This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa
File:                     3230332e38342e3133372e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          xuLF56nsExRRLQQOvnE9WuG4oXnx1g/WH1oG0isQeRA=
Subject key identifier:   B1:C2:86:84:50:A1:87:1A:4A:0C:83:CF:EE:7E:ED:B2:1F:7E:ED:9D
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       5A0FEE855FE5959D4732A0E22D359D6C469CDA8C
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa
Signing time:             Thu 28 Aug 2025 07:35:31 +0000
ROA not before:           Thu 28 Aug 2025 07:30:31 +0000
ROA not after:            Thu 27 Aug 2026 07:35:31 +0000
asID:                     24206
IP address blocks:        203.84.137.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 20:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0f:ee:85:5f:e5:95:9d:47:32:a0:e2:2d:35:9d:6c:46:9c:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Aug 28 07:30:31 2025 GMT
            Not After : Aug 27 07:35:31 2026 GMT
        Subject: CN=B1C2868450A1871A4A0C83CFEE7EEDB21F7EED9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a2:6b:ee:c1:08:73:b8:1d:55:52:61:4b:8d:
                    c0:3e:aa:00:d6:93:8e:0f:26:0a:32:8b:1f:b5:3e:
                    3d:d4:20:77:b2:82:c0:5e:57:6e:4d:32:eb:71:61:
                    1c:06:21:39:e4:7f:45:76:ac:a4:31:52:41:9e:f5:
                    fd:f5:82:53:f1:80:46:33:16:5b:33:ac:58:ac:9d:
                    65:68:f3:d3:cb:f0:33:06:50:cd:af:bb:ca:bb:83:
                    45:28:d2:85:52:30:dd:d6:81:ea:9c:89:13:6f:82:
                    59:87:80:14:5d:68:a7:22:de:b2:30:2c:a7:6b:44:
                    2c:3f:4b:8e:b1:7f:e8:6d:0f:3c:8b:d8:3f:1a:28:
                    31:72:13:bc:47:02:8a:dc:e3:3d:da:c7:f7:24:0e:
                    08:62:4e:65:23:20:12:d8:b7:03:b0:b0:a4:92:49:
                    51:09:7f:ea:d0:a4:87:62:2d:d4:fd:6a:cb:55:aa:
                    d4:53:27:af:ca:9f:13:27:ce:64:09:6f:5d:fe:eb:
                    5d:4f:28:1d:3c:d1:8a:5e:d9:91:56:25:ad:d5:d8:
                    df:1d:6b:ec:cf:f3:88:9d:ce:5f:7d:74:98:78:98:
                    13:0e:2c:3e:46:c0:13:d0:88:44:f3:9b:40:db:a4:
                    6d:cd:ed:2f:03:18:1a:a2:87:e0:a0:3a:b2:12:24:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C2:86:84:50:A1:87:1A:4A:0C:83:CF:EE:7E:ED:B2:1F:7E:ED:9D
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3230332e38342e3133372e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.84.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6e:6b:b5:4a:fd:ca:90:c9:38:d9:af:35:0d:b4:70:51:aa:
         8b:ba:4b:19:fc:80:d1:19:f0:c9:c4:0a:53:9b:23:7e:73:73:
         73:eb:db:4d:4c:18:5e:ef:68:f1:9c:8a:f6:ff:09:ce:44:79:
         16:26:56:0b:91:f8:3b:b6:03:68:2e:c6:d6:12:65:50:4c:c5:
         91:b6:ce:0f:5f:82:44:af:17:4d:55:6f:84:38:c0:d9:17:72:
         ae:3d:93:ba:5a:7c:af:63:40:53:68:59:96:87:01:f6:15:20:
         fb:91:81:a9:b4:b1:11:6d:35:c8:1b:bf:f4:61:e8:d5:3b:6a:
         22:b3:1d:34:2a:d5:45:d1:df:04:3c:da:ac:e1:ce:8a:dc:f3:
         71:88:21:4d:d7:5e:ad:2c:95:2e:99:2f:8c:5b:15:6e:6d:14:
         d4:db:25:82:28:4f:28:d7:40:7d:3b:df:ef:dc:dd:e3:d0:e9:
         4a:ca:2d:af:dd:f2:e9:6c:04:a9:3c:af:0c:93:71:e5:f4:22:
         69:38:60:f8:f7:3a:4b:59:e3:c5:57:5d:a3:a7:1d:f5:94:42:
         46:7a:71:22:90:3b:05:f4:4e:a6:25:89:c6:93:3e:3d:ea:93:
         57:57:59:42:c0:f6:89:8c:ea:e0:28:21:02:a9:d7:e0:28:e4:
         ba:45:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:46:33 2025 by rpki-client