This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa
File:                     34332e3234372e33342e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          JWKx88Bg+YkLntvPFjlUPbmjIYWTx4YxQG5Hs8vTau0=
Subject key identifier:   E7:D8:C4:95:61:3A:0D:56:17:B3:41:79:FA:55:5A:CB:A8:98:93:AD
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       31AD934BA31942381DACCD96DA21664B1130ED5F
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa
Signing time:             Fri 07 Nov 2025 05:02:25 +0000
ROA not before:           Fri 07 Nov 2025 04:57:25 +0000
ROA not after:            Fri 06 Nov 2026 05:02:25 +0000
asID:                     45312
IP address blocks:        43.247.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ad:93:4b:a3:19:42:38:1d:ac:cd:96:da:21:66:4b:11:30:ed:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Nov  7 04:57:25 2025 GMT
            Not After : Nov  6 05:02:25 2026 GMT
        Subject: CN=E7D8C495613A0D5617B34179FA555ACBA89893AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5d:3a:36:f6:f5:17:2d:64:5d:02:de:16:41:
                    f4:43:70:89:db:9b:6f:ce:2d:8b:9a:c8:65:e6:d6:
                    f6:c7:55:fb:48:4c:46:17:08:cf:af:6b:7c:63:fb:
                    cd:c3:6b:8b:59:c1:af:fc:9c:8c:76:3a:35:af:d9:
                    87:86:b4:35:90:60:1f:d7:da:10:97:14:0f:2e:d8:
                    7b:5b:ba:b7:f5:16:d0:5a:cf:4c:28:1c:d1:47:5d:
                    a2:e5:ee:15:ba:44:ba:75:aa:5c:00:52:ca:0a:0a:
                    00:4f:87:97:fb:09:c6:2a:52:5e:63:a5:76:ae:4b:
                    b2:5c:00:28:89:dd:1a:17:2c:d0:29:44:d3:36:fe:
                    ba:9d:02:cb:c0:41:2d:1d:a1:3a:cd:ed:bb:8e:df:
                    b1:80:74:b6:e1:ea:b8:9d:92:f6:79:3f:41:3b:6b:
                    0d:63:ce:22:4a:bb:0b:8f:20:73:84:00:b7:bd:6d:
                    c0:73:65:b7:b6:2e:b0:eb:c5:a7:2d:96:37:34:5e:
                    84:f2:6b:33:d2:70:55:10:29:19:06:38:88:06:9c:
                    97:58:95:96:e8:51:07:d0:8b:76:2d:87:41:2c:06:
                    59:40:6b:db:c7:eb:90:93:91:ba:09:b5:c2:57:7d:
                    b1:ed:39:35:30:4f:d5:bc:c7:2e:36:9e:77:f6:a4:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D8:C4:95:61:3A:0D:56:17:B3:41:79:FA:55:5A:CB:A8:98:93:AD
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/34332e3234372e33342e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:76:97:90:03:b3:f8:6b:4b:d1:aa:33:56:16:50:02:73:2b:
         0f:5f:33:e6:09:ff:c3:7b:ea:9d:59:e9:0d:d1:39:1e:0e:11:
         6b:f7:41:19:06:c2:1c:a1:31:66:cc:e6:41:1f:25:b0:96:c2:
         f8:d1:11:0d:07:76:0f:fa:1d:ed:e4:22:cb:ad:09:ef:87:73:
         e7:3c:82:3f:df:31:d3:e0:96:95:8d:2c:18:1d:a1:78:6c:fa:
         ba:be:41:d5:18:94:61:c1:36:6d:7e:a3:34:19:4d:6a:c1:58:
         3b:07:67:d6:b0:a1:b6:e4:17:81:37:9b:55:e1:46:c1:17:f5:
         fb:45:1d:50:e3:48:d8:38:97:6c:86:2f:91:c9:14:c8:a0:48:
         60:28:a3:7e:15:e0:2b:38:87:4f:f0:cf:d5:51:d1:d9:55:5a:
         09:df:dd:09:a3:11:2f:4a:ff:b9:85:2a:f8:66:47:17:32:0c:
         b2:5a:a2:2f:f7:81:4d:23:34:aa:9b:2e:37:0b:ee:e3:2b:60:
         d8:e5:dd:7e:81:b9:ef:e9:e6:f0:3c:b0:9d:da:8a:13:53:e1:
         42:08:8b:58:77:d7:a2:46:b9:7e:f8:5d:3d:26:25:c5:88:40:
         bc:67:62:56:40:2f:12:29:f2:cc:43:32:62:47:c3:ce:a3:4f:
         f7:ee:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:32:35 2025 by rpki-client