This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
File:                     3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          oZVzlSUj6QR7EmNdGk/WoXFjE/7mU+sYp1a2+E8DfnY=
Subject key identifier:   87:82:71:78:50:01:BE:31:62:2C:58:3F:9F:9E:0C:8A:08:CE:A1:81
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       1AE42B03B82019843318A6A375EF748D4BBF2B25
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa
Signing time:             Thu 13 Nov 2025 08:00:00 +0000
ROA not before:           Thu 13 Nov 2025 07:55:00 +0000
ROA not after:            Thu 12 Nov 2026 08:00:00 +0000
asID:                     9794
IP address blocks:        115.178.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:2b:03:b8:20:19:84:33:18:a6:a3:75:ef:74:8d:4b:bf:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Nov 13 07:55:00 2025 GMT
            Not After : Nov 12 08:00:00 2026 GMT
        Subject: CN=878271785001BE31622C583F9F9E0C8A08CEA181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:88:27:87:39:32:43:87:55:7b:2c:86:54:
                    0f:95:79:3b:76:d4:2b:fd:e4:72:ea:7f:39:4e:20:
                    de:89:ee:bb:65:cc:70:a1:f3:49:24:74:13:97:c4:
                    39:4a:6e:44:2c:f0:2c:96:5e:53:d1:70:0b:0c:f6:
                    5d:5b:4e:c7:89:da:75:3b:0f:6a:be:15:ef:a0:f6:
                    23:c7:7a:67:de:8d:b2:d8:ab:0d:07:df:9c:25:59:
                    7f:a3:14:a3:6f:5b:d7:b2:d2:7b:69:b8:8c:dc:f5:
                    9f:4e:5f:d1:6f:82:17:8a:21:7c:f5:1d:75:f3:b4:
                    e8:2f:4d:17:10:8a:f4:75:ea:92:c1:45:c2:5a:e1:
                    2f:86:14:60:49:45:73:06:29:3a:ea:28:ca:8f:d0:
                    91:f6:25:90:7e:33:bf:90:f0:32:79:42:ac:68:87:
                    bb:80:b9:e5:5e:83:76:17:08:fc:68:12:cf:ff:cb:
                    a0:56:a9:b3:52:b9:c6:60:17:9a:6d:3f:5c:3d:35:
                    ba:69:a4:37:cd:9b:d3:8c:41:85:70:9f:8a:28:a0:
                    61:a1:64:6d:b5:13:07:8d:50:93:0b:81:1b:aa:a3:
                    a7:ea:3e:d6:1e:50:a3:1f:57:15:40:7d:ba:a0:3b:
                    4c:e2:0b:dc:7b:ad:02:d2:2c:bb:3d:58:a4:88:13:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:82:71:78:50:01:BE:31:62:2C:58:3F:9F:9E:0C:8A:08:CE:A1:81
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3133332e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:23:d4:33:84:dd:78:f7:f0:a7:55:8b:99:68:ff:7b:9c:
         cd:26:04:b4:43:cb:99:b3:19:13:6b:12:2e:4d:af:0e:61:e5:
         2c:04:92:73:d1:92:66:6f:f0:4b:76:41:55:7f:24:68:57:29:
         d7:ed:9c:5b:84:89:bf:50:60:5a:da:19:cb:4c:c0:bd:7e:e1:
         fa:95:8e:d2:53:3b:fb:45:14:e8:b0:eb:74:49:b6:83:2d:6b:
         05:32:dc:4d:b1:c4:d4:e8:71:c3:06:1c:1e:4f:20:2d:df:c0:
         84:64:bb:40:fd:e8:89:30:22:ba:58:74:f1:99:3a:19:75:7a:
         f3:51:16:8b:ff:c9:d7:4a:f3:f6:0b:74:5b:b2:e6:e9:9a:7e:
         2b:4d:50:87:18:4c:c2:6f:34:02:61:d2:d1:e7:a1:97:ed:98:
         83:2f:27:0d:99:95:7b:01:8a:e2:09:3a:cd:0c:80:04:94:e4:
         de:27:96:45:a2:bf:16:dc:6d:c3:ba:be:b4:73:27:bd:27:cc:
         28:5c:bf:ba:c0:2d:41:6b:29:a0:c8:76:80:49:85:a3:fb:be:
         0b:a9:e7:0d:65:fe:4a:e9:95:b8:31:f1:78:6d:8d:22:b8:1c:
         0b:1b:84:09:36:d8:c0:f6:2a:20:4b:c1:bf:17:a2:7e:7a:ed:
         0b:ae:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:38 2025 by rpki-client