This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa
File:                     3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier:          +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=
Subject key identifier:   A5:60:41:8B:C6:84:53:E5:CA:17:A7:52:50:02:47:72:EE:EF:D1:F6
Certificate issuer:       /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial:       042A61C60A6865C5F35880967B983F9041491148
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa
Signing time:             Thu 27 Nov 2025 07:00:02 +0000
ROA not before:           Thu 27 Nov 2025 06:55:02 +0000
ROA not after:            Thu 26 Nov 2026 07:00:02 +0000
asID:                     149315
IP address blocks:        103.184.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
                          rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:61:c6:0a:68:65:c5:f3:58:80:96:7b:98:3f:90:41:49:11:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
        Validity
            Not Before: Nov 27 06:55:02 2025 GMT
            Not After : Nov 26 07:00:02 2026 GMT
        Subject: CN=A560418BC68453E5CA17A75250024772EEEFD1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:be:c3:56:07:b5:3b:63:95:a4:f1:d0:87:
                    0e:20:a3:8b:22:8f:8d:c5:0b:7b:14:47:8d:44:8f:
                    2e:9a:96:76:63:9d:3d:5e:44:1b:fc:b7:83:57:66:
                    eb:a0:ba:39:71:ba:33:91:8e:a9:d3:4b:dc:5a:27:
                    56:3c:22:9e:99:7b:da:0e:97:b9:55:f4:74:55:e1:
                    66:ca:a1:71:28:df:a2:c6:7f:9d:7e:4a:2e:e1:dd:
                    e5:ea:40:b6:23:33:cf:f4:a7:58:9d:ae:93:b8:9e:
                    ed:50:94:85:3e:bb:c2:ae:2a:e5:8c:57:5e:9e:c0:
                    96:6a:1e:30:86:9b:e2:79:50:ff:3c:51:34:47:73:
                    ca:e0:b3:7f:a3:de:14:a6:20:fc:9d:d6:e2:82:be:
                    17:b2:55:5f:6d:24:b4:5b:30:c1:70:5c:0b:dc:26:
                    ed:52:93:e1:49:67:66:fc:1b:69:a1:3d:a7:9a:7f:
                    9c:6a:da:08:47:c9:3d:3b:7d:77:ea:58:78:e3:f0:
                    cc:6e:14:7e:b4:c7:3a:81:de:73:4a:12:97:57:4d:
                    4c:22:55:4b:d7:52:f8:b0:3f:2e:85:29:40:a1:92:
                    9d:3a:b0:9b:79:85:0f:19:77:c9:a5:f4:82:4f:f4:
                    d7:fd:54:83:ba:b6:14:e9:69:39:88:de:1a:6d:cb:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:60:41:8B:C6:84:53:E5:CA:17:A7:52:50:02:47:72:EE:EF:D1:F6
            X509v3 Authority Key Identifier:
                keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:d4:df:a7:61:55:93:17:22:0a:7c:d5:38:d1:74:88:32:
         aa:27:93:ef:95:2e:25:5d:df:6f:76:4a:6e:44:5e:50:0f:ea:
         4d:00:71:de:53:62:fe:d8:0f:7b:05:b2:d7:90:75:df:0f:f0:
         83:6a:d4:ad:70:d9:ed:b5:e6:e5:e4:3f:41:3a:95:8e:58:b6:
         6b:df:4d:26:8c:79:1c:e9:fe:68:b8:53:c5:7e:81:01:d4:57:
         3a:c9:c3:ee:5c:4f:3e:2f:26:0c:84:1c:dc:1b:e4:76:7f:0f:
         5b:c2:28:b9:4c:c0:0a:2e:62:b4:9e:fe:05:67:78:0f:95:a6:
         6d:67:97:f7:98:aa:40:58:40:ba:87:a2:ee:76:8c:5d:e7:04:
         6d:83:a2:c1:9c:7d:ef:ec:0a:00:d9:a8:9c:fb:39:ff:40:2e:
         51:8e:f5:fe:43:e0:7a:f4:56:78:80:92:32:3d:c4:ad:4c:9f:
         a0:71:d5:81:83:17:ba:a2:dd:f8:ab:eb:a5:c8:98:b3:3c:77:
         b8:56:f5:09:3a:f0:47:a2:e2:90:86:8d:fa:ae:70:a5:f3:99:
         a8:22:5d:92:4a:f1:3e:63:c2:ee:b8:bc:cd:b2:2a:af:69:dd:
         f0:27:23:26:1c:5c:71:c6:c9:0c:92:9f:c6:79:8d:84:b8:ad:
         2b:45:5d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:30 2025 by rpki-client