This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa
File:                     3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa (raw, json)
Hash identifier:          sozZLwJbQXm98EJBIw5sihrpH0G7Es7CzsRNlqGv2wc=
Subject key identifier:   2A:3F:04:07:00:8C:58:31:8A:57:76:6B:0A:75:B0:CA:89:96:73:38
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       18DD2B00CA39B06401BC1EB0CE159B63A0F958E8
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa
Signing time:             Thu 04 Dec 2025 08:54:16 +0000
ROA not before:           Thu 04 Dec 2025 08:49:16 +0000
ROA not after:            Thu 03 Dec 2026 08:54:16 +0000
asID:                     63868
IP address blocks:        103.112.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:dd:2b:00:ca:39:b0:64:01:bc:1e:b0:ce:15:9b:63:a0:f9:58:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Dec  4 08:49:16 2025 GMT
            Not After : Dec  3 08:54:16 2026 GMT
        Subject: CN=2A3F0407008C58318A57766B0A75B0CA89967338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:eb:ba:a0:00:ca:7a:e8:d0:ad:0b:77:21:
                    58:66:72:88:06:6e:59:91:e0:c3:b7:45:ae:79:f2:
                    c7:6f:29:aa:14:be:9c:f0:c1:80:4d:c9:6f:dd:a7:
                    f2:28:00:75:73:5d:6e:79:79:32:d2:86:80:f5:a7:
                    16:d2:2b:95:79:de:9e:22:9e:a0:5c:18:5d:82:9d:
                    51:ca:4e:e1:22:4e:71:c9:0a:c7:f1:0d:1f:9d:50:
                    24:f8:03:e7:31:28:19:31:eb:68:b3:d9:15:e6:47:
                    9f:ba:c1:f2:fd:7b:8f:38:6e:02:c1:e7:fe:79:88:
                    b0:1b:42:40:46:05:f6:58:00:e6:95:c4:b4:7d:40:
                    61:3a:60:e0:7d:12:1d:8e:9b:ce:72:2d:ba:9e:e3:
                    03:de:6d:77:54:69:7c:92:29:73:a0:22:76:1b:7e:
                    cd:09:bb:d9:8c:4c:0d:34:4d:b2:9b:10:68:d6:95:
                    f3:64:7d:91:aa:60:fe:1a:15:32:9a:b8:f9:fd:0f:
                    06:6a:91:6f:07:9e:5c:0c:17:8c:97:cb:96:67:ee:
                    da:cf:ac:5f:33:7a:01:16:98:0d:81:39:af:0a:12:
                    9a:d3:f9:b7:a6:20:15:28:5b:25:43:04:df:0d:58:
                    94:18:30:3d:f0:ed:70:4f:61:98:5b:72:d1:28:4f:
                    c6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3F:04:07:00:8C:58:31:8A:57:76:6B:0A:75:B0:CA:89:96:73:38
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e203633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:0c:b3:46:04:8e:cf:4f:98:b2:95:bd:b7:2a:9f:6d:0e:b0:
         9b:28:f8:10:7d:6e:5b:9e:4e:f9:0e:fb:04:f5:d0:47:e1:64:
         7f:08:76:ca:cb:ff:a8:25:80:d6:0d:c3:02:52:ad:d6:23:b6:
         30:8d:19:c5:e4:f6:ce:e0:af:d6:28:15:2b:e1:a8:b1:83:2f:
         9e:29:a5:e3:37:ee:ab:5e:34:d4:8b:db:03:a1:bb:7b:3e:f3:
         25:6d:13:64:f6:e0:50:8d:89:b1:b6:b1:52:8b:a4:a6:73:3d:
         e2:32:58:52:ae:00:93:64:b8:c5:c3:31:d5:61:34:7a:86:c3:
         de:46:3f:72:29:ef:6b:c1:9c:a2:03:f5:0e:b8:ee:aa:0c:f5:
         1d:c0:47:6b:ad:b9:4a:05:d5:da:dc:a4:af:07:01:10:3b:7f:
         ba:b6:1f:62:4d:90:70:46:92:c2:89:79:95:e4:51:3b:37:e4:
         c5:20:80:6f:d0:3c:87:d8:99:99:52:6c:ff:c1:6c:f7:70:69:
         ae:df:3b:07:56:26:f5:17:b4:2c:c8:3d:d8:44:38:2f:36:0b:
         ee:2d:2b:05:c9:63:fd:bb:20:3c:50:54:df:01:9a:71:c5:3f:
         7c:02:45:2e:ef:87:bd:7f:0b:87:bc:1b:69:05:ac:31:12:1d:
         20:a2:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:47:00 2025 by rpki-client