:
                    cb:c8:d4:04:b2:ef:fd:17:5d:38:2e:ad:2f:dd:f3:
                    f5:7a:df:b8:33:2d:99:47:ef:ce:df:d3:07:3a:90:
                    6f:8e:f3:99:8a:59:81:00:d0:a0:70:4c:bb:79:1d:
                    21:52:e2:f7:19:72:9b:fb:41:39:50:92:07:90:fd:
                    c9:bb:0b:eb:ad:9c:3f:8a:e3:d5:c2:94:11:e1:39:
                    e1:34:17:e4:f6:79:06:25:f8:f5:36:25:a4:ee:8c:
                    e5:64:65:e9:9d:46:b4:12:1a:ab:f5:4f:0f:83:e2:
                    1e:64:77:41:88:09:92:d0:3b:78:66:06:94:32:ba:
                    b2:bc:9b:ef:5c:1a:65:bd:3d:78:60:45:e7:c5:03:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FA:93:65:06:CC:3D:00:4A:D8:99:42:A1:7C:30:55:51:5F:FD:C6
            X509v3 Authority Key Identifier:
                keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.141.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:29:a2:83:83:c0:b9:fd:58:04:2a:30:65:24:46:f6:20:7e:
         64:2c:d0:39:8a:91:c3:f0:c6:a8:03:9a:bb:52:6d:4d:75:32:
         e6:d6:d3:6b:29:09:3a:21:25:4c:91:91:5d:cf:c3:3c:d7:16:
         75:9f:e4:21:b5:ed:c3:63:a2:4f:60:51:67:f4:ec:7c:74:a4:
         c0:0b:55:fd:0b:55:0d:27:4c:8a:e6:e9:c9:9d:95:fb:54:b6:
         d2:3d:0c:3d:08:63:e5:88:b4:a8:82:27:ec:44:38:c5:56:21:
         f6:8d:46:04:25:b5:e7:01:b9:86:5e:81:c4:e2:82:9f:d4:49:
         15:01:a2:39:7a:a9:a6:a6:bc:98:da:38:57:25:50:58:e6:b9:
         36:0f:95:da:da:0b:e0:b7:33:04:5e:51:98:5b:77:0c:0d:fb:
         04:fa:2a:08:3d:8b:31:2a:ff:db:b3:1b:a2:bc:83:64:f2:88:
         f0:41:6d:bd:9a:4a:06:41:36:04:b2:cd:8c:df:c1:bd:6d:ee:
         44:7c:6d:14:1a:6d:0e:0c:df:33:91:21:8b:99:64:7f:28:fc:
         b2:15:db:5d:84:f5:f5:33:b4:a6:26:41:08:ed:23:b9:bb:e4:
         60:1d:7e:b4:8f:ea:fa:d8:11:9c:d5:b4:f9:06:cb:c2:10:78:
         05:ef:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:50 2026 by rpki-client