This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35372e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          QFQuuSJ4FPojlL6ScUg3FMY7dO4aRkbs1qjZm4crVPg=
Subject key identifier:   D1:36:50:2E:87:2B:2B:22:A3:C1:B4:C5:2E:F2:DC:29:87:F8:49:7B
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       44E1CA6881C31B063ED42B4A035650FD0C4DA917
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 18 Nov 2025 09:03:03 +0000
ROA not before:           Tue 18 Nov 2025 08:58:03 +0000
ROA not after:            Tue 17 Nov 2026 09:03:03 +0000
asID:                     45312
IP address blocks:        202.81.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:ca:68:81:c3:1b:06:3e:d4:2b:4a:03:56:50:fd:0c:4d:a9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Nov 18 08:58:03 2025 GMT
            Not After : Nov 17 09:03:03 2026 GMT
        Subject: CN=D136502E872B2B22A3C1B4C52EF2DC2987F8497B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:9b:06:86:f5:80:ae:7a:06:7b:72:aa:f8:
                    0a:17:6b:c4:b1:a1:e2:3c:7c:9b:30:31:e1:1b:f7:
                    b7:99:ed:1f:53:8b:0a:da:24:43:2c:f0:4d:7f:4f:
                    44:d3:2f:60:8e:62:79:d8:e9:13:12:08:07:a0:6b:
                    68:2a:ed:62:04:a8:48:7c:6d:a4:ab:70:82:21:42:
                    05:e6:b3:4c:76:1a:5e:60:4d:27:02:79:43:bf:9c:
                    9d:a4:12:9a:7b:16:92:76:c9:c0:57:b9:cc:99:f5:
                    03:da:13:98:7a:34:08:02:6b:61:44:4e:b3:84:97:
                    27:6f:46:2e:e4:56:5a:ab:de:e8:ed:bd:99:25:9a:
                    4b:9c:ca:f4:b4:46:9e:42:af:f1:2a:04:68:cf:2f:
                    33:16:ce:cd:1c:b3:c8:b6:b1:d2:05:60:33:8b:d7:
                    f0:b5:fd:d1:ea:24:59:16:a8:11:4c:5e:4f:a1:b7:
                    0f:35:4e:c0:de:e6:11:99:61:b8:90:0d:d3:44:47:
                    98:5a:50:7f:81:e3:2e:93:57:54:0f:25:b0:92:9a:
                    f3:48:f1:b5:51:a0:25:f0:ca:ff:d5:cb:11:cb:2f:
                    48:a4:71:77:2a:6e:a4:58:0a:a5:ca:ba:08:e4:b7:
                    db:e9:0d:8a:19:b7:2d:d4:9a:4f:e1:4f:b1:92:66:
                    36:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:50:2E:87:2B:2B:22:A3:C1:B4:C5:2E:F2:DC:29:87:F8:49:7B
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35372e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:50:ec:8b:7c:8a:1d:c8:32:ca:e1:7e:0b:78:e5:f8:a8:ef:
         b4:2b:c1:0d:32:59:0f:8a:e2:00:e0:a2:0d:45:fe:1b:91:9f:
         9e:60:9b:31:72:79:df:9d:aa:a2:3e:15:43:92:12:5f:92:31:
         7c:da:58:f5:40:41:da:a0:d0:8e:a5:9e:3f:53:f6:19:1b:11:
         c4:54:ab:8b:9f:80:45:49:cb:68:d4:17:03:77:19:d7:30:5b:
         1d:8b:20:f5:8c:05:88:9d:58:bc:73:4b:10:f8:06:91:91:dd:
         0d:47:4b:00:05:81:a4:d9:b0:95:eb:62:0c:7a:79:5b:76:e4:
         31:de:c4:2c:62:4e:58:48:47:8e:e7:4f:41:32:15:86:90:51:
         1e:4b:45:86:bb:46:4e:ea:ff:d4:d9:da:e2:6e:d1:b7:35:15:
         60:a4:2a:8b:5b:79:a8:0c:02:f9:60:09:20:bb:0f:4c:34:96:
         f9:80:aa:1a:e3:20:45:9b:e0:d3:5d:6d:e1:e3:8f:ad:ff:40:
         85:1d:b3:3b:b8:7e:06:3e:68:31:37:9f:b5:a1:36:93:88:a1:
         ea:01:6d:1d:f2:df:c0:46:f3:08:64:76:b4:57:df:7b:5d:15:
         3b:a8:99:2a:26:81:31:11:14:62:2d:18:e8:9d:ff:51:ac:89:
         fb:95:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:32:34 2025 by rpki-client