This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa
File:                     3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (raw, json)
Hash identifier:          FOuRTprVW2mpZNqt583SZ3InArSMarqECWOK414L2cg=
Subject key identifier:   7D:67:F9:D0:0A:97:C1:DD:F3:D8:82:D5:21:4A:A7:C7:15:01:61:FB
Certificate issuer:       /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
Certificate serial:       374A17035C09576E7F350B957C1F0AE0EE8639A6
Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa
Signing time:             Tue 30 Dec 2025 09:00:01 +0000
ROA not before:           Tue 30 Dec 2025 08:55:01 +0000
ROA not after:            Tue 29 Dec 2026 09:00:01 +0000
asID:                     150945
IP address blocks:        103.105.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl
                          rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:17:03:5c:09:57:6e:7f:35:0b:95:7c:1f:0a:e0:ee:86:39:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42
        Validity
            Not Before: Dec 30 08:55:01 2025 GMT
            Not After : Dec 29 09:00:01 2026 GMT
        Subject: CN=7D67F9D00A97C1DDF3D882D5214AA7C7150161FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:55:9e:e5:7a:49:90:f4:81:f8:7b:1b:97:
                    9c:c1:87:52:84:bf:a7:6f:fc:ec:ca:97:37:07:79:
                    45:c0:75:f6:9b:93:5a:b0:12:07:8e:e3:f3:8a:00:
                    dd:ab:55:57:43:74:97:28:d6:b7:2c:51:1d:87:f7:
                    55:d1:f2:64:31:a1:78:02:4c:f4:cb:b9:d2:38:91:
                    f1:bc:8b:ce:c0:dc:65:2a:35:da:a7:cc:91:28:01:
                    98:5c:92:fb:3e:70:0c:19:10:a8:5e:fe:60:e0:5a:
                    b6:83:05:c0:5e:d2:61:dc:97:bd:aa:53:eb:d0:2d:
                    b7:81:5c:fb:ad:7c:4d:c1:fa:ea:82:bd:e4:bb:b7:
                    8b:f2:ee:99:5e:0b:47:f2:cc:f3:37:34:1b:40:fc:
                    46:0b:01:10:cc:30:56:85:2d:6f:c9:81:47:1a:e9:
                    23:d6:ff:e4:c0:14:76:63:df:7a:03:2b:05:62:c0:
                    fc:ea:94:3c:85:42:03:8e:5a:68:9c:d1:65:12:2a:
                    37:f8:a3:6c:7e:61:7b:ee:42:ea:b6:bd:72:3f:7a:
                    64:f2:4b:3b:c3:0d:27:35:9d:e5:34:5c:b6:6f:5a:
                    fd:d6:25:63:24:77:91:79:99:71:74:bc:6a:c7:9f:
                    f1:ad:c5:53:76:b6:36:87:a5:d4:82:45:72:99:cd:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:67:F9:D0:0A:97:C1:DD:F3:D8:82:D5:21:4A:A7:C7:15:01:61:FB
            X509v3 Authority Key Identifier:
                keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:e3:5b:f2:68:11:4d:17:d3:fa:0d:7f:af:23:70:7a:c5:
         d4:37:ea:da:ac:15:a8:e4:ad:d9:bb:2e:6e:a1:6c:4a:48:c0:
         67:c8:6c:1c:01:de:ff:24:70:43:bb:fe:e5:d9:6c:f8:23:a8:
         eb:47:67:34:59:83:fe:75:42:1c:78:04:9e:f5:91:ab:26:f6:
         af:6b:89:16:00:68:17:ba:01:96:34:12:9b:87:be:64:a1:60:
         58:9d:ba:29:a0:e0:b4:cd:e2:e6:84:4f:84:f1:74:ef:13:5d:
         f6:7d:9a:dd:58:17:c9:69:2d:1d:21:2d:92:96:b5:10:68:2a:
         aa:36:88:0c:74:b1:bf:a3:d0:fb:59:cf:1a:10:96:8e:d8:d8:
         46:6e:1e:30:67:cb:3d:b4:b6:72:89:3f:24:3e:38:7c:ed:9d:
         e1:4a:68:75:df:59:e8:e7:1e:52:ad:24:f1:1e:44:16:5b:4b:
         1b:16:ee:5b:78:32:78:09:4a:a1:2a:7e:b3:2f:60:6a:da:00:
         6b:a0:f2:01:0c:7a:25:9b:2a:f2:24:b3:56:f4:f2:11:ac:35:
         3d:b0:6e:cb:a4:6e:b8:a2:67:08:aa:b1:5f:2f:42:01:d0:b4:
         21:11:f6:08:e7:d7:c8:04:92:42:f6:6f:e6:3f:e7:4f:dc:3b:
         04:0c:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:11:10 2026 by rpki-client