This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa
File:                     3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=
Subject key identifier:   1A:E4:33:FA:AB:F9:E4:2D:10:7B:F2:CE:A5:88:6B:AC:8F:5E:2F:BD
Certificate issuer:       /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
Certificate serial:       73F0029FEE13AEA07F628E4A4F582128D17CFD5B
Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 06 Nov 2025 16:00:01 +0000
ROA not before:           Thu 06 Nov 2025 15:55:01 +0000
ROA not after:            Thu 05 Nov 2026 16:00:01 +0000
asID:                     138089
IP address blocks:        103.63.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl
                          rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 10:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f0:02:9f:ee:13:ae:a0:7f:62:8e:4a:4f:58:21:28:d1:7c:fd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728
        Validity
            Not Before: Nov  6 15:55:01 2025 GMT
            Not After : Nov  5 16:00:01 2026 GMT
        Subject: CN=1AE433FAABF9E42D107BF2CEA5886BAC8F5E2FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:ce:57:30:95:63:55:d7:33:04:c9:89:0c:
                    44:56:aa:2e:ca:61:79:06:ed:af:c7:6c:11:61:58:
                    0a:59:5d:a1:ec:3c:c2:b3:53:2a:a1:b4:5b:2e:14:
                    07:68:39:2b:5f:11:38:5d:7e:53:a1:8b:11:44:6d:
                    08:69:e8:31:cf:55:c6:91:c3:b2:0e:09:43:a4:c4:
                    cf:33:ae:4b:c2:3f:cb:65:84:10:9a:37:d8:99:9c:
                    4c:98:25:69:e0:4d:d6:42:61:8d:fa:60:28:f5:17:
                    a8:6e:f3:9b:bb:1d:ad:c2:b5:ce:24:23:43:37:09:
                    3b:d9:fd:f0:44:80:ba:31:e1:0b:cd:a9:81:00:77:
                    17:ec:a1:09:ba:06:e4:48:05:95:db:f5:b2:87:75:
                    df:cd:78:9a:a0:12:a3:61:7f:bc:b5:6c:c0:4c:7e:
                    d3:53:5d:89:84:89:34:ff:1d:aa:13:b7:ed:0c:1e:
                    5e:23:7c:ab:b3:fe:58:38:92:b3:74:89:f0:e8:c5:
                    82:37:b2:a3:98:f5:3b:0e:6b:1c:6f:7f:8f:a4:54:
                    74:52:49:4d:b1:e0:bd:e0:0a:6d:f6:1e:18:c8:c0:
                    f7:28:27:52:fc:80:4e:66:b5:60:23:da:19:c1:52:
                    52:9f:0e:92:20:66:0a:20:32:8b:e4:61:57:c5:65:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:33:FA:AB:F9:E4:2D:10:7B:F2:CE:A5:88:6B:AC:8F:5E:2F:BD
            X509v3 Authority Key Identifier:
                keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/3130332e36332e32362e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:55:ed:cf:56:e9:4f:a2:77:0a:9d:09:90:83:ab:ff:37:e2:
         1f:dc:0b:43:f9:4c:eb:77:67:4b:5d:e7:1d:e4:d9:de:cb:f5:
         42:95:21:c2:74:20:81:7b:93:cc:86:2d:be:e8:16:f8:38:52:
         58:c3:33:c8:71:4f:05:d5:ff:e5:59:eb:46:f2:20:64:33:f0:
         77:81:48:f5:a2:c1:19:20:d5:03:6d:49:20:65:27:3e:cf:6e:
         f6:23:d2:af:ff:a1:9b:af:fe:3d:9f:ec:32:4e:cd:90:bf:55:
         20:fe:b3:d5:c5:ae:11:eb:c0:e2:26:a5:ab:b9:ad:12:f1:c1:
         c3:27:f8:27:3e:64:d1:49:9b:dc:93:30:ee:23:73:96:6a:ed:
         fa:23:70:33:2f:33:a1:22:ab:e8:f7:24:74:42:1f:3a:6a:6f:
         70:04:1d:54:12:55:96:7b:90:bc:b9:e2:c0:45:1b:a7:31:da:
         85:31:17:c9:12:21:27:e7:b5:8f:5c:cf:1a:18:b5:fa:f9:f8:
         ba:36:96:1d:66:b6:13:8f:de:98:e5:59:55:e9:98:29:51:69:
         1d:fe:e7:1b:32:b8:3c:0c:28:bd:26:67:91:6b:48:7e:b9:e9:
         26:47:d5:ec:0c:dd:bd:a2:79:ed:6b:aa:51:3b:05:43:86:3f:
         b8:13:2d:67
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUc/ACn+4TrqB/Yo5KT1ghKNF8/VswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG
OTcyMjcyODAeFw0yNTExMDYxNTU1MDFaFw0yNjExMDUxNjAwMDFaMDMxMTAvBgNV
BAMTKDFBRTQzM0ZBQUJGOUU0MkQxMDdCRjJDRUE1ODg2QkFDOEY1RTJGQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCarM5XMJVjVdczBMmJDERWqi7K
YXkG7a/HbBFhWApZXaHsPMKzUyqhtFsuFAdoOStfEThdflOhixFEbQhp6DHPVcaR
w7IOCUOkxM8zrkvCP8tlhBCaN9iZnEyYJWngTdZCYY36YCj1F6hu85u7Ha3Ctc4k
I0M3CTvZ/fBEgLox4QvNqYEAdxfsoQm6BuRIBZXb9bKHdd/NeJqgEqNhf7y1bMBM
ftNTXYmEiTT/HaoTt+0MHl4jfKuz/lg4krN0ifDoxYI3sqOY9TsOaxxvf4+kVHRS
SU2x4L3gCm32HhjIwPcoJ1L8gE5mtWAj2hnBUlKfDpIgZgogMovkYVfFZfWjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGuQz+qv55C0Qe/LOpYhrrI9eL70wHwYDVR0j
BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw
M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy
MjcyOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5YTZjZWFmLWQ2OGMtNGRjYi04
MjY3LWZkMWE1M2Q5OTk4OC8wLzMxMzAzMzJlMzYzMzJlMzIzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc/GjANBgkqhkiG
9w0BAQsFAAOCAQEAq1Xtz1bpT6J3Cp0JkIOr/zfiH9wLQ/lM63dnS13nHeTZ3sv1
QpUhwnQggXuTzIYtvugW+DhSWMMzyHFPBdX/5VnrRvIgZDPwd4FI9aLBGSDVA21J
IGUnPs9u9iPSr/+hm6/+PZ/sMk7NkL9VIP6z1cWuEevA4ialq7mtEvHBwyf4Jz5k
0Umb3JMw7iNzlmrt+iNwMy8zoSKr6PckdEIfOmpvcAQdVBJVlnuQvLniwEUbpzHa
hTEXyRIhJ+e1j1zPGhi1+vn4ujaWHWa2E4/emOVZVemYKVFpHf7nGzK4PAwovSZn
kWtIfrnpJkfV7AzdvaJ57WuqUTsFQ4Y/uBMtZw==
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:44:47 2025 by rpki-client