This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa
File:                     3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa (raw, json)
Hash identifier:          HqTyhMmIQNWyd9Uu39hBDh2ymSKez80mYyj1XdusXb0=
Subject key identifier:   A2:17:27:E4:32:6E:AD:79:0C:62:B5:83:96:06:F0:1C:C3:AF:8F:5A
Certificate issuer:       /CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
Certificate serial:       7F46C77FB4B28D5AAE0DB0C42486445D27A06DBB
Authority key identifier: 28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa
Signing time:             Fri 14 Nov 2025 15:00:03 +0000
ROA not before:           Fri 14 Nov 2025 14:55:03 +0000
ROA not after:            Fri 13 Nov 2026 15:00:03 +0000
asID:                     141067
IP address blocks:        103.155.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl
                          rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 10:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:46:c7:7f:b4:b2:8d:5a:ae:0d:b0:c4:24:86:44:5d:27:a0:6d:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28B305C66336C433AB601BA6F0B352E6C57E9BEC
        Validity
            Not Before: Nov 14 14:55:03 2025 GMT
            Not After : Nov 13 15:00:03 2026 GMT
        Subject: CN=A21727E4326EAD790C62B5839606F01CC3AF8F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:ba:10:89:91:cb:7b:2f:14:1d:4d:91:7e:
                    46:a7:18:a6:bd:ed:da:48:30:f6:cd:eb:9a:80:87:
                    97:4e:76:99:8e:69:e1:eb:77:c6:95:d9:fc:ad:de:
                    7e:c6:a0:54:5e:a9:ac:3c:c9:52:a2:54:ef:11:39:
                    6a:f8:9b:1e:76:08:d6:12:9f:fa:73:01:1b:3c:48:
                    2a:26:cc:40:21:27:68:f7:ea:d2:18:df:2d:41:22:
                    d8:b0:8f:3a:11:f5:7e:3d:98:0b:c1:6d:e4:40:8f:
                    4f:f8:c3:12:4f:e6:e2:d4:b2:41:6e:6b:13:9e:ea:
                    7f:f6:89:34:96:2b:77:2a:5e:b5:98:77:ef:8d:51:
                    fe:ca:c9:a3:0e:c1:10:9a:75:0f:89:52:80:96:fd:
                    48:b4:11:a2:f1:a7:97:23:a0:38:46:c7:ff:7f:bf:
                    a2:e2:61:15:f8:35:96:ae:f8:2c:2a:19:a5:eb:a7:
                    88:8c:49:c3:f9:39:dd:84:68:87:1c:70:06:64:b4:
                    70:9b:56:03:a7:9d:c0:e7:df:f4:85:76:f7:e0:99:
                    ff:2f:41:5a:65:c4:91:61:be:2b:40:00:77:48:47:
                    64:d3:2f:de:52:04:b9:60:66:5d:34:e9:12:62:e4:
                    bd:7a:b2:2d:c5:e4:f3:04:be:e4:24:32:6d:7b:e3:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:27:E4:32:6E:AD:79:0C:62:B5:83:96:06:F0:1C:C3:AF:8F:5A
            X509v3 Authority Key Identifier:
                keyid:28:B3:05:C6:63:36:C4:33:AB:60:1B:A6:F0:B3:52:E6:C5:7E:9B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/28B305C66336C433AB601BA6F0B352E6C57E9BEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28B305C66336C433AB601BA6F0B352E6C57E9BEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6e9b51-bd87-4905-9bf4-a848a44e5ba5/0/3130332e3135352e3139312e302f32342d3234203d3e20313431303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:48:46:71:ff:1f:f3:15:dc:3c:51:b1:d0:62:53:6d:4a:12:
         96:fc:89:b9:d0:c4:4f:1a:ac:47:9b:60:47:57:e7:5b:76:1d:
         e6:39:e4:11:e5:75:69:3d:c7:77:94:ef:83:d0:d1:b7:ca:b2:
         f9:06:17:c6:8d:ab:cd:17:33:a9:72:81:58:7f:47:32:70:28:
         d5:44:c4:47:34:68:45:86:af:48:43:72:3a:dc:20:b2:56:47:
         4d:c8:f8:2f:3a:36:9c:ad:86:99:c3:5c:76:7c:7d:4c:e8:4e:
         e6:cd:65:a7:75:d6:ac:27:86:d4:28:1a:39:9f:c2:4e:d1:0e:
         45:2e:3d:1b:42:5b:86:6e:42:b7:d3:f7:3a:c2:8b:77:d1:b4:
         7e:2c:15:83:50:6b:bb:25:a2:ba:41:49:db:71:9a:33:7d:c2:
         0a:f4:7f:ab:a9:5f:e7:89:ea:4d:20:ec:2b:54:e3:54:99:2f:
         a7:d7:d3:0f:9c:ec:e5:4e:f9:9d:ac:fe:e7:15:20:c8:e2:5a:
         d3:5d:38:c0:bf:18:8f:69:95:6b:08:7d:d9:ac:a8:5b:16:35:
         c2:20:6f:55:aa:2e:34:23:2d:66:45:61:29:ea:67:c5:5d:f8:
         5d:8b:9d:b2:8e:d9:a8:3a:e0:b6:49:2b:19:e4:87:61:96:a5:
         da:ee:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:48:20 2025 by rpki-client