This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa
File:                     3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa (raw, json)
Hash identifier:          4k5l0oKGlgrseypJOAcgbZ3voSGQS5pK7FIolyad81E=
Subject key identifier:   7A:3A:4D:8F:25:FA:D6:AB:AD:A4:49:7F:1E:5E:CC:D1:74:04:95:01
Certificate issuer:       /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Certificate serial:       55FAC0CB892C21DF0069257C024EEF7ED21177C2
Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa
Signing time:             Fri 14 Nov 2025 15:00:02 +0000
ROA not before:           Fri 14 Nov 2025 14:55:02 +0000
ROA not after:            Fri 13 Nov 2026 15:00:02 +0000
asID:                     141067
IP address blocks:        103.155.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl
                          rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 10:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:c0:cb:89:2c:21:df:00:69:25:7c:02:4e:ef:7e:d2:11:77:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
        Validity
            Not Before: Nov 14 14:55:02 2025 GMT
            Not After : Nov 13 15:00:02 2026 GMT
        Subject: CN=7A3A4D8F25FAD6ABADA4497F1E5ECCD174049501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:68:04:a3:5e:37:57:59:ea:29:3f:38:bd:14:
                    01:34:1c:7c:2a:d0:78:fe:72:11:0b:3c:6e:10:f0:
                    14:3b:0b:0d:53:d4:67:c6:94:93:66:63:0c:db:a7:
                    ea:bb:e5:77:9d:a7:33:99:54:42:0a:44:31:79:71:
                    b5:10:00:c4:17:51:81:c6:68:e1:8e:16:10:9d:5e:
                    c0:5f:b8:c5:43:1d:cd:84:ba:5d:f5:fb:29:93:a3:
                    5c:62:bb:66:88:1e:8c:0b:45:06:c6:1c:1e:2f:46:
                    a5:a1:d5:ac:5b:71:17:23:49:1b:80:4c:9a:28:87:
                    24:ca:b9:14:1a:22:59:51:b3:fe:98:be:cf:a6:c8:
                    fd:de:95:f7:e9:79:49:85:1d:ba:cb:ef:24:c5:c3:
                    5a:47:8d:c0:89:da:ad:d6:84:c4:54:40:66:de:98:
                    fb:be:ca:88:16:a4:b2:1a:5d:0c:c4:79:35:cd:da:
                    f1:f6:1c:5a:6d:ba:90:d6:c9:dc:05:10:a5:28:0e:
                    a2:38:03:a6:af:4f:83:2d:89:0c:9f:06:d3:4e:75:
                    33:e3:32:fd:31:7f:bf:69:e8:b7:91:30:22:65:00:
                    e1:7a:8c:04:82:72:32:f9:be:46:74:26:1d:95:4b:
                    18:ba:00:d5:e5:b7:44:30:ae:63:dc:a0:ff:ee:76:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:4D:8F:25:FA:D6:AB:AD:A4:49:7F:1E:5E:CC:D1:74:04:95:01
            X509v3 Authority Key Identifier:
                keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139302e302f32342d3234203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:2f:c8:d6:3a:02:7b:6f:32:81:e2:5e:12:ce:c7:ea:fd:4c:
         eb:f3:91:a9:3b:e9:30:76:bc:d2:a6:e1:0a:07:9e:a0:70:c5:
         02:51:94:14:3d:ff:03:c6:c9:6d:27:3b:39:f8:97:53:8f:f7:
         10:ca:18:aa:72:f8:aa:53:cf:23:02:79:a6:c8:fb:b9:86:4d:
         fc:13:58:c5:06:78:b7:19:1e:a7:3e:be:79:40:00:29:f2:58:
         70:7d:0a:d7:ba:9e:50:82:21:ca:3d:23:90:5f:1c:e2:98:9e:
         8a:79:33:25:e6:6f:d1:dd:81:ad:c3:65:70:8e:0c:a6:ab:91:
         4a:ef:1e:98:5b:1f:89:fb:4b:d8:d1:ad:35:8b:74:fa:68:4c:
         fa:01:74:ed:d1:46:ba:63:e0:5b:85:b9:7c:61:d4:10:aa:aa:
         39:5b:ab:a4:46:b7:f2:15:2a:d5:1a:bf:37:6d:5a:4b:17:91:
         9f:68:a9:f1:af:d6:d0:5f:d2:20:f3:23:2f:4d:aa:be:44:2a:
         f0:d9:e8:97:58:65:1b:4e:27:05:72:c0:56:12:6e:bb:b2:07:
         16:1d:78:03:a1:df:47:42:32:d4:b5:e1:6f:62:c6:99:f1:62:
         9f:81:b1:c9:15:b5:9a:d1:72:ad:d1:b1:4a:1f:15:5e:d4:98:
         04:8d:a4:f1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVfrAy4ksId8AaSV8Ak7vftIRd8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZD
NTdFOUJFQzAeFw0yNTExMTQxNDU1MDJaFw0yNjExMTMxNTAwMDJaMDMxMTAvBgNV
BAMTKDdBM0E0RDhGMjVGQUQ2QUJBREE0NDk3RjFFNUVDQ0QxNzQwNDk1MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaASjXjdXWeopPzi9FAE0HHwq
0Hj+chELPG4Q8BQ7Cw1T1GfGlJNmYwzbp+q75XedpzOZVEIKRDF5cbUQAMQXUYHG
aOGOFhCdXsBfuMVDHc2Eul31+ymTo1xiu2aIHowLRQbGHB4vRqWh1axbcRcjSRuA
TJoohyTKuRQaIllRs/6Yvs+myP3elffpeUmFHbrL7yTFw1pHjcCJ2q3WhMRUQGbe
mPu+yogWpLIaXQzEeTXN2vH2HFptupDWydwFEKUoDqI4A6avT4MtiQyfBtNOdTPj
Mv0xf79p6LeRMCJlAOF6jASCcjL5vkZ0Jh2VSxi6ANXlt0QwrmPcoP/udvoHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUejpNjyX61qutpEl/Hl7M0XQElQEwHwYDVR0j
BBgwFoAUKLMFxmM2xDOrYBum8LNS5sV+m+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YjZlOWI1MS1iZDg3LTQ5MDUtOWJmNC1hODQ4YTQ0ZTViYTUvMC8yOEIzMDVDNjYz
MzZDNDMzQUI2MDFCQTZGMEIzNTJFNkM1N0U5QkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhCMzA1QzY2MzM2QzQzM0FCNjAxQkE2RjBCMzUyRTZDNTdF
OUJFQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiNmU5YjUxLWJkODctNDkwNS05
YmY0LWE4NDhhNDRlNWJhNS8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm74wDQYJ
KoZIhvcNAQELBQADggEBANcvyNY6AntvMoHiXhLOx+r9TOvzkak76TB2vNKm4QoH
nqBwxQJRlBQ9/wPGyW0nOzn4l1OP9xDKGKpy+KpTzyMCeabI+7mGTfwTWMUGeLcZ
Hqc+vnlAACnyWHB9Cte6nlCCIco9I5BfHOKYnop5MyXmb9Hdga3DZXCODKarkUrv
HphbH4n7S9jRrTWLdPpoTPoBdO3RRrpj4FuFuXxh1BCqqjlbq6RGt/IVKtUavzdt
WksXkZ9oqfGv1tBf0iDzIy9Nqr5EKvDZ6JdYZRtOJwVywFYSbruyBxYdeAOh30dC
MtS14W9ixpnxYp+BsckVtZrRcq3RsUofFV7UmASNpPE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:51:53 2025 by rpki-client