This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa
File:                     3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (raw, json)
Hash identifier:          8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=
Subject key identifier:   EE:8C:A8:6F:E6:F0:D1:AC:68:DB:53:02:09:04:3C:68:89:50:CA:11
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       793560A1E125E6030C7976A5D18EC073FB93A8AC
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa
Signing time:             Fri 14 Nov 2025 03:03:34 +0000
ROA not before:           Fri 14 Nov 2025 02:58:34 +0000
ROA not after:            Fri 13 Nov 2026 03:03:34 +0000
asID:                     142321
IP address blocks:        103.168.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
                          rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:35:60:a1:e1:25:e6:03:0c:79:76:a5:d1:8e:c0:73:fb:93:a8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Nov 14 02:58:34 2025 GMT
            Not After : Nov 13 03:03:34 2026 GMT
        Subject: CN=EE8CA86FE6F0D1AC68DB530209043C688950CA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:39:89:95:fb:90:b2:68:02:ae:07:5b:82:
                    c8:01:59:ad:0d:26:21:ad:a2:be:8c:e4:11:00:ce:
                    6e:89:6b:b8:21:65:b1:d8:03:c0:43:8d:5c:13:e0:
                    5a:43:4f:37:6e:d5:a3:50:7e:ca:4a:08:03:97:c7:
                    da:de:ba:f2:9c:93:ae:f4:42:51:ce:3b:06:c8:3d:
                    ce:42:1e:6b:e1:6b:0b:2e:17:29:4c:3f:f6:fc:ef:
                    53:c7:80:3e:c1:a4:8d:52:7b:32:f7:11:21:ca:6b:
                    f5:16:01:e8:20:31:95:58:82:ad:84:b2:03:c3:8d:
                    b3:47:29:46:b7:6c:ef:af:ac:36:44:0f:93:0b:77:
                    ec:bd:df:6b:eb:ec:74:b6:9d:d3:bd:39:2b:09:24:
                    3a:ce:06:5d:d4:3f:87:c8:14:b2:9a:18:be:d2:3d:
                    eb:18:d1:ea:ff:fc:e4:be:b2:36:e7:b1:f0:74:50:
                    3d:3f:3e:c6:19:1b:da:e8:a1:b1:80:64:8f:a0:76:
                    4a:c8:70:52:a9:50:51:19:4e:6a:bd:ae:8b:36:ae:
                    20:ad:9a:c4:64:77:40:2e:37:91:ac:2a:29:13:6b:
                    31:bc:48:8d:c2:e6:4b:a9:dd:67:b3:d1:81:cf:2a:
                    80:a6:82:a4:1d:1b:ec:98:7a:11:8e:d5:54:04:6c:
                    ea:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8C:A8:6F:E6:F0:D1:AC:68:DB:53:02:09:04:3C:68:89:50:CA:11
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:e5:cb:3b:a2:40:80:22:07:f2:ef:36:b1:8a:1c:e3:2c:77:
         d1:57:d8:ac:bd:00:de:ea:5b:19:8b:23:3e:d3:e4:34:9b:41:
         16:96:9c:76:ea:7f:63:2f:a9:15:79:16:3c:aa:70:21:de:59:
         0e:7f:a2:e8:94:a4:45:36:b0:ba:65:05:86:17:ac:ac:f2:78:
         d8:12:94:81:f1:0d:ce:ec:97:b8:24:81:d0:a2:f3:7f:45:6d:
         1f:96:c3:32:7b:b5:c3:d4:d4:c1:d0:74:b2:28:0f:34:1f:f5:
         30:a4:7c:59:06:ef:d1:3e:f1:4b:7b:1d:15:d6:88:cd:e3:01:
         28:3a:bf:4e:d6:55:7d:6d:f4:90:d1:49:b9:8e:e5:05:f2:34:
         62:cf:bd:cc:47:7e:87:9f:d2:f8:0e:e3:3a:f6:59:e7:73:13:
         9b:6a:de:da:a0:d6:71:d9:d0:52:ed:11:29:10:9a:1b:06:0c:
         55:30:f9:9d:e8:54:db:0f:b9:3a:50:93:9e:81:6f:99:84:1d:
         3d:45:0f:42:12:43:44:ea:0e:fa:51:a4:ce:67:24:c9:16:d1:
         0f:64:0c:b8:b3:f7:d3:4c:bc:63:60:ef:ab:ca:e3:e3:aa:76:
         33:28:2c:3b:64:ef:25:20:04:3a:3e:c2:11:90:47:72:64:c1:
         32:11:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:31 2025 by rpki-client