This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e2039373934.roa
File:                     3131352e3137382e3134342e302f32322d3234203d3e2039373934.roa (raw, json)
Hash identifier:          0WPP41+Mt2FRz7JLvGWjUP0n6OeUdnd4983g9GdfQUc=
Subject key identifier:   9F:6F:18:CB:51:B8:B6:8F:F6:90:5D:2B:83:06:67:95:3E:D8:B6:67
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       33FDE829F1909E40291E68BC26B721275A4C60F8
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e2039373934.roa
Signing time:             Thu 04 Dec 2025 07:00:00 +0000
ROA not before:           Thu 04 Dec 2025 06:55:00 +0000
ROA not after:            Thu 03 Dec 2026 07:00:00 +0000
asID:                     9794
IP address blocks:        115.178.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:24:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:e8:29:f1:90:9e:40:29:1e:68:bc:26:b7:21:27:5a:4c:60:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Dec  4 06:55:00 2025 GMT
            Not After : Dec  3 07:00:00 2026 GMT
        Subject: CN=9F6F18CB51B8B68FF6905D2B830667953ED8B667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:d0:57:3b:a1:c6:7a:c4:06:eb:14:b3:e7:
                    85:b2:5d:3d:67:af:30:db:ab:84:96:42:d2:dc:18:
                    a2:7d:ad:e5:85:70:c7:1e:aa:f1:6f:a9:53:73:b8:
                    c9:d6:01:4b:8c:56:6e:1b:4f:be:c6:01:b1:5c:d9:
                    e1:70:0f:32:5c:b1:53:d9:ab:1f:be:b5:f2:96:f4:
                    f4:ca:bf:99:79:e1:b3:ca:be:13:ed:3b:c1:b4:74:
                    69:f0:22:e9:48:4f:3b:f6:7c:68:54:ba:d1:de:72:
                    74:18:ec:b5:bd:27:5b:28:94:fd:f9:31:68:50:b9:
                    5b:c0:46:5b:a9:01:57:c6:3f:8c:47:7c:89:b8:e0:
                    1f:18:60:b0:33:8c:61:27:96:19:b1:8f:2b:80:a2:
                    47:6e:f2:d7:cd:10:dd:ca:c8:1e:3b:47:06:06:e7:
                    2f:c6:e6:b3:fb:0e:e7:37:fa:83:26:d3:fc:f7:b6:
                    38:28:e9:91:a8:ec:c5:aa:8d:ae:fb:3f:4c:3e:5b:
                    d7:ac:91:28:80:39:31:fb:9a:0a:20:4d:2e:0f:b3:
                    f1:d9:d7:01:f1:c7:b5:7c:7e:38:a3:8a:ee:1c:92:
                    b9:7f:e3:58:3f:f4:e9:11:d2:3f:95:07:7b:17:50:
                    33:6b:fb:93:d6:d1:c0:ad:21:12:0c:6a:7f:df:ff:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6F:18:CB:51:B8:B6:8F:F6:90:5D:2B:83:06:67:95:3E:D8:B6:67
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:4d:d3:ec:55:df:29:81:dd:1a:e2:ac:4c:9a:37:56:44:
         03:1c:15:71:db:e1:62:19:cd:47:75:7b:a3:eb:68:86:3c:05:
         23:21:97:d8:84:b6:08:eb:69:d6:3d:f9:31:ed:d3:5b:5e:90:
         c1:2f:8a:b2:93:f3:4e:da:01:61:53:1c:11:d8:c1:53:97:61:
         a5:03:a7:94:79:2c:d9:cb:3f:ee:d7:10:b4:2a:6f:aa:51:a8:
         f0:06:88:42:53:fd:71:76:e0:78:3e:82:99:e9:38:b4:25:40:
         30:68:5f:18:a6:c5:49:90:5b:31:80:3b:1a:e9:d1:38:16:a5:
         f4:2b:e1:e7:f4:72:92:be:70:cb:72:0f:58:a8:01:79:23:62:
         02:6b:29:bc:b7:a7:5b:95:71:a5:ea:24:b4:4d:5a:a8:42:47:
         f1:6d:7e:b7:80:22:53:07:5f:23:14:a9:bf:1f:fc:f6:fd:3e:
         09:80:7f:13:3d:dc:c4:fb:6f:d8:bd:56:bc:e7:fe:f6:b0:83:
         78:0a:9d:03:d4:06:bc:b6:19:2a:90:fd:34:a4:09:ea:1d:c8:
         dd:21:f7:13:4f:84:a4:1b:2d:1a:40:3a:1e:e7:77:98:2b:b1:
         49:5f:cd:2c:f9:e9:42:dd:08:21:db:65:e5:95:8e:b8:29:30:
         24:9f:51:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:10:30 2025 by rpki-client