This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa
File:                     3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=
Subject key identifier:   3D:4E:FC:07:43:1F:25:47:DB:6D:82:2B:9D:F0:45:39:E4:5F:A6:C6
Certificate issuer:       /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial:       1645E3DDEF7DE5612BB67038127EDF0D301A88B6
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa
Signing time:             Mon 29 Dec 2025 00:00:02 +0000
ROA not before:           Sun 28 Dec 2025 23:55:02 +0000
ROA not after:            Mon 28 Dec 2026 00:00:02 +0000
asID:                     140475
IP address blocks:        103.153.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
                          rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:e3:dd:ef:7d:e5:61:2b:b6:70:38:12:7e:df:0d:30:1a:88:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Validity
            Not Before: Dec 28 23:55:02 2025 GMT
            Not After : Dec 28 00:00:02 2026 GMT
        Subject: CN=3D4EFC07431F2547DB6D822B9DF04539E45FA6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:a7:2e:63:7c:36:0b:18:9b:95:23:3c:e6:
                    48:ae:91:a7:98:d8:fe:94:fd:5b:1a:a0:55:20:e4:
                    14:c1:af:28:55:89:aa:10:54:d9:be:93:cc:ce:5b:
                    8c:83:54:82:3d:43:aa:07:7f:f0:af:c5:50:72:4f:
                    10:b8:80:24:20:1c:38:28:14:20:95:3e:da:4c:79:
                    a3:ab:6b:3f:47:45:b7:33:68:08:df:dd:53:63:ae:
                    ee:d3:41:56:35:36:61:1e:57:7f:2c:70:09:e2:42:
                    d5:36:f4:df:0e:e9:c4:37:52:a0:37:cf:d0:1f:fc:
                    83:4a:3b:31:1e:70:ce:b9:17:c2:1f:e8:14:92:01:
                    e3:19:29:25:8e:43:48:eb:71:80:42:ad:8f:9d:72:
                    73:66:81:2c:bf:0c:12:17:6f:19:8c:fa:38:ac:96:
                    af:5b:59:3b:50:f0:8d:28:b9:a4:eb:44:f6:a5:f4:
                    cd:a4:f8:e4:18:b2:e0:f9:96:94:84:1e:ea:e1:77:
                    58:44:06:dc:3b:4e:4f:3a:e4:ce:8f:88:c6:a5:65:
                    ac:e2:36:50:7e:ad:6d:27:a7:ee:4a:e8:4a:b2:9f:
                    38:78:d2:a6:82:87:69:82:09:bf:a0:4d:45:b7:31:
                    f7:1c:e5:6b:1f:50:37:68:b2:04:d0:0c:ac:18:4c:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:FC:07:43:1F:25:47:DB:6D:82:2B:9D:F0:45:39:E4:5F:A6:C6
            X509v3 Authority Key Identifier:
                keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:bd:08:59:2e:68:ce:95:6e:c2:c5:61:0d:65:68:58:bf:45:
         7c:17:b8:7b:eb:8b:72:b8:ad:b8:50:c8:1d:bc:fb:38:67:72:
         9e:2e:ea:39:9b:f6:11:90:51:8e:e7:c8:7a:5a:51:83:0a:1b:
         fc:ad:c0:b7:ee:4a:0f:a6:44:61:be:00:50:1b:ca:2c:10:5b:
         1d:37:c5:d2:0c:6f:27:c0:79:e2:a3:13:0d:21:41:1d:1d:e7:
         61:bb:ca:76:69:30:5f:ad:6c:54:32:31:8d:86:cb:49:b5:53:
         11:f8:db:44:db:b1:b1:65:b3:83:29:e4:20:16:dc:af:20:63:
         e0:af:f4:a3:40:47:d7:68:04:1f:b9:58:7b:f1:11:07:8c:e4:
         de:82:8d:3e:2b:0b:38:16:5d:54:6d:1f:b0:cd:da:b5:57:74:
         75:ba:09:a7:56:75:cb:82:d4:9b:13:16:1d:6e:56:3c:73:68:
         8c:ce:dc:a1:80:64:f1:3f:5b:87:eb:c1:38:f3:4e:d3:c5:50:
         59:2b:69:d0:d8:a9:78:48:80:de:ab:02:d6:04:97:12:e3:0d:
         00:68:b5:42:96:10:be:b4:cf:4f:b9:e1:ea:e0:76:e0:95:9f:
         5a:5c:d0:c5:20:7a:cd:90:2a:aa:15:fa:10:b4:45:58:4c:88:
         6c:65:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:29:12 2026 by rpki-client