This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138322e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=
Subject key identifier:   B7:B5:A2:32:6B:F1:DE:F2:44:05:65:9B:0A:28:C9:58:6A:24:54:CA
Certificate issuer:       /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial:       38D005EEE6B0F56F0938594826AB8AF3AFAD3617
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 12 Nov 2025 20:00:52 +0000
ROA not before:           Wed 12 Nov 2025 19:55:52 +0000
ROA not after:            Wed 11 Nov 2026 20:00:52 +0000
asID:                     9341
IP address blocks:        103.182.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
                          rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 08:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d0:05:ee:e6:b0:f5:6f:09:38:59:48:26:ab:8a:f3:af:ad:36:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
        Validity
            Not Before: Nov 12 19:55:52 2025 GMT
            Not After : Nov 11 20:00:52 2026 GMT
        Subject: CN=B7B5A2326BF1DEF24405659B0A28C9586A2454CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:a3:4e:6f:9a:ee:f0:7e:de:54:65:2e:fc:
                    7c:db:a5:a1:8a:5e:e1:11:4f:d3:34:8f:9e:41:3b:
                    1e:6c:f0:fc:66:e7:1e:da:25:c1:24:99:40:10:22:
                    46:de:bf:65:2b:58:86:23:93:1a:3d:c2:89:81:ed:
                    bf:0d:a1:57:94:d7:32:14:ba:83:11:e0:ef:38:01:
                    e5:4d:10:9d:2c:5d:a5:8b:cb:21:5f:e5:45:9f:6e:
                    1c:4a:29:a2:57:71:e4:5b:a6:54:bd:94:ac:7b:ab:
                    05:5b:33:2f:90:26:b8:b9:18:a8:f0:00:49:e1:31:
                    fc:29:89:93:fa:f2:89:ae:07:76:37:26:73:9c:a3:
                    ac:85:4b:16:3d:a7:06:af:40:1e:52:bf:85:82:c5:
                    fc:bf:ed:e7:30:ef:5a:ae:6d:44:99:68:99:27:16:
                    e3:b9:8a:86:96:df:1a:7e:86:00:c2:2b:16:11:2c:
                    d4:37:c6:f1:af:0a:2e:18:0c:a4:e8:f4:88:79:eb:
                    1a:46:9e:28:fd:96:61:31:bb:ca:28:90:3e:f8:c2:
                    17:25:6f:05:db:8e:58:36:c5:48:3d:53:82:30:06:
                    fe:be:09:63:cc:52:84:e0:d8:ed:d2:6a:a9:8e:9d:
                    24:02:83:f3:4a:1d:28:24:02:76:42:a2:52:30:89:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:A2:32:6B:F1:DE:F2:44:05:65:9B:0A:28:C9:58:6A:24:54:CA
            X509v3 Authority Key Identifier:
                keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:72:eb:77:d7:82:2c:ba:73:2c:87:0c:8e:49:da:3e:c5:
         ad:cf:f0:93:7d:00:95:61:89:7e:f0:f9:af:da:d8:be:30:b7:
         8c:40:40:b6:b7:21:31:67:a7:bd:e3:90:96:a9:13:22:17:57:
         22:0e:de:9a:0e:73:ab:02:e3:c1:71:8e:15:fd:20:25:6a:05:
         7d:76:80:30:d2:fe:9c:b9:50:40:99:3d:47:04:3b:45:14:89:
         d8:ba:81:c9:07:ac:92:86:d8:65:84:67:3b:d7:e6:03:00:8b:
         e9:c9:94:a1:6e:28:59:32:a4:5c:69:83:7d:3f:f0:50:9c:02:
         9c:bd:1c:3b:6e:4f:58:02:3b:11:93:ba:92:4d:39:d7:4f:fb:
         80:74:24:8d:b4:d0:23:7e:b1:aa:b7:84:c3:91:ba:c0:27:93:
         70:72:70:d9:cb:9b:73:c8:dd:d5:f7:20:16:b6:e2:17:ff:af:
         21:99:9d:30:a4:58:8a:4c:88:a5:0d:6f:7f:c3:65:1a:7d:57:
         0f:7f:31:58:50:0c:10:17:48:90:9f:4c:ac:37:a2:7d:72:08:
         60:9c:12:cb:ed:b1:f5:b5:98:52:f8:2a:3a:d8:1d:89:0c:89:
         ee:a1:4d:2e:07:64:81:b1:21:ef:2c:b5:48:00:f0:37:d9:10:
         b6:a7:42:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:58:07 2025 by rpki-client