This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
File:                     3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (raw, json)
Hash identifier:          +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=
Subject key identifier:   51:4A:B9:A4:72:CA:16:C7:16:55:C0:E0:E0:AD:CD:16:86:56:86:C4
Certificate issuer:       /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
Certificate serial:       7D623C285A065B1E7902B9A371810DC49C9DCCD0
Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
Signing time:             Wed 05 Nov 2025 07:00:00 +0000
ROA not before:           Wed 05 Nov 2025 06:55:00 +0000
ROA not after:            Wed 04 Nov 2026 07:00:00 +0000
asID:                     141898
IP address blocks:        103.164.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl
                          rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 01:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:3c:28:5a:06:5b:1e:79:02:b9:a3:71:81:0d:c4:9c:9d:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784
        Validity
            Not Before: Nov  5 06:55:00 2025 GMT
            Not After : Nov  4 07:00:00 2026 GMT
        Subject: CN=514AB9A472CA16C71655C0E0E0ADCD16865686C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6e:a1:23:cd:7e:68:c1:d3:d7:07:ef:56:d4:
                    ea:d1:28:9b:05:1d:6c:fe:56:af:b0:41:ba:b3:93:
                    3f:a3:8b:4b:6a:8b:4c:f2:b6:e8:c3:2a:2d:8c:fc:
                    64:29:e9:75:96:6c:46:db:f7:45:98:cd:32:6d:e2:
                    db:37:10:61:b4:74:62:6a:f6:53:12:2d:74:f3:56:
                    14:a9:4b:fa:17:f5:2a:60:1e:2c:ae:f8:75:eb:5a:
                    4d:4f:ea:f3:20:65:58:a2:1e:5b:68:30:1b:70:d8:
                    a2:e2:32:ca:e4:eb:47:5f:ae:31:8c:89:2f:c7:6c:
                    60:d0:7f:21:ed:61:27:1b:4d:7b:a3:4b:30:34:a0:
                    86:fe:88:4c:ff:62:c5:6b:bf:f4:e2:09:36:99:a6:
                    f2:a6:7a:66:d2:1f:53:fd:f5:df:4f:97:23:65:d1:
                    e4:fe:eb:e4:bf:8b:cf:0b:7d:da:ba:a5:35:f1:a9:
                    6d:22:01:60:ea:2f:5b:07:9f:b5:d8:4e:d9:cf:54:
                    ca:27:36:ed:7e:cc:49:b5:fb:90:1f:3f:e9:5d:62:
                    bb:fb:21:29:b2:a9:9f:78:c5:03:7c:d4:f5:4a:51:
                    f9:24:ab:a8:08:da:e3:05:02:e0:4e:52:6a:fa:f7:
                    cd:9d:35:ca:f3:77:b2:08:e2:d8:9d:db:82:ba:0d:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4A:B9:A4:72:CA:16:C7:16:55:C0:E0:E0:AD:CD:16:86:56:86:C4
            X509v3 Authority Key Identifier:
                keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:9a:5c:de:a9:d0:2b:87:39:3f:5f:8d:80:6d:8c:dc:b2:
         41:39:03:88:f0:a9:ad:3f:1f:38:c5:40:4c:b3:42:7d:9e:77:
         64:47:85:5e:be:30:fe:f7:86:57:92:34:70:d3:6c:74:48:bd:
         d6:b5:96:0e:bd:51:5e:2b:3d:4b:09:c4:d6:79:24:11:65:09:
         50:27:99:d6:23:cf:65:68:9c:6c:77:19:a1:ab:c3:9d:9f:59:
         fa:36:8e:68:ab:a9:93:a5:94:cc:81:32:1b:8a:4a:bc:31:5c:
         f4:77:c8:97:0f:88:74:8e:26:8b:80:2a:22:cf:33:53:1c:f6:
         81:5a:56:f2:a7:63:97:c1:d3:80:55:27:be:96:36:9d:97:9d:
         a3:0c:71:21:fd:e8:ae:b5:cd:d7:79:be:f0:75:7e:8e:4f:7a:
         41:27:31:21:ea:3d:53:36:50:57:3c:80:19:fa:df:b1:26:b1:
         29:d6:c5:25:ef:c6:7e:77:58:cd:62:66:f3:ae:97:b0:d9:e2:
         42:9d:83:1a:a6:a3:d5:3c:18:d8:51:87:1c:a1:ba:40:f7:f9:
         c7:f7:cb:ce:73:ff:8f:2d:e5:97:12:37:e7:b7:c1:89:7e:c8:
         2a:fd:8e:38:50:9e:87:5e:02:f0:c9:d2:51:91:47:73:4d:57:
         d7:21:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:55:38 2025 by rpki-client