This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
File:                     3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier:          bEZOujHilL/rXvF4OnLLVFp4nRZlUgFYRFmndeCTA1Y=
Subject key identifier:   82:91:F7:1C:17:31:AF:9A:55:A1:D1:10:27:34:99:CA:96:72:9D:48
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       387D12103887C8157AD7E1F9ABC318F054A9C5C1
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa
Signing time:             Fri 14 Nov 2025 16:00:01 +0000
ROA not before:           Fri 14 Nov 2025 15:55:01 +0000
ROA not after:            Fri 13 Nov 2026 16:00:01 +0000
asID:                     138818
IP address blocks:        103.103.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 12:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:12:10:38:87:c8:15:7a:d7:e1:f9:ab:c3:18:f0:54:a9:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Nov 14 15:55:01 2025 GMT
            Not After : Nov 13 16:00:01 2026 GMT
        Subject: CN=8291F71C1731AF9A55A1D110273499CA96729D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:12:58:79:34:04:7a:e3:ac:97:54:dc:2d:
                    a9:21:2e:6f:30:09:06:5b:aa:d8:38:60:45:51:5f:
                    40:0b:f3:f7:53:b6:97:16:b9:fd:80:87:35:e8:42:
                    ca:ac:57:45:6f:cb:38:b3:1b:86:b4:26:a6:bf:52:
                    f5:62:7b:c6:ad:9a:39:41:cd:21:2a:b1:96:ca:83:
                    c3:92:29:c9:dc:9b:0f:bd:29:c9:7b:20:d4:c9:76:
                    ad:91:d5:30:92:7d:cf:fb:b6:7c:33:6f:ef:9d:1f:
                    16:e5:98:9c:d4:82:33:3d:13:b0:da:e4:a6:3a:66:
                    4c:49:64:ea:32:1b:5e:a4:01:3a:64:93:b8:25:d6:
                    37:a9:46:ed:33:45:1d:df:9d:29:cb:66:5a:b3:57:
                    cd:90:ef:8a:68:e8:17:05:af:ba:d2:57:2d:fb:df:
                    c4:24:d1:2d:33:4e:8c:f9:2c:bf:8f:a6:46:a7:f5:
                    52:17:89:89:55:32:8f:d1:e0:10:bc:18:e2:90:aa:
                    93:10:af:e8:f5:63:42:0e:42:6c:ae:9b:7d:b6:a8:
                    48:c9:91:97:88:0f:cf:1a:1f:79:84:9f:5d:1a:6d:
                    9c:27:8c:26:38:9a:d3:19:d9:e4:ce:7b:87:94:3e:
                    de:73:bd:98:8e:43:68:6b:f2:58:54:88:84:53:70:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:91:F7:1C:17:31:AF:9A:55:A1:D1:10:27:34:99:CA:96:72:9D:48
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32342d3234203d3e20313338383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:92:75:a6:1a:c5:60:14:28:d1:28:db:77:fe:4e:90:23:
         a6:76:d6:64:ca:37:57:4f:58:8b:79:87:ac:4c:b2:a7:5c:fa:
         89:44:58:25:6e:56:ea:56:c2:05:e0:36:03:e0:2f:65:aa:0b:
         b8:ed:a1:54:7b:e4:c2:f0:3d:fc:de:f5:ff:64:10:10:75:03:
         7a:fc:07:08:e5:4d:0e:33:89:a1:39:68:57:29:5a:50:a6:ee:
         0e:3f:78:e4:89:59:46:65:7c:79:b6:6e:56:dd:d5:fa:2e:02:
         11:91:3d:cb:ca:ef:c3:92:10:24:f0:8c:49:65:d5:be:4a:ee:
         90:92:a5:21:58:eb:60:21:a0:5c:30:d6:ea:cf:4c:71:0c:74:
         c6:0b:c4:88:69:ff:e7:ab:10:c8:40:c2:eb:c8:f6:9b:d2:64:
         5d:f9:63:b9:51:f8:92:27:2d:6e:74:1c:a5:19:0e:64:25:67:
         e9:0d:00:bb:72:11:61:c0:95:9a:7d:91:c9:bc:bf:00:1e:f1:
         66:c8:6e:bc:42:e7:7b:72:8d:71:27:a9:07:01:12:c4:10:21:
         42:b8:97:a5:94:be:a9:17:de:60:c4:c0:f0:aa:b1:90:9b:5f:
         35:2f:b6:27:c8:b4:f5:9c:ac:19:9b:ac:cc:84:13:13:2a:85:
         fd:57:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:46:07 2025 by rpki-client