This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
File:                     3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (raw, json)
Hash identifier:          YI5TTtJnQG+fGB0QTZOZXBzGC7OWtcOUmujNcoTIZBY=
Subject key identifier:   AA:63:9F:3D:46:77:A1:52:C3:74:58:03:DF:96:31:E9:7C:94:4F:0C
Certificate issuer:       /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial:       0F180C4E379DD0C02ABD8168C6FB5CBE8920A983
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
Signing time:             Wed 12 Nov 2025 04:00:01 +0000
ROA not before:           Wed 12 Nov 2025 03:55:01 +0000
ROA not after:            Wed 11 Nov 2026 04:00:01 +0000
asID:                     141657
IP address blocks:        103.161.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
                          rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:0c:4e:37:9d:d0:c0:2a:bd:81:68:c6:fb:5c:be:89:20:a9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
        Validity
            Not Before: Nov 12 03:55:01 2025 GMT
            Not After : Nov 11 04:00:01 2026 GMT
        Subject: CN=AA639F3D4677A152C3745803DF9631E97C944F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:dd:df:95:de:99:83:53:28:18:08:d9:c3:
                    78:32:45:6c:85:8b:94:06:41:67:21:95:fe:c8:61:
                    9e:ac:21:75:4c:3e:90:e7:7d:6c:45:b7:e7:06:95:
                    7e:7a:29:8a:cf:95:22:94:bd:24:4c:ba:d1:28:8e:
                    f9:a2:f3:6c:16:d5:5d:8f:04:2e:82:38:c6:31:f2:
                    db:61:5b:0e:a7:94:fd:a5:57:2f:10:6b:41:f2:81:
                    50:38:3c:a7:fc:ae:0f:86:cb:e5:90:41:14:c0:40:
                    97:37:04:9d:81:04:e0:88:cc:d6:92:48:a7:2e:3b:
                    6a:cf:58:0a:a6:b3:d8:01:1b:c8:0a:4e:3a:79:66:
                    2c:63:92:60:88:c9:e3:e4:45:ea:0b:db:19:28:0c:
                    d9:31:af:5c:b6:30:b9:73:28:43:34:23:3e:62:c0:
                    e0:5c:62:05:02:75:2f:91:8f:49:a4:b5:7e:d2:55:
                    76:4a:22:a4:ba:e4:eb:2f:17:29:e4:89:47:27:b1:
                    08:6a:7a:8f:14:40:38:35:0c:66:1c:23:69:04:af:
                    21:d1:bf:9c:2d:30:51:04:d9:f2:61:7f:a8:b2:f0:
                    3d:78:3b:9c:b9:87:5f:0d:2f:25:e6:5e:51:fc:a6:
                    53:de:cb:83:11:6c:a9:52:bc:05:2e:20:eb:1f:9d:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:63:9F:3D:46:77:A1:52:C3:74:58:03:DF:96:31:E9:7C:94:4F:0C
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f1:2c:e9:ee:21:18:b1:c5:5d:49:0c:ef:e9:5d:7e:d4:b6:
         bf:cf:96:e1:64:ef:d4:5b:26:88:c4:17:b4:7a:d7:1a:69:c8:
         eb:01:f2:30:ea:c3:63:e0:5b:11:e8:0e:af:eb:56:30:22:32:
         38:d7:de:34:04:75:e9:08:2e:4d:9a:aa:51:9f:e8:fa:f9:55:
         cf:61:b0:08:ec:b0:2b:e9:20:66:1b:50:b6:c6:60:9b:5e:38:
         0a:16:fb:50:92:45:b8:3b:64:98:59:5d:a1:db:18:12:b6:fc:
         2d:e0:34:a7:e1:1a:d1:4d:19:26:77:3f:52:d0:19:75:09:e9:
         4d:94:e6:40:e4:b9:fb:14:54:d7:a0:de:01:6a:ca:4d:5b:47:
         24:fe:f6:07:5f:e5:70:95:67:6f:42:7e:3c:79:85:38:69:3d:
         09:aa:05:a9:9c:8a:65:e7:b1:a5:fd:07:77:97:bb:9f:42:40:
         d6:7c:d8:a3:ba:e2:da:63:76:e0:aa:f8:63:48:6b:08:8f:8d:
         6c:9b:54:ba:41:ae:f3:32:a4:ba:01:14:19:b2:ea:17:0f:31:
         12:17:82:2c:2d:20:2c:6e:74:d5:30:4e:3a:7c:9d:fe:a6:73:
         cf:a4:b4:f6:88:5e:ae:21:e2:84:76:e0:62:dd:f6:cf:eb:53:
         bd:cc:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:34:02 2025 by rpki-client