This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132372e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          6BrOpQSKuPFPKi6z67zX+xJmpWv9+MYDX1HsymznhbY=
Subject key identifier:   88:47:4C:5E:6C:93:41:10:88:B0:29:AA:3D:C4:15:75:0D:AD:23:42
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       09701755813AAA4A40DAB24CC89C9692C820AF73
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa
Signing time:             Tue 16 Dec 2025 04:00:33 +0000
ROA not before:           Tue 16 Dec 2025 03:55:33 +0000
ROA not after:            Tue 15 Dec 2026 04:00:33 +0000
asID:                     38515
IP address blocks:        117.74.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:17:55:81:3a:aa:4a:40:da:b2:4c:c8:9c:96:92:c8:20:af:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Dec 16 03:55:33 2025 GMT
            Not After : Dec 15 04:00:33 2026 GMT
        Subject: CN=88474C5E6C93411088B029AA3DC415750DAD2342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:42:c0:91:74:d6:16:52:79:dc:53:ab:33:
                    51:28:04:ab:88:e4:08:32:e6:cc:72:60:68:7a:ea:
                    9e:b8:f4:44:42:57:dc:89:ab:6c:63:c9:c2:00:02:
                    9a:ad:60:e0:3d:f3:69:73:e4:15:f1:4f:fc:be:b5:
                    12:e4:b6:4a:12:0a:c5:e8:b5:89:79:13:34:d9:63:
                    3c:8a:b6:d2:27:28:37:86:e1:42:c3:7f:9d:c6:eb:
                    4f:bc:ec:72:32:3d:73:58:29:49:2e:0f:8c:66:fe:
                    e5:ce:68:03:70:81:ee:a2:4b:51:79:c6:aa:d6:3e:
                    66:95:fa:f8:b2:00:4d:17:95:5f:a1:6a:c6:ec:f3:
                    1c:43:85:5f:c7:1c:c0:82:39:85:5f:66:6d:cf:04:
                    2d:a7:eb:d2:9b:88:e4:52:d2:db:2d:87:0e:96:bc:
                    3f:b4:fa:9e:88:59:7c:7b:a1:56:c9:7e:f9:d1:34:
                    10:2b:45:4e:9b:2a:9e:90:65:3c:6d:3a:aa:af:bc:
                    6e:61:96:87:d6:e1:10:1f:c8:ba:50:ba:18:94:26:
                    0c:76:a1:7a:af:2f:8d:29:fc:0b:ff:61:ad:b7:f6:
                    b4:76:f0:1f:d7:19:28:6c:bf:74:9b:09:2a:04:53:
                    bc:c5:39:f4:2f:d2:32:58:a5:b4:51:68:e2:2b:06:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:4C:5E:6C:93:41:10:88:B0:29:AA:3D:C4:15:75:0D:AD:23:42
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132372e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:87:cc:65:9c:23:78:c8:6b:5e:66:43:92:6e:67:8d:c9:cf:
         2b:a5:de:c7:e8:43:34:92:04:1a:fc:fd:36:c6:01:e5:e7:68:
         c2:30:41:f5:9a:c1:40:b9:80:3c:07:cc:1a:7f:10:0f:52:03:
         2c:b3:98:20:c6:6a:74:ad:a8:72:b3:70:56:04:3d:54:2d:06:
         ef:57:77:61:d3:bd:e6:c6:86:9a:78:62:d6:0e:3f:df:cb:9c:
         f7:50:0b:d5:7a:fa:72:08:01:31:b0:99:e7:15:33:b9:71:55:
         42:f9:16:bd:e1:ef:6c:eb:e8:42:2f:2d:22:32:3e:6f:d0:d2:
         40:2f:47:ab:93:4e:f7:d8:c6:c8:b8:3c:73:58:6c:76:53:a3:
         93:14:95:f2:93:32:b9:ad:3d:fe:06:f2:44:54:c4:e4:51:7e:
         1c:81:4b:e3:19:50:6f:20:b7:31:64:62:da:dd:d6:ab:f9:bc:
         c9:fd:aa:0d:c4:1d:59:09:0d:65:2c:2d:ac:05:a6:95:74:f5:
         19:e0:bb:3d:a6:de:55:df:72:80:8a:2e:fd:d8:97:2b:f0:7f:
         c1:24:c8:f6:55:0f:0f:80:49:94:79:73:b8:f0:66:f5:0a:de:
         ed:85:e1:f4:08:bd:a6:e9:02:30:33:cf:c7:4b:65:13:66:0b:
         ba:c7:57:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:32:39 2025 by rpki-client