This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
File:                     3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (raw, json)
Hash identifier:          BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=
Subject key identifier:   2B:48:F5:47:47:DF:0A:C1:99:C9:51:24:83:8E:A9:AC:82:05:4D:49
Certificate issuer:       /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial:       5769D32FB1BD837D8C8FD78A221659BF89978960
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa
Signing time:             Thu 13 Nov 2025 05:02:29 +0000
ROA not before:           Thu 13 Nov 2025 04:57:29 +0000
ROA not after:            Thu 12 Nov 2026 05:02:29 +0000
asID:                     153157
IP address blocks:        160.191.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
                          rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 21:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:69:d3:2f:b1:bd:83:7d:8c:8f:d7:8a:22:16:59:bf:89:97:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
        Validity
            Not Before: Nov 13 04:57:29 2025 GMT
            Not After : Nov 12 05:02:29 2026 GMT
        Subject: CN=2B48F54747DF0AC199C95124838EA9AC82054D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:06:5d:c6:af:9b:8e:9b:cd:fb:a8:66:ab:1b:
                    a7:97:fd:ed:64:34:0a:a8:f4:5c:81:38:33:ed:60:
                    02:1f:80:8b:d9:c4:89:6e:f6:4f:22:a9:6d:55:10:
                    1e:a6:7e:f4:ab:15:07:cc:49:d9:ae:1f:91:bc:b9:
                    a1:47:77:bb:19:05:50:02:bd:6a:33:b0:14:78:f9:
                    47:ed:c8:c7:b2:68:20:b3:d1:c4:31:98:d5:18:e6:
                    84:06:99:0f:1f:c2:e9:1d:86:6d:2c:49:d3:b7:76:
                    88:f1:3f:4b:07:e8:15:05:a2:7d:fb:0e:9c:18:95:
                    b7:f7:b8:70:ee:28:e0:9d:f2:07:79:47:22:a2:b9:
                    57:c2:93:d9:76:0c:3f:78:49:e6:8d:04:a0:70:c4:
                    46:6c:55:77:f4:3b:1f:32:11:d1:2a:fc:64:c9:2e:
                    54:2a:69:0e:ed:cd:b2:c9:35:59:98:5c:f4:c5:08:
                    28:ff:e5:94:3a:b5:0d:09:01:9e:84:f9:58:82:24:
                    37:cd:fe:4d:8e:ce:47:98:5f:45:ac:5f:11:6d:da:
                    b3:76:47:d6:8d:71:53:5f:d3:2d:fd:38:09:42:78:
                    59:48:fc:8b:68:05:39:68:a4:11:fc:dd:fa:5c:0f:
                    fc:ad:d8:9c:e4:cd:2d:96:0e:47:10:54:d1:21:84:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:F5:47:47:DF:0A:C1:99:C9:51:24:83:8E:A9:AC:82:05:4D:49
            X509v3 Authority Key Identifier:
                keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:f6:38:ad:2c:e1:4d:5e:16:a0:ba:e6:7d:85:e6:2e:b2:
         d5:96:78:8f:ea:ce:56:bd:f2:a2:df:ef:c0:f6:b2:9d:d7:ca:
         81:b0:0e:48:e9:5b:dd:0d:9e:ef:57:06:20:1d:bc:e2:ea:80:
         4d:b7:14:87:9b:ec:64:6a:dc:8d:f5:b0:2e:42:8c:db:e6:e8:
         43:3b:32:ac:5a:25:a7:64:f3:83:ca:39:5d:3a:55:14:c5:b2:
         58:7e:fc:72:05:6e:13:89:6e:eb:cb:17:cd:c9:5d:c2:6e:ae:
         39:e1:e4:f7:cf:fb:a6:f4:26:c4:4e:6c:b7:41:d9:7a:77:0e:
         e4:4e:b3:80:79:ee:92:b4:95:b6:fd:cb:7a:04:3a:78:d9:18:
         48:e9:ae:a6:ec:b9:5f:48:c0:b7:3f:94:eb:92:4c:a5:df:7b:
         c5:b5:65:a1:21:86:83:81:ba:db:be:82:b0:8d:1a:d5:ec:7e:
         d1:d5:37:7e:39:04:6e:bf:ec:1f:d3:c9:6e:30:61:4c:57:d2:
         7a:16:99:6a:92:29:7e:90:39:3e:e0:b9:e0:14:20:dd:12:a5:
         d5:c3:fd:5c:53:7c:98:7d:63:d4:bc:f2:c7:75:79:06:d9:21:
         4b:d0:2e:34:36:37:29:23:6d:7b:0b:83:95:48:a9:57:22:cc:
         50:ca:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:40:46 2025 by rpki-client