This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139342e302f32342d3234203d3e203338373736.roa
File:                     3230322e39302e3139342e302f32342d3234203d3e203338373736.roa (raw, json)
Hash identifier:          ZrwMQvzAzI1jsSecuhUNNt204rmawkj4v8JZO2SvonI=
Subject key identifier:   8A:7A:57:B7:8E:0D:1E:50:55:4B:53:49:52:AD:D0:4D:28:B9:B0:8C
Certificate issuer:       /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302
Certificate serial:       107FA547655DFB62652E584B80C16FF4C0488DDB
Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139342e302f32342d3234203d3e203338373736.roa
Signing time:             Sun 30 Nov 2025 03:40:23 +0000
ROA not before:           Sun 30 Nov 2025 03:35:23 +0000
ROA not after:            Sun 29 Nov 2026 03:40:23 +0000
asID:                     38776
IP address blocks:        202.90.194.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 17 Dec 2025 20:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:a5:47:65:5d:fb:62:65:2e:58:4b:80:c1:6f:f4:c0:48:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302
        Validity
            Not Before: Nov 30 03:35:23 2025 GMT
            Not After : Nov 29 03:40:23 2026 GMT
        Subject: CN=8A7A57B78E0D1E50554B534952ADD04D28B9B08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:ef:56:ed:67:0c:49:6e:ea:c1:d7:72:7a:
                    8b:8a:c3:3f:1a:ce:99:68:96:bc:df:31:8f:3a:f1:
                    e3:bf:c0:a2:df:62:db:50:4c:e5:f2:3c:f1:3b:d4:
                    91:b5:9d:8e:7b:9b:c4:4a:71:a9:16:41:3a:e8:ef:
                    40:1e:42:86:a0:88:56:73:3e:63:00:ba:e9:74:56:
                    39:19:0a:2e:ce:b9:85:e6:26:e7:63:f3:b4:29:62:
                    15:b6:a1:95:01:37:6f:d3:b5:bc:85:cb:d3:eb:51:
                    81:21:91:cf:ef:99:b3:05:6d:6c:54:bd:50:08:d1:
                    2f:a6:8e:49:2a:16:51:6c:05:dd:bc:77:33:55:97:
                    f5:94:d6:88:df:bd:ea:b3:6c:71:cb:e3:a7:a0:73:
                    2a:78:cc:f0:e2:75:96:98:91:48:e7:8a:9e:87:51:
                    9b:82:79:ea:c3:29:59:95:ef:a4:33:af:05:8e:2e:
                    85:e2:9a:48:e0:3b:bd:34:b1:82:c2:e2:b8:6d:81:
                    71:ac:19:4e:7b:40:38:a0:21:99:b1:cd:e3:53:49:
                    09:1b:2e:ae:72:c5:11:65:18:01:b8:de:8d:d3:86:
                    5b:91:ea:e2:db:38:16:df:55:a6:00:df:7d:57:14:
                    e4:ef:00:ae:d0:3d:33:34:93:1f:ac:45:67:6c:a1:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7A:57:B7:8E:0D:1E:50:55:4B:53:49:52:AD:D0:4D:28:B9:B0:8C
            X509v3 Authority Key Identifier:
                keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/3230322e39302e3139342e302f32342d3234203d3e203338373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:9d:2a:24:c5:0e:04:25:9b:a7:e1:e0:10:4d:73:7f:e5:
         85:f8:ec:6b:bb:0c:d8:c3:8d:15:f6:ed:b2:df:a7:fb:bd:81:
         79:63:98:85:a2:ab:2e:b8:9c:d2:d2:ba:d5:be:1b:af:a3:d7:
         2d:00:c6:29:3c:ba:aa:c6:58:45:d1:07:14:f9:80:83:1a:fd:
         0a:ac:67:14:e8:3a:71:1c:a5:34:61:dc:a2:2c:61:09:97:bb:
         94:be:f2:87:eb:84:bb:97:ed:b2:f6:42:e6:c6:2c:43:e9:c6:
         79:0d:27:5e:26:89:8c:68:04:e9:d7:1a:76:f4:17:03:df:fb:
         83:02:d2:c9:e9:ac:1c:10:d3:9b:03:ae:a6:ca:bb:a0:ad:6a:
         bc:54:bc:49:09:db:c8:95:0a:f8:f6:0f:b7:5a:d3:df:b1:b2:
         1d:85:8e:a4:49:1c:29:f1:c5:1f:03:a7:4e:28:b4:5e:50:eb:
         d5:c7:e7:6d:53:93:51:24:14:a9:c4:8c:30:ab:45:5d:c1:0d:
         46:10:33:87:35:4e:f0:21:8b:d8:20:99:31:1a:8b:97:44:b9:
         ff:68:55:d7:05:e1:bf:e6:d3:6f:0b:95:bc:07:ec:24:41:5c:
         7c:c6:a4:bb:aa:17:30:f5:12:10:b5:23:78:73:16:57:4b:48:
         ba:e1:99:4d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEH+lR2Vd+2JlLlhLgMFv9MBIjdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5
NzNENzMwMjAeFw0yNTExMzAwMzM1MjNaFw0yNjExMjkwMzQwMjNaMDMxMTAvBgNV
BAMTKDhBN0E1N0I3OEUwRDFFNTA1NTRCNTM0OTUyQUREMDREMjhCOUIwOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+u9W7WcMSW7qwddyeouKwz8a
zplolrzfMY868eO/wKLfYttQTOXyPPE71JG1nY57m8RKcakWQTro70AeQoagiFZz
PmMAuul0VjkZCi7OuYXmJudj87QpYhW2oZUBN2/TtbyFy9PrUYEhkc/vmbMFbWxU
vVAI0S+mjkkqFlFsBd28dzNVl/WU1ojfveqzbHHL46egcyp4zPDidZaYkUjnip6H
UZuCeerDKVmV76QzrwWOLoXimkjgO700sYLC4rhtgXGsGU57QDigIZmxzeNTSQkb
Lq5yxRFlGAG43o3ThluR6uLbOBbfVaYA331XFOTvAK7QPTM0kx+sRWdsoQjFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUinpXt44NHlBVS1NJUq3QTSi5sIwwHwYDVR0j
BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy
RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE
NzMwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjZjAwZjhhLTVjYmQtNDYwZi1i
ZmM2LWJkODk0MmI2NTM3Yy8wLzMyMzAzMjJlMzkzMDJlMzEzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpawjANBgkqhkiG
9w0BAQsFAAOCAQEAWhidKiTFDgQlm6fh4BBNc3/lhfjsa7sM2MONFfbtst+n+72B
eWOYhaKrLric0tK61b4br6PXLQDGKTy6qsZYRdEHFPmAgxr9CqxnFOg6cRylNGHc
oixhCZe7lL7yh+uEu5ftsvZC5sYsQ+nGeQ0nXiaJjGgE6dcadvQXA9/7gwLSyems
HBDTmwOupsq7oK1qvFS8SQnbyJUK+PYPt1rT37GyHYWOpEkcKfHFHwOnTii0XlDr
1cfnbVOTUSQUqcSMMKtFXcENRhAzhzVO8CGL2CCZMRqLl0S5/2hV1wXhv+bTbwuV
vAfsJEFcfMaku6oXMPUSELUjeHMWV0tIuuGZTQ==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:28:09 2025 by rpki-client