This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37322e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          +glpVv65Su45k3z8x3JSITR7B5z8SNAQLedDEvObs/0=
Subject key identifier:   04:20:8E:35:A1:DE:70:29:4F:A4:CE:BA:B5:3F:F2:6F:B9:9F:6F:A5
Certificate issuer:       /CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
Certificate serial:       02AF60E54A15E08A46842FB7A157AEA081AB8EF1
Authority key identifier: 56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa
Signing time:             Thu 04 Dec 2025 11:00:02 +0000
ROA not before:           Thu 04 Dec 2025 10:55:02 +0000
ROA not after:            Thu 03 Dec 2026 11:00:02 +0000
asID:                     46030
IP address blocks:        116.212.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl
                          rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:af:60:e5:4a:15:e0:8a:46:84:2f:b7:a1:57:ae:a0:81:ab:8e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5660DB3811C1646AC1F8BBA996A9757B40FB0556
        Validity
            Not Before: Dec  4 10:55:02 2025 GMT
            Not After : Dec  3 11:00:02 2026 GMT
        Subject: CN=04208E35A1DE70294FA4CEBAB53FF26FB99F6FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:41:61:0b:86:0b:93:07:50:ab:0f:66:c1:
                    ce:91:f7:a2:9a:1b:c8:5e:ec:99:ed:b5:80:ba:17:
                    38:0e:c2:14:12:1e:3a:6e:34:98:48:e9:9e:f7:a2:
                    a2:61:16:73:21:f3:25:d5:ea:d1:c5:a4:cc:83:d2:
                    ad:0f:09:f9:1c:b1:6a:28:dd:63:07:d8:3d:a8:af:
                    b5:ff:cd:86:e7:46:a9:ae:a9:df:09:25:d4:a2:8f:
                    18:5c:8c:ca:d6:f8:b6:9b:70:d5:63:87:23:fe:28:
                    b1:dc:a9:29:47:ca:40:4c:34:ec:4a:3e:b3:cb:bd:
                    9f:4c:ac:5e:5d:b1:b8:74:2b:4b:c0:e0:6a:d2:ec:
                    7e:d6:a8:1b:66:bd:51:7b:9c:92:7a:34:9a:dd:92:
                    bb:fc:1d:0c:fa:94:db:f8:db:c4:45:2d:99:52:69:
                    a2:fe:4b:cd:ad:ef:27:8b:4b:96:35:6a:35:56:2c:
                    d1:20:28:d6:20:42:5c:77:90:bf:11:1b:00:6d:ac:
                    a6:18:8e:fe:4a:dd:05:4c:00:09:ac:e4:e7:50:7a:
                    37:17:90:b7:4f:dc:2a:91:dc:ec:f7:26:a4:af:d2:
                    d3:3c:32:d5:9e:ea:15:80:11:be:11:32:fa:b4:64:
                    2a:48:0d:33:99:e7:48:b8:57:7f:19:ac:c6:80:f5:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:20:8E:35:A1:DE:70:29:4F:A4:CE:BA:B5:3F:F2:6F:B9:9F:6F:A5
            X509v3 Authority Key Identifier:
                keyid:56:60:DB:38:11:C1:64:6A:C1:F8:BB:A9:96:A9:75:7B:40:FB:05:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/5660DB3811C1646AC1F8BBA996A9757B40FB0556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5660DB3811C1646AC1F8BBA996A9757B40FB0556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37322e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:25:48:8b:cd:c5:ee:f1:fb:64:18:0b:b0:be:6f:28:7c:7a:
         5b:10:7a:91:3d:e7:c8:55:c5:e5:81:da:43:83:25:e8:08:4e:
         b1:b8:cd:be:98:69:34:dc:3b:ce:ea:50:2f:75:74:39:3f:44:
         38:a2:52:0e:c0:fc:d7:46:33:04:97:ba:c1:c1:e9:69:3c:5f:
         cd:84:bd:c0:61:67:10:aa:28:87:c2:d3:e2:d5:f3:5a:7f:fd:
         c9:9d:c7:a1:06:b7:e9:3b:96:21:e5:31:18:38:55:3e:58:40:
         97:f1:9c:58:44:5b:19:2f:12:72:65:db:49:cf:b7:b5:67:46:
         1f:38:fc:53:5b:21:c8:2a:fb:fb:53:25:41:64:59:e8:7c:6a:
         e9:e5:f3:1e:bf:2b:36:b4:23:0a:55:3c:b6:f0:f8:ec:8e:1b:
         87:7a:4e:b8:12:d4:d3:2a:82:15:00:2a:d5:41:e3:fd:d5:07:
         8b:fc:c2:8a:a5:4c:b7:95:34:7e:aa:69:f2:c8:20:87:e4:c5:
         39:d6:87:30:5b:18:78:a2:86:1e:94:43:2a:d8:e4:9c:1c:4e:
         b2:b6:8e:01:05:87:f2:93:23:9e:bb:43:47:f0:1d:ba:71:4b:
         90:ef:41:e1:53:ca:39:19:1c:1e:3f:03:de:83:80:9d:14:a7:
         2f:e3:28:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAq9g5UoV4IpGhC+3oVeuoIGrjvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0
MEZCMDU1NjAeFw0yNTEyMDQxMDU1MDJaFw0yNjEyMDMxMTAwMDJaMDMxMTAvBgNV
BAMTKDA0MjA4RTM1QTFERTcwMjk0RkE0Q0VCQUI1M0ZGMjZGQjk5RjZGQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKsUFhC4YLkwdQqw9mwc6R96Ka
G8he7JnttYC6FzgOwhQSHjpuNJhI6Z73oqJhFnMh8yXV6tHFpMyD0q0PCfkcsWoo
3WMH2D2or7X/zYbnRqmuqd8JJdSijxhcjMrW+LabcNVjhyP+KLHcqSlHykBMNOxK
PrPLvZ9MrF5dsbh0K0vA4GrS7H7WqBtmvVF7nJJ6NJrdkrv8HQz6lNv428RFLZlS
aaL+S82t7yeLS5Y1ajVWLNEgKNYgQlx3kL8RGwBtrKYYjv5K3QVMAAms5OdQejcX
kLdP3CqR3Oz3JqSv0tM8MtWe6hWAEb4RMvq0ZCpIDTOZ50i4V38ZrMaA9adVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBCCONaHecClPpM66tT/yb7mfb6UwHwYDVR0j
BBgwFoAUVmDbOBHBZGrB+Luplql1e0D7BVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDFkNTk2Yy0wOWUzLTQ2MjEtYTYzYi0yMGE1MTNjZDQ4YjkvMC81NjYwREIzODEx
QzE2NDZBQzFGOEJCQTk5NkE5NzU3QjQwRkIwNTU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTY2MERCMzgxMUMxNjQ2QUMxRjhCQkE5OTZBOTc1N0I0MEZC
MDU1Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMWQ1OTZjLTA5ZTMtNDYyMS1h
NjNiLTIwYTUxM2NkNDhiOS8wLzMxMzEzNjJlMzIzMTMyMmUzNzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHTUSDANBgkqhkiG
9w0BAQsFAAOCAQEAhSVIi83F7vH7ZBgLsL5vKHx6WxB6kT3nyFXF5YHaQ4Ml6AhO
sbjNvphpNNw7zupQL3V0OT9EOKJSDsD810YzBJe6wcHpaTxfzYS9wGFnEKooh8LT
4tXzWn/9yZ3HoQa36TuWIeUxGDhVPlhAl/GcWERbGS8ScmXbSc+3tWdGHzj8U1sh
yCr7+1MlQWRZ6Hxq6eXzHr8rNrQjClU8tvD47I4bh3pOuBLU0yqCFQAq1UHj/dUH
i/zCiqVMt5U0fqpp8sggh+TFOdaHMFsYeKKGHpRDKtjknBxOsraOAQWH8pMjnrtD
R/AdunFLkO9B4VPKORkcHj8D3oOAnRSnL+MotQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:16:15 2025 by rpki-client