This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
File:                     3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (raw, json)
Hash identifier:          bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=
Subject key identifier:   74:01:AF:C4:53:89:34:F8:90:D5:59:26:6B:D0:28:73:7F:45:87:62
Certificate issuer:       /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
Certificate serial:       10E3AE6B3A3D1FB346CE1E3C5E17575612D4F711
Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
Signing time:             Wed 17 Dec 2025 08:03:04 +0000
ROA not before:           Wed 17 Dec 2025 07:58:04 +0000
ROA not after:            Wed 16 Dec 2026 08:03:04 +0000
asID:                     147097
IP address blocks:        103.174.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl
                          rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 13:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:ae:6b:3a:3d:1f:b3:46:ce:1e:3c:5e:17:57:56:12:d4:f7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B
        Validity
            Not Before: Dec 17 07:58:04 2025 GMT
            Not After : Dec 16 08:03:04 2026 GMT
        Subject: CN=7401AFC4538934F890D559266BD028737F458762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:9b:33:2d:c1:26:44:34:0a:b2:94:4f:20:
                    d8:ed:d1:03:0c:64:10:55:89:14:c3:ef:45:33:20:
                    dd:70:1a:1b:48:10:57:65:a0:f8:b3:87:af:56:bc:
                    8a:0d:c6:51:2c:94:1f:f9:98:b1:8f:ba:e7:8b:b4:
                    7e:19:e5:ff:bb:ac:73:d7:1e:38:91:56:53:e5:fb:
                    60:2f:7d:7a:f8:a1:7d:16:ea:11:84:5b:d6:51:e8:
                    fb:4b:63:95:77:e3:8a:c2:7e:df:75:36:01:58:32:
                    b1:3c:12:84:11:af:e1:1c:88:3e:5c:01:41:38:de:
                    f5:23:de:35:b9:87:86:d9:45:e8:ab:18:82:be:19:
                    0e:f6:1a:47:ba:26:54:61:e3:4b:1a:15:d8:70:97:
                    c1:a5:23:2d:c0:3f:fc:a2:8f:c0:fe:18:96:03:9e:
                    bc:01:12:0f:74:2a:43:3b:c0:e2:7e:c3:ca:73:ec:
                    b5:64:07:0a:fe:1f:03:63:02:14:1b:3d:11:5c:f5:
                    cb:27:f1:87:c2:d7:5d:f0:e5:6c:23:e4:65:9e:e4:
                    5f:99:8c:d9:c3:85:ad:55:1c:ae:0b:5d:51:d4:cf:
                    1d:cd:c4:42:fc:82:c1:ea:6b:9b:d2:e1:d6:dc:09:
                    69:08:35:2e:45:09:74:da:0c:4b:b5:cf:eb:23:ba:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:AF:C4:53:89:34:F8:90:D5:59:26:6B:D0:28:73:7F:45:87:62
            X509v3 Authority Key Identifier:
                keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:89:40:d8:9c:9b:e5:c1:4c:d4:6e:e8:ec:6c:73:7f:8a:
         5b:51:a0:51:de:8b:d2:24:51:0f:60:ba:60:56:e9:61:2a:30:
         ad:b8:42:4a:72:8a:31:55:61:19:94:0b:5a:4e:17:05:3e:b0:
         3b:19:19:2d:d1:18:7a:2c:22:c5:32:0b:c4:3c:58:95:28:63:
         38:90:73:1b:04:ba:a9:fb:d1:87:23:8f:f5:e7:d0:a4:9e:38:
         d5:dc:63:8e:ac:26:a3:8f:4b:4f:db:52:ba:6e:9b:89:1f:a4:
         9d:6b:70:a6:e0:14:53:55:7c:5c:bb:e1:fe:45:8c:a5:63:91:
         d8:e2:92:b1:02:0e:ae:da:2f:61:35:b9:1c:60:9f:67:59:32:
         47:06:bf:df:8f:2b:2f:5b:a3:79:40:00:65:c4:c5:62:e9:64:
         70:96:ad:6c:37:48:87:f9:66:50:51:e5:ea:9f:3f:54:c6:b9:
         b2:7c:b0:a2:46:86:fb:b7:88:6a:35:17:e5:c7:5f:9b:24:62:
         b9:a4:3d:ac:db:d8:fa:e1:0b:d3:b6:d0:48:13:96:5d:80:74:
         8c:77:b2:56:89:97:01:58:0f:81:85:99:35:79:dd:19:1a:88:
         76:9a:ae:f6:50:db:94:0d:56:9d:9f:e7:1c:c3:39:e3:22:d0:
         d4:b3:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 21:07:15 2025 by rpki-client