This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          PE8TrRaW4vcKNAJ983twfVSijpuNJ3TLSSc+Qt8t8hU=
Subject key identifier:   7E:36:5D:80:3E:9E:52:25:0D:59:5E:55:39:07:AB:D1:8D:6D:C6:39
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       4F4371926327F0B23C7CF29C016CFF36841BB341
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 04 Dec 2025 17:00:00 +0000
ROA not before:           Thu 04 Dec 2025 16:55:00 +0000
ROA not after:            Thu 03 Dec 2026 17:00:00 +0000
asID:                     138089
IP address blocks:        103.124.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl
                          rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 06:51:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:71:92:63:27:f0:b2:3c:7c:f2:9c:01:6c:ff:36:84:1b:b3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Dec  4 16:55:00 2025 GMT
            Not After : Dec  3 17:00:00 2026 GMT
        Subject: CN=7E365D803E9E52250D595E553907ABD18D6DC639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:88:36:06:42:ce:03:0b:26:45:b0:23:01:
                    5a:1b:49:31:ba:ec:43:02:88:5e:bd:d5:2e:dd:aa:
                    e8:69:61:6b:14:22:c5:cf:64:a4:4b:76:c2:80:10:
                    10:ac:6d:e2:fb:58:6b:f6:48:59:3e:45:19:1d:71:
                    e4:07:ca:a2:b5:c3:22:7d:06:1e:1e:a5:f4:75:2a:
                    75:5e:db:5d:b0:c6:c9:e1:61:0a:d7:69:38:34:82:
                    53:c5:cb:8e:88:a5:8e:e3:23:24:49:3f:31:b1:99:
                    fb:1c:be:b9:b5:f6:2a:37:b2:1f:d0:b8:60:4f:d6:
                    b0:47:5b:f4:99:1b:4d:eb:e5:db:7e:30:ec:30:84:
                    6c:13:5a:cb:2a:8f:7e:48:30:d1:ce:53:41:73:fb:
                    a8:5c:82:e8:1e:42:fa:bd:fe:98:c7:88:8c:7b:24:
                    71:0b:38:69:86:6e:ab:e8:e4:36:86:0f:a7:48:0a:
                    e0:2a:db:2b:ba:9f:89:52:c8:fa:f6:b5:08:fb:92:
                    4e:c2:cf:3f:8c:b4:a8:13:ae:30:47:75:1e:c5:35:
                    31:0c:85:72:5f:5f:5b:0b:92:b6:ef:fa:ba:de:10:
                    88:f2:45:bd:7a:30:3b:bf:44:cc:5a:fd:38:2d:5a:
                    ce:3f:0a:cd:b6:f8:de:cc:bc:61:ee:58:5e:74:cc:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:5D:80:3E:9E:52:25:0D:59:5E:55:39:07:AB:D1:8D:6D:C6:39
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:be:dc:45:3a:6f:04:0e:e7:a0:a0:36:57:eb:bb:36:93:45:
         0f:44:76:7d:a3:7c:0e:60:13:ba:de:51:49:9a:6d:e7:a0:c1:
         4c:0b:8f:84:f4:89:db:bd:04:6a:a5:a7:71:de:d1:8d:30:8d:
         77:e3:60:b4:35:54:ae:f6:ac:2a:5a:4a:e5:7d:df:21:04:49:
         85:2c:cc:5c:b7:7f:41:ca:59:d8:81:54:4d:ee:fe:28:bc:ff:
         57:87:62:64:9a:30:e2:8d:c2:3e:c3:98:0a:1c:14:2b:df:c6:
         7d:83:f9:76:76:0d:18:f1:69:6e:7f:0b:cc:1c:1c:25:40:da:
         37:7e:30:ab:07:13:76:42:56:2c:b9:94:0d:f0:cf:26:e4:99:
         da:42:27:24:82:9b:60:69:ef:87:38:45:fc:c7:bd:90:1e:8c:
         d9:39:b7:56:c2:15:1b:76:a7:c5:02:d6:68:43:25:a5:88:15:
         8b:9f:b1:75:3c:89:7d:36:5f:3d:19:93:82:9d:7a:20:6e:83:
         76:d8:da:26:ef:41:85:6d:fe:b4:59:ff:da:34:a9:e4:d0:b4:
         16:e0:86:cf:4f:46:aa:ba:91:71:39:a6:06:61:df:56:b1:28:
         a8:8a:8d:8a:dd:4d:90:39:fd:aa:3e:c3:73:e0:0e:1d:48:e9:
         4f:68:99:74
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUT0NxkmMn8LI8fPKcAWz/NoQbs0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB
RjcwRTczMzAeFw0yNTEyMDQxNjU1MDBaFw0yNjEyMDMxNzAwMDBaMDMxMTAvBgNV
BAMTKDdFMzY1RDgwM0U5RTUyMjUwRDU5NUU1NTM5MDdBQkQxOEQ2REM2MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNt4g2BkLOAwsmRbAjAVobSTG6
7EMCiF691S7dquhpYWsUIsXPZKRLdsKAEBCsbeL7WGv2SFk+RRkdceQHyqK1wyJ9
Bh4epfR1KnVe212wxsnhYQrXaTg0glPFy46IpY7jIyRJPzGxmfscvrm19io3sh/Q
uGBP1rBHW/SZG03r5dt+MOwwhGwTWssqj35IMNHOU0Fz+6hcgugeQvq9/pjHiIx7
JHELOGmGbqvo5DaGD6dICuAq2yu6n4lSyPr2tQj7kk7Czz+MtKgTrjBHdR7FNTEM
hXJfX1sLkrbv+rreEIjyRb16MDu/RMxa/TgtWs4/Cs22+N7MvGHuWF50zJ3pAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfjZdgD6eUiUNWV5VOQer0Y1txjkwHwYDVR0j
BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC
NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw
RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04
OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfIswDQYJ
KoZIhvcNAQELBQADggEBADC+3EU6bwQO56CgNlfruzaTRQ9Edn2jfA5gE7reUUma
beegwUwLj4T0idu9BGqlp3He0Y0wjXfjYLQ1VK72rCpaSuV93yEESYUszFy3f0HK
WdiBVE3u/ii8/1eHYmSaMOKNwj7DmAocFCvfxn2D+XZ2DRjxaW5/C8wcHCVA2jd+
MKsHE3ZCViy5lA3wzybkmdpCJySCm2Bp74c4RfzHvZAejNk5t1bCFRt2p8UC1mhD
JaWIFYufsXU8iX02Xz0Zk4KdeiBug3bY2ibvQYVt/rRZ/9o0qeTQtBbghs9PRqq6
kXE5pgZh31axKKiKjYrdTZA5/ao+w3PgDh1I6U9omXQ=
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:21:20 2025 by rpki-client