This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
File:                     3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (raw, json)
Hash identifier:          8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=
Subject key identifier:   62:E6:17:A4:8F:94:62:92:21:0B:D8:9D:C5:F6:51:79:34:07:37:74
Certificate issuer:       /CN=B197F427572524588487CFDB163A9E512FAE4DF2
Certificate serial:       2016C58EE7D68E0CFD840962558EEE90057F1B4D
Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa
Signing time:             Mon 29 Dec 2025 00:00:02 +0000
ROA not before:           Sun 28 Dec 2025 23:55:02 +0000
ROA not after:            Mon 28 Dec 2026 00:00:02 +0000
asID:                     140475
IP address blocks:        103.153.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl
                          rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 14:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:c5:8e:e7:d6:8e:0c:fd:84:09:62:55:8e:ee:90:05:7f:1b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2
        Validity
            Not Before: Dec 28 23:55:02 2025 GMT
            Not After : Dec 28 00:00:02 2026 GMT
        Subject: CN=62E617A48F946292210BD89DC5F6517934073774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:1a:79:65:26:14:41:7b:52:cc:3b:ad:b2:
                    89:21:cf:88:f7:1d:55:0a:fe:6b:2e:82:f4:25:cf:
                    75:c2:59:49:9e:79:68:d5:18:c8:3e:c7:ae:2a:b5:
                    5b:4c:f4:27:8b:50:38:09:35:7a:72:2d:77:38:af:
                    a8:ba:9a:37:2a:24:49:a3:03:bf:ff:ad:8b:51:9e:
                    8c:b9:c8:a6:d6:dd:87:05:29:87:93:45:b8:3a:db:
                    ab:70:76:6d:e4:31:f2:35:93:fa:77:97:5f:20:58:
                    14:39:e4:3b:a5:65:0d:63:2f:99:e7:b7:3c:99:2c:
                    c0:82:0a:34:fe:d6:a6:54:bf:fb:8e:47:2a:4d:0d:
                    01:98:40:b0:50:0f:99:91:8b:cc:aa:60:4a:04:ce:
                    e9:61:87:dc:ee:27:09:c3:6a:15:08:29:8f:b2:20:
                    dd:27:08:cb:d7:b0:9b:38:21:7d:65:56:f5:01:b5:
                    9c:0b:a8:35:75:55:8d:7a:81:f9:87:47:f9:70:a8:
                    3e:32:14:44:2a:be:e9:24:f1:ac:f2:00:f5:d1:2c:
                    d8:b9:5f:66:64:53:2d:9f:8f:20:f5:22:0a:54:48:
                    4d:46:fc:ea:95:ff:0e:d3:b5:3e:07:92:b3:d0:f9:
                    ec:8e:52:92:c0:b5:96:b7:2f:b8:9f:54:0a:da:da:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E6:17:A4:8F:94:62:92:21:0B:D8:9D:C5:F6:51:79:34:07:37:74
            X509v3 Authority Key Identifier:
                keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7b:50:31:3f:99:cc:d4:93:26:d0:65:73:c3:e4:d9:29:43:
         93:da:89:f8:32:26:a4:2e:9e:4c:db:a1:36:c5:3c:48:68:01:
         73:96:67:d3:24:1f:b5:3d:7f:17:e2:89:5c:72:3c:dd:ab:06:
         70:e1:59:bc:b4:2c:b4:ee:64:28:6b:7e:3b:b3:9a:3d:ac:80:
         21:d6:f4:e8:29:8f:4d:7c:66:a4:7c:cd:85:43:f2:0a:79:0b:
         c1:20:a9:24:e2:34:ae:8a:f3:3b:ae:ae:8e:f0:ce:e3:f8:d3:
         01:1c:0b:fe:53:93:10:63:60:f7:86:9c:34:71:a1:85:94:a6:
         51:5f:0b:c2:aa:d2:1b:9b:c7:92:df:2f:2b:5f:78:97:5c:91:
         17:29:08:8f:94:a4:57:2d:d5:bf:f5:b8:d6:0c:ca:d4:c1:f6:
         03:41:50:0a:ab:3c:be:23:6e:39:ce:92:5b:94:33:49:45:45:
         36:48:e1:44:92:cf:d3:05:70:26:90:69:05:03:f4:79:8e:60:
         6c:df:0c:9a:be:21:b3:0a:da:09:81:2b:4b:73:ad:df:00:a6:
         00:7b:0f:6a:51:2b:60:2e:78:3e:c3:f8:3a:48:72:88:ca:7a:
         6e:2e:57:ce:af:d7:af:9a:98:39:ee:60:9d:97:fb:6f:10:1d:
         bd:80:84:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:10:00 2026 by rpki-client