This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35382e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          vHMEkjypMTsEwOHlrBHJFZMhw99pHG5dTvO5IB6tqbU=
Subject key identifier:   C9:71:FA:82:F8:3B:01:22:34:91:01:77:9F:6C:4E:60:3A:E1:AA:E2
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       776CD42E2FA93A183B361F3D9DDC7752C1124735
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa
Signing time:             Tue 18 Nov 2025 09:03:03 +0000
ROA not before:           Tue 18 Nov 2025 08:58:03 +0000
ROA not after:            Tue 17 Nov 2026 09:03:03 +0000
asID:                     45312
IP address blocks:        202.81.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6c:d4:2e:2f:a9:3a:18:3b:36:1f:3d:9d:dc:77:52:c1:12:47:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Nov 18 08:58:03 2025 GMT
            Not After : Nov 17 09:03:03 2026 GMT
        Subject: CN=C971FA82F83B0122349101779F6C4E603AE1AAE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:52:33:c4:dd:38:0c:f4:45:62:6e:bd:44:
                    f5:4f:36:5a:5d:b5:e3:c4:a4:d6:e2:7d:70:f4:63:
                    03:f7:d1:2d:b2:d9:86:11:ba:38:bc:5e:41:50:e3:
                    ea:c3:c4:b4:ca:73:21:4b:23:28:3d:87:07:91:eb:
                    d7:eb:8b:ab:98:cd:13:bb:17:04:a2:6e:bb:ad:e4:
                    a2:bd:39:b4:06:02:1f:96:30:51:68:19:17:06:ac:
                    a4:36:7d:59:1a:56:55:d4:48:6a:87:73:78:1e:b8:
                    05:3b:3e:0b:85:8d:1b:e5:4d:51:a7:21:d7:d7:2e:
                    26:92:76:3c:96:30:0e:83:3a:2a:ba:92:e4:ac:bd:
                    fc:0a:3e:fa:f9:38:e1:7e:97:f6:94:6f:aa:85:71:
                    da:dd:8a:af:6a:2b:91:d0:e7:32:6c:8a:a5:cf:f3:
                    e5:9c:13:5a:37:86:8f:46:ab:0d:b1:ea:c1:f6:7c:
                    c2:7f:fd:ed:a6:aa:fa:b5:ba:cc:ff:c8:ee:99:dd:
                    a5:97:10:b0:32:04:e1:a7:fb:8a:b7:f4:ac:8f:48:
                    ae:56:a7:b2:c1:ce:83:72:7d:d2:31:5a:8b:0e:2e:
                    59:01:2a:fd:2e:df:19:bc:64:7d:2a:7c:2a:b6:a2:
                    22:52:3c:99:dd:0b:d9:39:f7:0c:01:07:3f:41:d1:
                    e8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:71:FA:82:F8:3B:01:22:34:91:01:77:9F:6C:4E:60:3A:E1:AA:E2
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35382e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:af:c9:cd:85:38:bf:a6:5a:26:8f:a2:3a:ec:92:4f:fe:
         04:a8:1d:a1:05:02:49:a2:41:7a:2a:7b:b7:da:41:12:93:69:
         8a:44:c1:7f:92:fe:51:9b:8f:40:2f:29:41:8a:59:ab:ec:32:
         9c:5d:6a:21:6e:79:51:06:52:79:1f:b3:d9:e6:bc:69:bc:db:
         35:59:28:10:cc:8f:e7:4e:23:a6:ae:26:f6:1a:ee:16:b5:32:
         e3:2e:d0:f6:85:83:a5:30:56:ad:e7:8b:3d:5a:ba:19:89:36:
         2a:ec:bf:e3:08:86:fb:55:92:41:88:a9:b5:d2:c8:56:d6:ed:
         2e:bc:0a:d5:0b:38:90:3b:26:e5:3c:4d:7a:81:72:50:4a:ee:
         75:5b:19:6f:06:24:36:5b:07:4e:19:9a:26:8e:3c:47:cc:e9:
         9d:f7:31:00:50:17:c1:d7:b0:8d:cc:12:cb:5a:b9:bd:c1:a4:
         05:f2:17:15:98:e7:e2:69:aa:20:21:65:20:9b:55:11:c1:ce:
         58:a2:88:de:60:e2:96:44:28:da:0a:2d:78:91:39:b6:e2:19:
         2b:e1:18:cc:04:45:ae:78:83:d9:57:d7:61:01:fe:25:47:92:
         05:6a:c2:d1:73:73:59:1f:42:26:15:f3:47:07:4a:c4:98:5e:
         8a:e8:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:32:05 2025 by rpki-client