This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
File:                     3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (raw, json)
Hash identifier:          AMV0DaoVzEpr6QFAmB1hobQPZBoR2MCCNocuQFbfT54=
Subject key identifier:   7F:07:48:21:2F:B9:74:83:8E:CE:1B:B2:F9:42:60:F4:61:B4:0E:F9
Certificate issuer:       /CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
Certificate serial:       5D3C1BDEEE08B92742F0F792B108CA15DA5D0061
Authority key identifier: E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa
Signing time:             Tue 18 Nov 2025 13:00:02 +0000
ROA not before:           Tue 18 Nov 2025 12:55:02 +0000
ROA not after:            Tue 17 Nov 2026 13:00:02 +0000
asID:                     142309
IP address blocks:        103.152.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl
                          rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3c:1b:de:ee:08:b9:27:42:f0:f7:92:b1:08:ca:15:da:5d:00:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF
        Validity
            Not Before: Nov 18 12:55:02 2025 GMT
            Not After : Nov 17 13:00:02 2026 GMT
        Subject: CN=7F0748212FB974838ECE1BB2F94260F461B40EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2c:80:97:fa:22:e8:e2:bb:0c:f8:ae:25:3b:
                    eb:1d:33:05:15:65:34:79:3d:91:3c:58:89:88:c6:
                    6b:94:6c:5a:57:60:5d:16:3b:8c:20:b4:d6:ab:66:
                    5e:c3:46:9e:17:af:86:20:27:c9:23:83:5c:b2:ae:
                    dd:30:d6:69:ce:bd:e8:d3:17:71:5a:9e:76:bc:3c:
                    d9:a7:12:6e:17:8a:07:61:ff:79:48:d3:2d:be:63:
                    ce:a9:00:d0:36:97:5d:c6:29:79:ce:71:fe:2c:de:
                    8b:6d:d0:84:f0:93:da:84:ea:1a:02:1c:09:61:1d:
                    19:02:55:59:69:f3:bb:ee:9d:47:7b:a2:0c:00:c5:
                    ae:30:55:e0:34:96:ce:23:ba:be:88:7d:29:86:0c:
                    0f:fb:23:a0:85:9c:10:f3:95:28:d4:79:6f:60:af:
                    ae:48:f8:f0:44:32:20:77:02:82:2f:4a:78:9c:17:
                    44:fb:dd:95:5d:79:7d:17:12:d6:5e:7f:ae:b7:2a:
                    8b:87:f5:99:0e:65:6c:88:23:7d:2d:dc:b7:b4:7f:
                    69:c1:82:f5:94:e0:5a:20:9a:6a:5c:dd:d8:19:60:
                    aa:f1:d9:9e:0b:6e:3e:7e:cb:e2:48:9e:6d:d9:f7:
                    0a:73:e9:cc:18:7b:86:5d:35:f9:f5:dc:af:03:36:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:07:48:21:2F:B9:74:83:8E:CE:1B:B2:F9:42:60:F4:61:B4:0E:F9
            X509v3 Authority Key Identifier:
                keyid:E1:B0:3F:9E:EA:71:C0:0F:69:D8:38:BC:1D:AA:D1:13:A8:BD:F6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1B03F9EEA71C00F69D838BC1DAAD113A8BDF6DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:51:2c:d7:c1:99:d0:ed:38:87:d1:97:5d:88:8d:b5:46:14:
         f2:fb:92:9c:f8:f0:21:2e:99:01:81:ed:80:fc:df:36:7a:a0:
         6f:95:29:2a:d1:24:8c:34:6f:49:b9:a2:7f:e1:1b:56:11:52:
         55:e5:ad:7a:eb:64:1f:88:3b:8c:06:fb:b2:ac:93:b1:3a:02:
         53:6e:ea:3f:5a:97:05:6b:43:a8:02:78:64:9b:8e:0e:aa:34:
         d6:97:95:2c:25:d3:30:0e:09:05:f4:01:c8:da:75:b0:65:ef:
         9e:4e:b3:62:70:c8:00:50:27:64:d0:3b:1b:d6:f0:86:d5:c6:
         88:78:a9:bb:d8:f3:ad:4d:df:f9:f0:44:cc:70:c0:31:f2:7d:
         47:f9:24:17:24:5b:47:ea:b0:26:6d:d0:d8:e1:8a:8f:58:b4:
         d4:83:c9:3b:e3:4e:8c:11:a5:4a:ad:5d:17:22:ed:bc:5f:a3:
         fe:00:fc:2b:80:fc:3f:87:95:78:c7:08:e0:5b:21:19:cc:ef:
         af:4e:d9:74:b1:72:4b:f0:ad:77:d5:02:23:12:b3:17:6a:36:
         1f:09:64:ac:59:8d:fb:60:49:08:4e:6d:6e:f0:1c:9f:b0:56:
         ed:92:c6:99:c5:df:be:ed:20:c3:fe:5b:e2:c1:bf:6b:eb:85:
         ec:bc:6d:94
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXTwb3u4IuSdC8PeSsQjKFdpdAGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNB
OEJERjZERjAeFw0yNTExMTgxMjU1MDJaFw0yNjExMTcxMzAwMDJaMDMxMTAvBgNV
BAMTKDdGMDc0ODIxMkZCOTc0ODM4RUNFMUJCMkY5NDI2MEY0NjFCNDBFRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3LICX+iLo4rsM+K4lO+sdMwUV
ZTR5PZE8WImIxmuUbFpXYF0WO4wgtNarZl7DRp4Xr4YgJ8kjg1yyrt0w1mnOvejT
F3Fanna8PNmnEm4Xigdh/3lI0y2+Y86pANA2l13GKXnOcf4s3ott0ITwk9qE6hoC
HAlhHRkCVVlp87vunUd7ogwAxa4wVeA0ls4jur6IfSmGDA/7I6CFnBDzlSjUeW9g
r65I+PBEMiB3AoIvSnicF0T73ZVdeX0XEtZef663KouH9ZkOZWyII30t3Le0f2nB
gvWU4Fogmmpc3dgZYKrx2Z4Lbj5+y+JInm3Z9wpz6cwYe4ZdNfn13K8DNmSFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfwdIIS+5dIOOzhuy+UJg9GG0DvkwHwYDVR0j
BBgwFoAU4bA/nupxwA9p2Di8HarRE6i99t8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjNkMTRjYi1jY2MyLTQ2ZDItOGUzMS0xNmY1YmVjMGFjZDgvMC9FMUIwM0Y5RUVB
NzFDMDBGNjlEODM4QkMxREFBRDExM0E4QkRGNkRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFCMDNGOUVFQTcxQzAwRjY5RDgzOEJDMURBQUQxMTNBOEJE
RjZERi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiM2QxNGNiLWNjYzItNDZkMi04
ZTMxLTE2ZjViZWMwYWNkOC8wLzMxMzAzMzJlMzEzNTMyMmUzOTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5hfMA0GCSqG
SIb3DQEBCwUAA4IBAQBIUSzXwZnQ7TiH0ZddiI21RhTy+5Kc+PAhLpkBge2A/N82
eqBvlSkq0SSMNG9JuaJ/4RtWEVJV5a1662QfiDuMBvuyrJOxOgJTbuo/WpcFa0Oo
Anhkm44OqjTWl5UsJdMwDgkF9AHI2nWwZe+eTrNicMgAUCdk0Dsb1vCG1caIeKm7
2POtTd/58ETMcMAx8n1H+SQXJFtH6rAmbdDY4YqPWLTUg8k7406MEaVKrV0XIu28
X6P+APwrgPw/h5V4xwjgWyEZzO+vTtl0sXJL8K131QIjErMXajYfCWSsWY37YEkI
Tm1u8ByfsFbtksaZxd++7SDD/lviwb9r64XsvG2U
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:35:36 2025 by rpki-client