This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa
File:                     3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa (raw, json)
Hash identifier:          q6suRM1GDEk3DquWvwoiY8k1pPAMhJCE1PAKEv9TivM=
Subject key identifier:   12:54:E4:73:C6:37:5A:DD:68:56:99:FD:32:9E:F8:F7:ED:DE:6F:CA
Certificate issuer:       /CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
Certificate serial:       53D727853FCC09AAF2A48227271F74461EC5C0A4
Authority key identifier: 48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa
Signing time:             Thu 11 Dec 2025 07:00:02 +0000
ROA not before:           Thu 11 Dec 2025 06:55:02 +0000
ROA not after:            Thu 10 Dec 2026 07:00:02 +0000
asID:                     152081
IP address blocks:        203.169.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl
                          rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 15:30:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d7:27:85:3f:cc:09:aa:f2:a4:82:27:27:1f:74:46:1e:c5:c0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48FC0122D8C842BAC13711F1284D1D38DE36EA1B
        Validity
            Not Before: Dec 11 06:55:02 2025 GMT
            Not After : Dec 10 07:00:02 2026 GMT
        Subject: CN=1254E473C6375ADD685699FD329EF8F7EDDE6FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:20:2f:1b:3e:3b:2c:6d:22:ce:43:ed:73:
                    a9:cd:7f:d4:dd:45:c2:30:0a:b9:a7:92:c1:46:76:
                    f5:67:cf:78:d9:c5:19:00:44:d8:17:0f:d8:92:c3:
                    a1:f1:0e:db:57:ed:f2:73:b9:a1:0c:d1:76:eb:66:
                    a9:7e:e1:f3:2b:6a:07:f2:1f:6e:97:c4:c3:dc:44:
                    03:e4:9e:78:1e:92:7c:f8:c0:f1:87:bf:19:ca:06:
                    c9:82:40:c4:cd:fb:bb:2e:72:6f:3d:1c:de:8c:ba:
                    50:46:23:2a:5c:e3:fc:2a:7a:24:18:94:8a:d8:fa:
                    52:ea:18:3a:65:08:82:8a:c0:c2:ea:bc:46:5c:39:
                    cd:dc:7b:5b:3d:02:64:79:c8:36:43:95:78:f4:3b:
                    47:7e:59:bf:e5:01:ee:30:9b:9b:b7:58:87:73:4a:
                    f4:aa:c4:55:d8:38:a5:56:09:77:13:57:eb:f5:0c:
                    d7:34:f3:71:5f:6b:85:e2:1c:af:d5:17:f9:48:ed:
                    40:6a:9f:10:b4:cb:87:ea:5c:70:51:e9:ce:65:be:
                    17:81:05:f9:cd:eb:d4:cd:1b:a5:8e:19:64:d5:b1:
                    7e:0a:66:f1:bd:da:d5:57:be:4a:68:19:3e:7f:2e:
                    74:da:3c:37:0f:7f:a7:0f:03:69:fc:a8:0e:fe:60:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:E4:73:C6:37:5A:DD:68:56:99:FD:32:9E:F8:F7:ED:DE:6F:CA
            X509v3 Authority Key Identifier:
                keyid:48:FC:01:22:D8:C8:42:BA:C1:37:11:F1:28:4D:1D:38:DE:36:EA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48FC0122D8C842BAC13711F1284D1D38DE36EA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7486b0db-3050-4750-8f66-5726a792adab/0/3230332e3136392e35352e302f32342d3234203d3e20313532303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:c6:d8:6e:bc:30:79:c5:cc:6f:5f:69:3d:0a:95:f4:7c:d9:
         58:c9:10:a2:56:1e:92:9f:ff:2b:2f:75:96:d1:4e:a5:62:ff:
         63:c5:e4:86:f3:23:3f:5d:f7:f1:c5:da:15:e7:a7:87:ab:be:
         f5:d2:f8:e5:72:76:fa:f5:31:3d:fc:63:90:01:00:a0:72:2e:
         00:fa:98:87:c3:f1:fb:94:19:72:ec:d6:d1:48:c2:ff:df:b4:
         28:e7:1d:31:0e:9f:40:fd:1b:ab:50:28:15:21:16:47:3b:8a:
         a2:e9:b8:84:06:5b:ab:f0:33:3d:4c:3c:32:b4:fc:3f:57:c6:
         f4:a8:5a:d8:e5:48:82:e5:8d:7a:74:db:17:7e:40:b2:1f:98:
         3b:c9:fc:7c:61:85:03:a5:37:85:46:73:30:8a:e7:9b:60:f0:
         bb:99:86:b3:c3:2b:54:88:6e:66:f2:94:a9:91:ef:43:c4:7f:
         d5:09:63:e3:df:89:cf:e9:6f:02:ba:66:2c:5a:41:d3:8e:fa:
         94:6e:63:36:da:c9:54:3a:09:1e:6b:12:81:2a:0f:17:eb:05:
         e1:ed:2a:59:77:6f:ca:6d:3c:15:f6:74:dd:5e:df:43:11:0f:
         23:d3:ba:11:e9:9a:13:2f:d6:09:d8:71:bc:e5:9a:ba:dc:82:
         01:58:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 13:58:10 2025 by rpki-client