This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=
Subject key identifier:   F7:EA:22:ED:B4:89:0F:C0:F0:F4:D0:68:0A:0F:DE:99:21:1E:C1:66
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       68533A5D17E876C09FC5E172A420D83EFDD47D15
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
Signing time:             Mon 17 Nov 2025 10:02:32 +0000
ROA not before:           Mon 17 Nov 2025 09:57:32 +0000
ROA not after:            Mon 16 Nov 2026 10:02:32 +0000
asID:                     50104
IP address blocks:        103.118.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 23:04:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:3a:5d:17:e8:76:c0:9f:c5:e1:72:a4:20:d8:3e:fd:d4:7d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Nov 17 09:57:32 2025 GMT
            Not After : Nov 16 10:02:32 2026 GMT
        Subject: CN=F7EA22EDB4890FC0F0F4D0680A0FDE99211EC166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:9d:6e:2a:fb:7b:60:e1:d0:16:94:ac:1f:
                    90:0d:eb:7f:8f:f4:8a:66:97:44:91:34:13:10:2e:
                    70:75:59:8b:64:c1:04:a2:da:44:15:8d:4e:98:ed:
                    cb:21:cc:4f:7d:7d:14:01:a9:cc:74:c6:f9:96:1d:
                    f1:c6:b1:e0:39:f1:4c:47:1a:5c:7e:a7:0b:de:6d:
                    f2:5f:fc:ab:94:81:34:32:f8:8a:8a:d6:97:2d:73:
                    99:77:72:6a:30:57:43:8c:3a:e1:eb:2a:83:c6:50:
                    f3:87:8a:ed:77:0a:48:8a:b6:e6:12:05:32:01:a3:
                    d5:c2:61:ba:62:e4:e7:9e:29:f9:ee:ea:e1:36:0d:
                    7f:50:e7:b5:6e:65:f6:4c:d2:2e:56:9e:cf:8b:bd:
                    52:50:0f:16:cb:60:1a:17:a9:6f:e2:b7:7a:a7:80:
                    af:9e:50:9a:b0:21:65:3a:55:4e:5e:8f:de:79:88:
                    66:82:05:5a:9d:2a:f8:9b:08:f3:73:0b:1e:2c:fd:
                    b3:9a:20:f4:a1:d0:8d:d3:0d:26:29:59:39:2e:5d:
                    39:b9:30:1e:c5:d9:b2:aa:b8:49:39:ee:90:b5:48:
                    10:8d:9e:a2:b6:5a:b7:cf:76:4f:7a:2f:92:50:44:
                    94:a1:19:bf:36:96:ad:9e:6e:e3:7d:1a:a4:1c:da:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EA:22:ED:B4:89:0F:C0:F0:F4:D0:68:0A:0F:DE:99:21:1E:C1:66
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:70:44:54:eb:72:fa:59:57:10:bc:07:1b:15:ec:58:bf:db:
         28:0c:16:81:d4:ed:b9:94:77:d0:50:ad:fa:04:b0:9f:a4:85:
         43:ef:f7:20:c6:56:83:f5:1a:ed:f1:73:29:53:81:ed:30:f2:
         77:67:20:d5:ae:0a:68:e1:f4:aa:78:92:8d:65:22:a5:ed:66:
         af:ad:4c:f1:60:da:98:f4:bd:13:fe:3e:3b:a2:12:75:a5:39:
         af:9f:69:7f:9a:21:0c:31:2a:34:f8:4b:69:56:27:14:a2:31:
         84:ca:f2:2b:a5:9d:f4:c7:d6:b5:92:21:9c:e9:65:c8:51:53:
         ec:c4:15:62:ee:81:d0:4e:a2:35:79:1b:0a:25:ff:32:68:f3:
         b2:8f:c6:da:13:00:aa:b4:13:86:6b:33:64:9e:b7:e1:7d:d9:
         78:d4:82:8b:09:7b:46:7d:c6:1d:f0:e2:2b:5a:5d:4e:1b:cf:
         94:bc:9d:13:3e:16:46:cc:65:6a:f8:ad:cd:f4:9a:00:a7:0b:
         c1:48:33:40:1a:2f:e4:d0:74:52:7f:9c:1e:b2:24:7b:6b:d5:
         70:6e:75:5f:d0:8d:72:b5:d2:fb:e0:b5:b8:5b:77:64:15:33:
         45:30:8f:ec:d4:45:e8:e6:c1:09:01:80:3d:3f:07:f1:ce:77:
         58:22:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:26:52 2025 by rpki-client