This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa
File:                     3130332e3137382e322e302f32332d3233203d3e20313431303737.roa (raw, json)
Hash identifier:          Ngt//yoU0gPCcUNIg6gz5GqlpjqLXC6sDwhwp1ku9U0=
Subject key identifier:   DF:4D:2C:DB:64:BC:FD:89:D7:EB:AF:0A:EF:A4:03:54:92:E1:51:C9
Certificate issuer:       /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial:       6AD9F3B709E09043F17665560097B0A9022F82EE
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa
Signing time:             Wed 19 Nov 2025 20:24:03 +0000
ROA not before:           Wed 19 Nov 2025 20:19:03 +0000
ROA not after:            Wed 18 Nov 2026 20:24:03 +0000
asID:                     141077
IP address blocks:        103.178.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl
                          rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 16:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d9:f3:b7:09:e0:90:43:f1:76:65:56:00:97:b0:a9:02:2f:82:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
        Validity
            Not Before: Nov 19 20:19:03 2025 GMT
            Not After : Nov 18 20:24:03 2026 GMT
        Subject: CN=DF4D2CDB64BCFD89D7EBAF0AEFA4035492E151C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:55:aa:c2:7a:ca:1e:6e:b6:71:04:09:3b:8d:
                    dc:59:4e:84:46:a6:97:db:04:0f:cc:18:8e:20:42:
                    2e:76:0d:c7:94:2b:3c:ca:14:58:6c:d4:c5:d9:41:
                    ba:b0:dc:23:18:56:a2:02:72:38:45:51:58:3c:59:
                    64:e4:07:21:0a:3c:11:f3:f7:5c:ff:5c:46:ba:0c:
                    77:80:82:bb:85:47:cc:ed:d5:a2:a8:22:ba:c2:5f:
                    30:fe:2e:7f:24:64:4e:3f:e5:1f:24:00:3e:2d:de:
                    be:e5:e1:42:e8:5c:be:56:31:3c:42:41:6e:fa:ee:
                    f1:86:c4:5f:1c:96:fa:bc:cd:5c:d9:9b:6c:d1:e5:
                    e9:df:9b:6b:99:ec:ad:08:44:1d:84:dd:5d:5c:1c:
                    2d:d1:2a:2c:c3:c5:f5:7a:b1:47:50:a1:96:56:db:
                    20:aa:d3:ac:09:37:86:8b:2f:e5:03:97:73:b2:6b:
                    fc:55:40:6d:96:0d:a1:cc:59:53:ad:fe:88:73:fa:
                    48:ca:b5:08:ac:01:7b:2b:9d:ad:45:f7:d4:96:16:
                    15:33:df:71:b6:73:a8:24:5b:bd:5f:07:c9:5b:0c:
                    13:da:12:4a:b1:fd:0a:75:5d:d3:09:7f:a7:13:4f:
                    2e:08:13:5d:41:80:c0:4a:b7:c7:79:8c:58:9a:6a:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:2C:DB:64:BC:FD:89:D7:EB:AF:0A:EF:A4:03:54:92:E1:51:C9
            X509v3 Authority Key Identifier:
                keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32332d3233203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:21:21:27:a3:eb:44:30:63:9a:06:16:a9:a3:c6:7f:46:
         a2:2b:9a:8c:fe:e0:26:13:f4:62:f2:a7:cf:75:a2:5d:f3:9a:
         d3:7f:d2:8d:02:76:96:92:8b:9d:76:5f:2d:ed:e1:29:a0:89:
         2f:25:f2:34:dd:83:22:5a:fa:6c:f3:87:e9:e9:2f:4e:5b:d5:
         96:f6:7b:b1:7d:1f:76:04:20:a9:7e:48:f1:6a:52:8d:3c:bb:
         2b:27:1b:f3:2e:89:d3:8c:74:2d:c3:60:37:0e:5d:cf:13:b9:
         ae:8d:db:74:e5:32:e3:48:54:b1:6f:74:37:2f:90:c0:5f:bf:
         3a:34:f6:d9:9f:88:3e:c5:50:ff:96:08:55:56:ce:ce:ce:95:
         94:b1:be:da:67:9f:6b:18:66:b7:c8:a3:2f:4e:6a:76:54:ca:
         61:6c:3f:4a:5d:86:1f:64:de:70:a7:60:f0:0b:dc:c4:04:92:
         b3:74:1d:78:8c:5c:6f:9c:d2:b2:05:31:47:fe:fc:d9:ea:7f:
         39:d2:e2:ba:21:46:43:36:48:9d:af:58:ac:1b:3c:59:4a:bf:
         1b:1b:41:af:c6:0e:ef:69:33:31:57:b4:2f:87:e5:68:78:6b:
         25:2a:86:b0:77:08:13:52:09:7d:b2:e4:52:d0:3b:46:39:e7:
         44:f1:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:14:08 2025 by rpki-client