This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa
File:                     3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa (raw, json)
Hash identifier:          ccEczaTD7AcSDyPGviaZr/qlql5cWkl8Ip3NAXEgdo8=
Subject key identifier:   85:09:4C:1D:97:FA:4D:D2:95:F6:5F:1A:65:AC:58:EC:FA:4C:D7:1B
Certificate issuer:       /CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
Certificate serial:       376B074C6A74001A4CFB3D92C8EA6A17AF273B35
Authority key identifier: 46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa
Signing time:             Thu 04 Dec 2025 10:00:32 +0000
ROA not before:           Thu 04 Dec 2025 09:55:32 +0000
ROA not after:            Thu 03 Dec 2026 10:00:32 +0000
asID:                     141648
IP address blocks:        103.162.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl
                          rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 14:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6b:07:4c:6a:74:00:1a:4c:fb:3d:92:c8:ea:6a:17:af:27:3b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466F8934F3FED9355C9ED09E3826CBE32B25D402
        Validity
            Not Before: Dec  4 09:55:32 2025 GMT
            Not After : Dec  3 10:00:32 2026 GMT
        Subject: CN=85094C1D97FA4DD295F65F1A65AC58ECFA4CD71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:ef:d3:66:d3:df:7d:db:97:9a:46:c2:d8:
                    36:31:94:f4:27:ea:cf:af:a1:7e:bc:4c:61:fa:09:
                    13:19:61:4b:6d:f8:7f:db:e8:b1:dc:89:f5:9c:85:
                    ed:ed:00:3f:ff:92:c3:97:58:6a:be:43:c9:ff:d3:
                    b9:92:0d:98:d8:8a:d4:5f:66:ef:41:d0:21:bd:cb:
                    24:6b:42:81:85:9a:2f:d3:7f:a5:40:5b:23:ba:31:
                    2e:bd:ba:66:c7:48:33:90:fe:5a:6a:aa:47:49:57:
                    b8:75:e5:5d:73:ca:58:ea:3a:c8:9e:56:b9:d8:28:
                    b6:49:b3:b0:0d:e6:62:ca:9a:b5:ee:90:ae:f8:25:
                    ac:9f:11:79:2b:a3:05:71:d2:e4:0d:ad:1e:e2:85:
                    be:0a:63:2e:f9:f1:22:16:80:c2:c7:e6:b4:b2:77:
                    7c:c7:d5:20:ed:58:7a:ae:80:7a:b0:a8:6a:eb:09:
                    cd:6f:08:d8:95:47:b8:66:58:f1:7a:ab:fa:01:7f:
                    7e:86:51:d9:88:f5:21:1e:96:97:4b:4a:0c:2e:81:
                    cb:22:ce:33:b7:35:14:a1:cd:20:61:bd:8e:a6:7f:
                    dd:b5:de:0e:07:67:0d:2d:f1:4d:57:92:59:72:7a:
                    b1:81:61:67:f9:8b:17:07:c3:da:57:31:06:98:42:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:4C:1D:97:FA:4D:D2:95:F6:5F:1A:65:AC:58:EC:FA:4C:D7:1B
            X509v3 Authority Key Identifier:
                keyid:46:6F:89:34:F3:FE:D9:35:5C:9E:D0:9E:38:26:CB:E3:2B:25:D4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/466F8934F3FED9355C9ED09E3826CBE32B25D402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/466F8934F3FED9355C9ED09E3826CBE32B25D402.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/633978f8-aeab-427a-bd75-2cdf1d9eb517/0/3130332e3136322e36302e302f32332d3234203d3e20313431363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:43:44:4c:83:db:b6:f9:1b:8b:8f:0e:dc:53:f4:9f:81:8e:
         4d:bc:13:f2:ad:6c:24:be:8c:cc:ba:28:25:75:37:a5:27:cd:
         3c:ec:b6:f2:e9:12:20:e3:33:75:84:1f:2f:e7:52:19:fb:cd:
         39:f7:2f:ef:e3:ef:e4:b6:1e:37:5f:d9:fb:5c:7f:b3:99:36:
         5b:97:85:30:bb:2b:19:cb:dc:d6:a0:58:4e:03:fc:1f:81:eb:
         65:11:89:2f:e1:a3:64:dd:af:24:0a:fc:e1:16:d8:50:ea:37:
         7a:96:38:ad:09:55:29:8b:b6:6d:b9:ea:da:ce:f4:83:15:8f:
         ac:6a:db:6a:04:e9:f0:06:85:3f:31:28:92:51:df:3a:14:3d:
         99:c1:3c:e2:34:a1:90:5d:b5:56:47:c3:0a:d7:94:38:1b:f0:
         64:63:d8:76:e0:22:ea:6d:42:6a:f2:6e:f6:b3:b8:65:fd:60:
         b7:af:b0:a6:fb:60:56:22:8f:e8:d5:fd:8f:c9:93:09:f9:74:
         ed:f2:db:49:17:bc:01:12:2e:33:86:22:38:45:d1:01:55:01:
         9b:80:b1:cd:e4:1a:06:36:14:76:0b:e8:45:ee:af:ad:22:97:
         59:12:d7:3c:77:cb:47:72:c5:26:3e:ba:97:97:a1:ce:28:dc:
         70:02:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:13:49 2025 by rpki-client