This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
File:                     3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          7bCvfa0QrPkz8ERFoNAuG1TWakcC3XYPSoAuFNDa+Xc=
Subject key identifier:   55:49:80:C8:FC:D0:25:00:42:D1:9E:0E:08:EC:30:FE:1D:97:B5:F9
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       16F6BDE0551E7D5BFC79BA2CD3D0542DFA21D253
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa
Signing time:             Wed 10 Dec 2025 04:02:33 +0000
ROA not before:           Wed 10 Dec 2025 03:57:33 +0000
ROA not after:            Wed 09 Dec 2026 04:02:33 +0000
asID:                     133798
IP address blocks:        203.128.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 15:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f6:bd:e0:55:1e:7d:5b:fc:79:ba:2c:d3:d0:54:2d:fa:21:d2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Dec 10 03:57:33 2025 GMT
            Not After : Dec  9 04:02:33 2026 GMT
        Subject: CN=554980C8FCD0250042D19E0E08EC30FE1D97B5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:52:77:bc:d4:84:52:89:c1:a7:66:d2:9f:c1:
                    dc:13:29:66:84:b7:47:f4:2b:4e:16:4c:e2:86:be:
                    98:f4:bc:a6:75:fb:e4:2f:41:8d:45:f5:80:fc:b9:
                    51:6d:a5:68:01:05:b1:11:a4:83:b5:34:10:b4:d4:
                    5e:78:e6:3e:73:bd:58:a0:76:cb:9a:43:d8:78:88:
                    fb:aa:e8:aa:70:7a:97:c7:ca:1c:5c:71:f0:19:2b:
                    fa:b4:62:a6:c8:05:aa:6a:40:89:03:f4:44:43:65:
                    d7:bd:57:a5:ab:09:16:70:89:bd:9c:d6:a4:2f:23:
                    7b:ed:ba:35:43:d3:d6:31:84:e8:f8:6f:f4:1e:a8:
                    62:94:a1:75:63:21:c9:cf:61:ce:70:81:2d:94:1d:
                    55:02:25:84:04:1a:be:b6:74:32:16:90:22:dc:53:
                    73:6e:13:4f:95:69:47:01:5d:ae:e1:c6:5e:1a:6b:
                    99:42:84:7c:97:35:be:b0:40:30:76:cd:84:4f:e2:
                    b8:a4:cd:c0:54:2b:f8:97:0e:1d:3a:c3:c1:6d:90:
                    c3:f1:10:f7:64:fb:63:32:cd:38:28:71:6f:02:3a:
                    29:f3:ec:0b:c6:e7:c3:2e:38:48:e1:a8:f0:2a:56:
                    8b:87:b0:e3:c7:67:55:82:e5:69:06:42:16:b7:4c:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:49:80:C8:FC:D0:25:00:42:D1:9E:0E:08:EC:30:FE:1D:97:B5:F9
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3235312e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:18:1b:e3:ab:05:a7:89:af:53:ad:42:70:98:14:cc:f6:3a:
         76:ca:30:85:d3:bd:ab:cf:53:a9:b5:b0:99:18:dc:a0:8e:3f:
         b1:05:df:51:95:63:f7:1d:75:29:97:e9:c3:88:b9:b6:8a:f6:
         5a:25:99:97:2d:b2:7d:79:bc:12:1f:ec:f4:b5:8e:a1:be:31:
         b8:5a:5d:7c:6b:c4:fc:d6:06:57:97:7e:0d:5c:e7:b4:08:41:
         dd:fd:6a:07:ef:90:73:26:2c:a1:c8:4c:5e:27:c3:fd:89:23:
         84:e0:c6:9a:90:50:5e:82:0d:6c:c4:d7:34:5c:71:f0:3f:ee:
         63:4b:99:12:e1:6b:e9:7c:b8:19:0f:a5:ee:81:6f:37:b7:47:
         fa:d7:a0:18:8b:0a:d9:7a:15:45:71:70:2a:0f:f5:1b:9b:24:
         9d:1b:a4:9c:9a:bc:31:ce:6e:53:8f:a5:77:e3:ef:cc:ee:33:
         7b:13:50:ee:1a:a0:66:26:ed:ee:92:49:a2:27:7e:91:d8:4b:
         61:a4:0b:f5:77:cd:fe:33:fe:9c:e5:4e:cf:ec:48:76:94:1e:
         44:12:32:3e:d9:7e:84:3d:c9:93:e8:42:b1:f7:80:c4:1f:0f:
         46:61:06:34:52:c7:91:be:14:da:9a:35:71:2d:68:b4:f2:2d:
         a7:2d:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:02:54 2025 by rpki-client