This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
File:                     3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          dJ48+N7DnAPMlFVVdm79c3GqAaF0/rFXKq0WJY2Deco=
Subject key identifier:   B4:1C:99:EC:9F:05:92:0B:66:8E:C8:9D:E0:49:0E:92:1D:16:A7:D9
Certificate issuer:       /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Certificate serial:       13DE8293850556B0A1F2388FDFFF32961C0A9940
Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa
Signing time:             Sat 15 Nov 2025 10:00:02 +0000
ROA not before:           Sat 15 Nov 2025 09:55:02 +0000
ROA not after:            Sat 14 Nov 2026 10:00:02 +0000
asID:                     132634
IP address blocks:        103.8.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl
                          rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 15:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:de:82:93:85:05:56:b0:a1:f2:38:8f:df:ff:32:96:1c:0a:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
        Validity
            Not Before: Nov 15 09:55:02 2025 GMT
            Not After : Nov 14 10:00:02 2026 GMT
        Subject: CN=B41C99EC9F05920B668EC89DE0490E921D16A7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:20:24:a5:0e:52:18:8e:c1:01:b0:28:3c:
                    e5:49:54:16:7c:bd:be:4c:61:80:bb:7e:f4:ce:1a:
                    c3:37:a3:9e:9b:47:d2:8f:7b:23:77:8b:85:40:c5:
                    49:0e:81:e2:e7:7e:55:d2:51:c2:ec:87:3c:e5:f5:
                    64:b0:f2:23:1c:1c:ee:0e:34:b3:80:62:c7:41:d3:
                    b2:6a:f5:f5:52:ed:25:13:33:e4:91:a0:b3:41:79:
                    60:e4:94:98:7f:6d:d2:11:b4:f2:50:80:17:7e:90:
                    46:78:86:e8:ab:07:6f:d7:1b:96:f3:b2:c0:da:63:
                    0d:1e:99:98:9b:51:20:05:cf:f3:8e:52:e8:67:ab:
                    87:e8:2e:12:87:56:b7:5e:b6:fd:84:07:a7:47:f4:
                    4c:15:f6:d4:c8:f4:f2:57:81:9a:86:8c:82:47:f2:
                    f4:e8:cc:6a:c7:e0:1e:d9:47:2d:75:4e:9d:35:b9:
                    79:c9:09:a4:af:01:b1:97:f3:2c:fc:43:1c:3c:f0:
                    48:a5:88:2e:a9:a9:73:39:3a:32:c9:a3:e9:0d:df:
                    f0:cc:d6:4a:c3:e1:ec:96:7b:d3:fe:df:a2:69:18:
                    f1:51:b8:fa:22:14:70:16:88:ab:76:b2:26:98:ac:
                    3b:4c:53:83:b6:d9:bd:6b:41:52:2a:86:95:5d:aa:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:99:EC:9F:05:92:0B:66:8E:C8:9D:E0:49:0E:92:1D:16:A7:D9
            X509v3 Authority Key Identifier:
                keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e382e3233382e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:32:e3:9b:d1:97:b5:a6:ab:ce:cf:54:41:2f:18:d9:30:
         c5:a8:01:af:dc:e0:6f:6e:09:ce:11:ca:33:75:28:ee:9d:2c:
         49:66:d8:16:96:32:8c:f9:1b:9c:61:7e:2f:19:52:e9:79:fd:
         1a:a3:8f:d7:a6:cf:14:08:da:ae:dd:7d:a5:68:a0:0b:04:31:
         c8:ca:7d:0d:95:3f:14:d9:f2:ba:bd:c6:7a:4e:4e:2c:c1:6f:
         07:6b:74:a3:7b:f9:27:58:8c:6b:41:8d:2d:4a:02:27:b0:34:
         86:9e:b7:3f:59:f8:9c:9a:4f:06:fd:bb:a8:7b:4c:93:4b:8f:
         ca:b3:47:34:36:48:a2:07:89:2b:7f:b3:80:9e:f4:37:25:ce:
         41:b1:73:02:1f:ca:da:10:80:1c:02:0c:2e:57:86:6c:d3:b6:
         cf:f4:96:f3:0c:15:7a:ee:bc:01:28:be:5f:42:5a:00:35:dd:
         9b:dd:e9:1c:7a:bc:bc:ab:26:d6:37:0d:c9:ac:58:c7:22:4f:
         cb:cd:ac:de:4c:9e:3b:0a:a3:6f:1d:4f:62:70:81:b2:b7:38:
         7c:71:a3:b5:20:bd:ad:78:23:1b:88:ee:a2:74:28:74:fa:11:
         28:fd:6b:e7:85:f7:aa:ab:61:3e:ee:a3:83:02:01:3c:d4:1b:
         00:9b:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:13:20 2025 by rpki-client