This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa
File:                     3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (raw, json)
Hash identifier:          VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=
Subject key identifier:   B4:C8:A1:12:C8:E6:FD:63:3B:DD:C4:2A:97:B3:20:84:04:D8:2E:0F
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       2A9D6CEABA82030B534A2381764528CB093D437A
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa
Signing time:             Mon 10 Nov 2025 13:02:08 +0000
ROA not before:           Mon 10 Nov 2025 12:57:08 +0000
ROA not after:            Mon 09 Nov 2026 13:02:08 +0000
asID:                     142381
IP address blocks:        103.155.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
                          rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:9d:6c:ea:ba:82:03:0b:53:4a:23:81:76:45:28:cb:09:3d:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Nov 10 12:57:08 2025 GMT
            Not After : Nov  9 13:02:08 2026 GMT
        Subject: CN=B4C8A112C8E6FD633BDDC42A97B3208404D82E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:a8:6f:74:a4:b5:34:3f:b3:d6:43:5d:38:
                    8c:b5:e1:d1:22:c7:92:6b:1e:d4:cd:df:c2:54:75:
                    a7:9c:0c:33:61:2e:0e:62:dd:c1:cb:2e:35:2d:22:
                    06:7c:dd:d9:85:83:b5:cd:55:17:18:7c:8d:48:56:
                    9b:7e:c3:44:9e:90:11:94:6a:4e:31:d4:46:30:1c:
                    e0:03:8f:10:d6:60:6d:91:8e:ba:bc:b8:7d:ac:ad:
                    0e:81:97:8e:a4:81:fc:77:60:2d:b1:68:8d:7c:c4:
                    d6:a4:0b:5b:c8:11:91:2f:8e:20:b3:83:2d:45:85:
                    49:fd:cd:77:6a:14:31:97:2f:d1:2e:0b:37:73:67:
                    66:14:ff:8e:29:7b:39:07:47:12:8a:54:97:54:f0:
                    d8:6d:09:7b:78:f2:55:f5:49:1a:0c:38:f0:7a:8d:
                    da:ef:25:fd:27:28:8c:c6:57:a6:68:aa:4b:7e:84:
                    93:07:b6:5c:ce:01:2c:ea:c2:2b:8b:5f:89:e3:79:
                    6b:07:2b:ae:55:a3:57:25:13:56:08:42:12:71:bd:
                    6c:b3:3e:5e:dc:13:13:ed:3a:78:fe:8e:20:ad:37:
                    86:6f:47:46:bb:f3:cf:99:c9:2e:2c:c7:2b:ff:4d:
                    b9:ff:32:d3:06:d2:cc:83:41:45:94:75:2b:0d:5c:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:A1:12:C8:E6:FD:63:3B:DD:C4:2A:97:B3:20:84:04:D8:2E:0F
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:c0:50:04:f0:9b:8a:9e:39:03:0c:78:3e:2d:2e:a8:fa:
         85:b5:d7:06:2f:57:83:35:57:2c:a9:c3:08:5d:68:d2:58:b9:
         79:82:dd:a4:4c:97:9c:47:a1:3d:c9:b2:e4:5a:08:aa:17:5d:
         61:50:6c:3e:97:07:bc:15:0c:3e:84:c1:48:17:d3:82:39:b0:
         64:ef:72:e2:f6:5d:69:5b:fc:76:2e:eb:30:dc:20:99:df:c7:
         2d:f2:0a:2b:17:6e:29:b2:46:6e:4e:ba:4d:da:63:c4:a2:70:
         59:e8:c0:62:b8:d7:1d:0c:39:66:f0:2d:d2:53:47:ad:5e:7c:
         d3:65:de:ca:04:70:bd:ba:0a:79:fa:18:52:88:6e:9d:5d:17:
         bd:7e:4b:7d:16:3f:3d:e9:75:7a:89:f8:0e:26:7e:e0:3b:a9:
         2b:73:8c:05:ec:d5:2d:3c:98:7c:ec:07:37:77:bd:65:82:19:
         c9:3d:4f:79:d6:0d:f7:9d:86:55:1c:22:e8:a8:5d:00:8b:d9:
         2a:05:1c:bf:2d:f3:4d:14:3c:be:2b:bf:3f:ae:3f:f6:66:37:
         4d:b6:e9:1d:b0:10:77:07:74:5c:c1:14:f1:af:15:a6:f8:33:
         eb:e6:8f:db:c1:5a:35:7a:d0:6d:47:0f:a1:94:69:2a:ff:16:
         85:a9:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:33:49 2025 by rpki-client