This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
File:                     3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (raw, json)
Hash identifier:          45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=
Subject key identifier:   F8:15:31:D0:3E:65:E3:F8:13:94:95:77:B9:E0:03:58:7E:3C:49:F1
Certificate issuer:       /CN=4ACFA054E26D225A10C6B0FD316D21263924491E
Certificate serial:       4664A05B0BC633347102FD091FFBD8B51CE124FD
Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa
Signing time:             Mon 17 Nov 2025 15:00:00 +0000
ROA not before:           Mon 17 Nov 2025 14:55:00 +0000
ROA not after:            Mon 16 Nov 2026 15:00:00 +0000
asID:                     132649
IP address blocks:        103.24.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl
                          rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:64:a0:5b:0b:c6:33:34:71:02:fd:09:1f:fb:d8:b5:1c:e1:24:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E
        Validity
            Not Before: Nov 17 14:55:00 2025 GMT
            Not After : Nov 16 15:00:00 2026 GMT
        Subject: CN=F81531D03E65E3F813949577B9E003587E3C49F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:b1:f4:6d:1b:d2:0c:1e:e7:78:92:f8:80:
                    d1:24:da:0a:1d:bc:af:27:a7:43:37:f1:58:8f:52:
                    98:d7:8c:01:19:87:5f:5d:67:99:c1:cc:71:48:55:
                    e8:1b:38:d9:6c:c0:b1:6c:b0:9c:63:d7:d3:58:05:
                    58:87:72:20:cd:78:32:f4:94:1c:bd:4f:ef:14:35:
                    9c:13:5a:28:c7:8b:7b:5b:bb:16:2e:3d:96:36:29:
                    ed:68:40:0c:84:a7:92:44:ef:93:85:9a:b0:43:0b:
                    89:41:bf:da:02:f3:ca:2e:5c:d0:22:e7:21:4c:7b:
                    ae:29:d3:8e:a7:62:f7:38:ed:60:d2:88:b9:59:11:
                    3d:44:a6:a5:b7:77:92:15:2c:38:31:d3:2b:5d:55:
                    f2:fd:d7:1d:de:c5:5b:81:6d:61:0a:c0:05:f5:92:
                    69:8c:9e:47:9f:be:43:c3:fb:19:ea:67:89:dd:3b:
                    8e:fc:f4:59:3a:45:02:95:47:0c:b6:ff:c3:19:67:
                    72:f7:8b:c4:7d:fc:28:a7:13:dc:d6:be:21:51:29:
                    83:0e:7a:df:66:7b:ad:2c:24:9a:d7:3a:4c:41:45:
                    bb:23:35:5d:93:83:1c:4d:14:85:50:55:63:ff:dd:
                    12:9b:0d:6b:c7:9e:ec:d2:aa:76:ea:a4:a7:a9:8f:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:15:31:D0:3E:65:E3:F8:13:94:95:77:B9:E0:03:58:7E:3C:49:F1
            X509v3 Authority Key Identifier:
                keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:17:eb:b9:c7:e7:84:15:24:cc:4e:39:59:f9:67:86:0d:72:
         40:f1:81:56:ba:28:32:75:19:de:24:e9:65:b8:b7:b2:4f:47:
         b2:c6:c6:3f:c6:04:66:d3:65:74:ca:24:46:a3:b2:40:56:f8:
         4a:03:60:73:b4:5b:ac:1d:2a:95:64:cd:2f:d1:6b:38:30:0c:
         da:ac:03:92:0c:99:d6:3d:48:0e:8c:a4:37:66:3e:ff:5a:b7:
         3c:93:4b:2f:30:7c:35:ff:be:80:ed:43:b1:81:fd:00:28:d3:
         2e:44:16:52:a1:7b:80:ae:d7:f9:50:75:16:d8:f7:9b:bb:31:
         6f:34:fc:94:90:b3:89:86:9b:2a:ab:91:1e:f9:9c:42:1f:58:
         c7:d6:8f:73:2d:09:00:09:cf:b7:9d:d7:d8:87:0f:eb:7a:ff:
         ee:7d:53:d9:af:3d:d2:79:89:a5:cd:a2:37:e4:97:40:64:a6:
         3e:53:4e:b0:59:6c:d4:46:84:d5:1e:d4:f0:90:ad:c9:cb:54:
         e7:9a:e7:05:79:da:23:7f:39:34:6c:b3:75:c1:8e:33:c0:e7:
         6c:19:31:b9:ad:fa:7c:af:87:d1:03:a9:b8:32:bb:f1:f9:05:
         e2:ad:3c:cd:6a:7b:70:da:19:58:35:45:2a:b2:a6:83:8a:8e:
         12:92:d4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:12:43 2025 by rpki-client