This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
File:                     3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (raw, json)
Hash identifier:          ItQ4yaHK0oJdabwYqYAR0lnERMhE/LKV2oMBDYLcbSg=
Subject key identifier:   AD:E5:30:54:43:7E:CC:90:19:11:A3:A0:FC:EB:B1:A0:EA:33:C5:ED
Certificate issuer:       /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial:       17569C96A884C24A67B045CF5F910A56EFD55974
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
Signing time:             Tue 30 Dec 2025 05:02:33 +0000
ROA not before:           Tue 30 Dec 2025 04:57:33 +0000
ROA not after:            Tue 29 Dec 2026 05:02:33 +0000
asID:                     141937
IP address blocks:        103.165.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
                          rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:56:9c:96:a8:84:c2:4a:67:b0:45:cf:5f:91:0a:56:ef:d5:59:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
        Validity
            Not Before: Dec 30 04:57:33 2025 GMT
            Not After : Dec 29 05:02:33 2026 GMT
        Subject: CN=ADE53054437ECC901911A3A0FCEBB1A0EA33C5ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:7a:78:95:7b:b2:5b:7f:7a:28:53:b8:75:
                    49:cd:39:94:d5:64:3a:d0:b7:2e:d8:2d:0f:ea:37:
                    1b:3f:40:b7:e5:1e:cf:de:b3:6c:f4:32:d5:07:82:
                    01:d6:4f:5a:68:e8:81:5f:33:7b:02:f9:e9:0e:ff:
                    27:f3:09:b1:31:8d:52:de:eb:f7:29:7e:57:50:54:
                    5f:1f:c5:8f:cc:97:71:8e:d6:0a:09:f5:f4:36:42:
                    10:cb:34:e9:2a:19:46:31:09:e2:74:eb:b0:0a:9e:
                    44:3a:ee:05:2d:ad:4c:78:00:47:92:9e:20:8a:7d:
                    f4:df:01:2e:1a:4f:fa:b8:19:0a:33:76:53:b0:52:
                    0e:d8:9b:eb:28:9d:3a:59:4e:d0:87:4d:42:f1:ff:
                    93:da:9c:3f:c9:04:1d:0f:e6:a1:ca:f8:c1:b9:ee:
                    8c:9e:95:66:3f:fa:2a:8f:c3:2c:c3:cd:13:34:fb:
                    94:ea:b4:0a:83:54:62:68:8b:c5:36:9a:0a:ab:a3:
                    0e:88:48:aa:fb:b6:01:ea:ac:81:9e:f3:5e:a5:af:
                    57:da:88:55:fa:08:35:8f:7e:6d:a8:15:62:48:19:
                    22:72:e3:b1:80:16:03:45:97:ad:1a:68:b0:44:92:
                    94:db:e0:d0:b2:64:cb:a3:47:1c:35:6d:d7:1d:ec:
                    67:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E5:30:54:43:7E:CC:90:19:11:A3:A0:FC:EB:B1:A0:EA:33:C5:ED
            X509v3 Authority Key Identifier:
                keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:00:82:05:50:f9:97:79:56:fc:a8:cb:20:4c:70:78:21:
         a6:d8:04:f4:5e:2c:c8:59:35:df:11:64:24:b3:d4:dc:53:63:
         3d:29:ea:f6:78:62:3e:29:fa:4b:fc:8b:52:80:6b:e6:ff:d4:
         65:a8:f4:fe:5a:35:1a:5b:81:9c:c9:ed:06:5a:8e:4f:c9:88:
         77:58:43:7e:e2:7a:68:17:f8:a5:01:e9:c1:96:34:1f:c7:b9:
         e5:02:b7:eb:63:57:60:dc:30:9f:25:93:a5:1c:6d:a4:c4:8c:
         c6:e0:46:74:b6:07:e6:80:31:d6:17:23:b3:1f:62:9d:66:31:
         5a:d5:d7:33:92:c8:8b:2d:4f:63:3f:2b:09:5e:4c:69:30:6a:
         db:0e:75:16:72:2c:83:c6:be:2c:18:19:00:5b:ff:1f:04:ba:
         23:a9:9a:a3:81:96:1c:6b:d4:33:75:60:5f:f4:41:ea:db:73:
         4d:01:1c:bc:fd:d4:8e:3a:bb:52:f3:3d:f8:82:85:be:47:b6:
         18:30:c5:ec:eb:7b:2f:3c:6b:60:fd:f6:17:a1:4e:0c:ae:68:
         d2:a3:37:f9:33:d9:75:9e:96:41:79:6a:cd:44:4f:fd:c1:d8:
         b6:0a:d0:85:c8:4d:92:a9:c9:ca:ea:0e:ea:1b:10:d0:4b:a6:
         2d:ba:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:13 2026 by rpki-client