This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
File:                     3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          zCYjwxgZ867W/EI9SnSmu6GjUVsEp2wVBcfDMkUB7j0=
Subject key identifier:   EE:CE:1E:C8:A3:7D:82:E4:0E:D3:CB:6D:E2:9C:73:71:0B:D3:12:A6
Certificate issuer:       /CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
Certificate serial:       6BE36227603CB79C48390BDA17DA31C1C68C82FB
Authority key identifier: A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa
Signing time:             Fri 05 Dec 2025 09:04:07 +0000
ROA not before:           Fri 05 Dec 2025 08:59:07 +0000
ROA not after:            Fri 04 Dec 2026 09:04:07 +0000
asID:                     135445
IP address blocks:        103.69.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl
                          rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 13:51:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:62:27:60:3c:b7:9c:48:39:0b:da:17:da:31:c1:c6:8c:82:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0F4AEBBE045B09C16953782AF306D83B0DC97D3
        Validity
            Not Before: Dec  5 08:59:07 2025 GMT
            Not After : Dec  4 09:04:07 2026 GMT
        Subject: CN=EECE1EC8A37D82E40ED3CB6DE29C73710BD312A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:49:19:12:49:e5:d0:bd:13:da:1e:47:78:
                    4d:9b:26:93:6c:ba:6c:ee:75:e4:30:83:ed:f8:a0:
                    3f:45:6d:d0:fe:38:8c:bb:18:64:8e:6f:1d:67:fa:
                    f2:11:b8:dd:91:35:3e:15:18:1f:fe:69:a5:53:51:
                    4e:25:a6:0d:c7:4b:65:f3:74:cf:fd:67:0d:51:b1:
                    7f:35:40:e4:3d:1f:7f:a9:78:b8:4d:d2:fb:df:7d:
                    04:d6:0b:88:e0:45:94:22:1a:95:9e:59:6d:ca:34:
                    c9:09:f9:87:c4:2c:2c:3c:99:3b:c7:37:3f:14:87:
                    29:3a:5d:6e:ee:ce:ba:17:51:55:46:74:f7:93:93:
                    17:40:ca:77:e3:e3:33:34:b3:b3:da:3b:bb:35:1c:
                    eb:f8:d6:e2:2f:3e:70:dd:48:0a:16:00:92:11:85:
                    88:2b:71:97:ee:8c:88:fd:d9:7a:d2:c6:89:cb:92:
                    2d:55:1d:ca:2c:d8:1f:14:60:28:9b:7d:21:5d:2c:
                    ec:4f:d8:19:06:12:e3:cc:92:5f:47:0f:68:db:9e:
                    98:c0:4e:29:c1:05:91:23:2a:63:bd:fa:f2:16:13:
                    89:c5:31:a6:bf:79:c8:df:b6:43:1e:1b:8f:00:5d:
                    52:ba:17:af:61:69:35:70:88:aa:ef:0e:04:d3:ac:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:CE:1E:C8:A3:7D:82:E4:0E:D3:CB:6D:E2:9C:73:71:0B:D3:12:A6
            X509v3 Authority Key Identifier:
                keyid:A0:F4:AE:BB:E0:45:B0:9C:16:95:37:82:AF:30:6D:83:B0:DC:97:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0F4AEBBE045B09C16953782AF306D83B0DC97D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28c77eee-9bcc-401e-8f4d-5f2367562757/0/3130332e36392e3137382e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:fb:00:2b:54:c0:3c:ec:72:97:1e:ee:37:7c:fb:ac:39:
         5d:68:9c:7d:79:e5:5b:7a:d0:ec:e4:63:84:c9:94:5e:26:8f:
         1c:d2:48:b3:a2:2e:8d:22:19:5b:2f:92:84:63:ff:f2:4d:7b:
         73:24:65:65:dc:7d:20:a5:8f:86:43:a8:b5:e1:30:af:f7:30:
         d7:5f:6d:7f:19:0a:b7:d5:12:08:a0:f7:ec:9f:3a:47:bb:1c:
         e0:59:77:f0:f7:4e:c6:27:13:b7:c9:48:20:2b:24:f1:ea:4d:
         a6:22:02:cc:b0:ca:49:00:28:e2:61:22:d8:70:34:90:e1:52:
         88:68:c8:60:0b:bd:16:e4:c7:e8:79:cf:37:8d:1f:ac:82:44:
         52:2a:61:4e:c6:7a:37:8f:f8:d5:4b:54:79:6c:da:2d:6b:bd:
         4a:ff:86:43:ed:f5:54:73:f1:c4:41:e1:d9:e6:ba:9f:2a:55:
         e2:6c:f0:9c:31:c0:65:0c:e3:7f:28:48:16:37:04:d3:33:f3:
         0d:aa:87:3d:7d:e7:9e:b0:cc:f5:d7:90:9b:2e:78:4e:c9:4a:
         20:e7:1d:7b:3a:fc:99:b7:29:66:3b:43:fb:37:c1:f7:8c:01:
         c6:3c:e2:13:f3:3c:8f:e1:eb:32:55:3e:74:cb:84:a0:24:a7:
         c2:28:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:55:44 2025 by rpki-client