This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa
File:                     3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (raw, json)
Hash identifier:          9ttsEv8xyQdIj2ysOYcOeKd2yqYa6sGhfUajffTzKd4=
Subject key identifier:   7A:3F:08:83:A9:04:4A:49:1B:53:DE:8D:DD:E3:D0:12:27:02:FB:3F
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       184940FF9BE52B01E8B02177437863645B0D6698
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa
Signing time:             Mon 17 Nov 2025 02:00:00 +0000
ROA not before:           Mon 17 Nov 2025 01:55:00 +0000
ROA not after:            Mon 16 Nov 2026 02:00:00 +0000
asID:                     46026
IP address blocks:        103.135.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 17:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:49:40:ff:9b:e5:2b:01:e8:b0:21:77:43:78:63:64:5b:0d:66:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Nov 17 01:55:00 2025 GMT
            Not After : Nov 16 02:00:00 2026 GMT
        Subject: CN=7A3F0883A9044A491B53DE8DDDE3D0122702FB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:44:8b:06:99:b0:d0:d4:b2:b5:3b:35:54:
                    2e:48:55:41:cd:85:41:53:b7:e5:f1:1c:6e:2a:8a:
                    46:6e:e2:2f:63:1c:a5:9d:4c:81:ff:84:4b:c8:bc:
                    49:19:78:bf:b1:da:c6:ca:35:90:2d:26:18:ad:58:
                    1f:4c:a8:57:cd:2e:28:9e:30:b9:3e:51:2a:56:f6:
                    72:a1:95:91:5b:ce:48:74:e6:52:83:0b:b8:b6:b4:
                    55:f6:33:31:f5:34:09:b4:1c:64:4f:3f:4a:0a:ed:
                    8f:51:2f:d0:a0:aa:f6:ce:d3:8e:cc:57:92:b3:01:
                    6f:50:64:2d:6a:c6:4f:7e:8f:9e:a0:d5:14:e4:60:
                    6c:2f:a8:71:16:7d:6d:fa:f1:2e:d2:94:12:35:71:
                    3b:fa:2e:e7:ed:d9:99:d2:1a:bd:c0:79:14:f0:a1:
                    52:c9:2f:e0:8f:83:2a:6e:57:d8:e6:10:46:39:0b:
                    67:1b:c5:19:c9:64:0a:c6:75:33:12:ae:12:a6:04:
                    db:10:47:9d:42:a0:25:d3:d0:a4:4c:ed:23:10:97:
                    17:dc:b8:2f:f8:35:ef:96:2e:24:b8:d1:99:65:60:
                    9b:0c:9f:73:9d:2e:07:73:0c:36:94:2c:9c:5e:53:
                    90:67:de:50:aa:22:de:66:61:50:98:44:ad:7b:3b:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3F:08:83:A9:04:4A:49:1B:53:DE:8D:DD:E3:D0:12:27:02:FB:3F
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37322e302f32332d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:0b:a1:ab:3d:f7:9a:f5:4f:64:c6:7b:74:2f:c8:c4:0c:9c:
         9b:9d:56:40:3e:54:f2:c7:ef:be:a1:78:22:5e:17:c3:cb:4f:
         d0:29:25:f7:6f:46:20:12:11:10:54:47:5c:f9:b4:68:87:33:
         b8:07:ab:49:62:48:e2:32:59:2e:31:8e:39:0d:84:1e:9f:d9:
         f2:73:7a:b6:7f:a4:2e:0e:1b:54:fd:22:de:b5:94:e3:6b:fd:
         35:b3:06:f6:4b:d4:2a:91:fe:6d:46:90:01:21:20:a8:44:b5:
         30:b8:54:78:22:4e:8b:a1:c5:29:bd:5d:bb:4c:58:22:38:0c:
         44:8f:f4:cb:9d:cd:b6:5f:3b:7d:b0:e4:74:7c:e4:d0:78:fd:
         f8:c8:6b:34:48:d2:80:4a:25:fd:ce:b7:d0:59:bb:2c:e8:d3:
         5c:4f:58:69:c5:da:42:dc:22:93:7d:8b:98:16:7e:c1:c5:94:
         92:ac:00:13:40:97:3b:5e:bc:ee:7d:f2:39:31:76:af:1d:8f:
         91:1a:db:55:95:0d:21:a7:47:cb:c1:bc:53:48:fb:35:d0:50:
         87:26:22:8d:45:88:a2:b1:d2:c8:9d:f2:ad:75:78:a5:de:cb:
         45:09:9f:a0:74:cd:0d:a5:21:48:17:da:6d:b3:6f:94:7b:59:
         cc:cf:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:01:41 2025 by rpki-client