This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa
File:                     3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa (raw, json)
Hash identifier:          Ecgrbu6B3OibUjb6EMgW5BudmheK1y9j1Ehe3erMDBM=
Subject key identifier:   7E:DE:9D:35:08:AB:CA:E8:A0:DF:ED:CB:A8:D7:2A:4A:4A:46:5D:AC
Certificate issuer:       /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Certificate serial:       5F0A94291F87453F9D5A35B8ED084BB2CC423289
Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa
Signing time:             Fri 19 Dec 2025 07:00:01 +0000
ROA not before:           Fri 19 Dec 2025 06:55:01 +0000
ROA not after:            Fri 18 Dec 2026 07:00:01 +0000
asID:                     149737
IP address blocks:        103.188.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl
                          rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0a:94:29:1f:87:45:3f:9d:5a:35:b8:ed:08:4b:b2:cc:42:32:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
        Validity
            Not Before: Dec 19 06:55:01 2025 GMT
            Not After : Dec 18 07:00:01 2026 GMT
        Subject: CN=7EDE9D3508ABCAE8A0DFEDCBA8D72A4A4A465DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:ad:2d:a0:e0:28:47:62:ca:05:78:22:56:
                    31:9c:90:fb:95:63:a4:02:70:92:2a:5e:3d:a3:4d:
                    c0:15:fd:65:db:99:46:f7:fb:0e:e0:5f:8c:e9:48:
                    27:75:1f:ff:78:50:55:49:2d:ef:b5:0b:b8:f3:78:
                    78:36:11:ae:21:26:d8:b8:80:c4:8e:e2:26:30:94:
                    77:bf:eb:38:17:6a:43:d9:76:bc:8c:98:e6:71:b2:
                    89:78:0e:0a:c9:a6:37:10:46:ae:fb:98:b1:04:46:
                    77:a3:ca:03:72:0e:3b:0b:1f:87:70:ab:b4:b8:d3:
                    d7:54:cd:4a:59:b2:6e:e9:75:83:36:33:9f:b9:6e:
                    f8:3d:1d:3f:31:ce:af:34:f4:17:da:42:73:2d:3a:
                    33:e1:45:18:e8:08:32:ac:a6:02:82:a6:c6:5c:ad:
                    a1:c5:31:55:20:d4:89:e1:c7:2d:76:8a:8f:dd:df:
                    9e:e9:1e:db:68:7c:32:c3:d7:d7:0e:ca:67:aa:d0:
                    bb:2e:8f:46:4d:3d:39:9c:37:3d:8a:f0:db:c1:5c:
                    1f:64:47:35:e0:39:b0:75:7b:28:20:ac:f3:f3:17:
                    a9:24:63:5c:6b:f3:39:fb:eb:ea:7e:63:6c:f7:d9:
                    27:86:c5:cb:d9:c2:d3:a3:c0:84:06:c3:7d:e6:5b:
                    2c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:9D:35:08:AB:CA:E8:A0:DF:ED:CB:A8:D7:2A:4A:4A:46:5D:AC
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32342d3234203d3e20313439373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:76:bf:19:aa:8b:e2:3d:52:e9:74:19:9e:f6:b8:33:1e:
         29:9d:a3:55:07:81:e8:d4:89:69:8d:00:c7:9b:02:95:b4:c3:
         4b:24:ad:42:d0:d1:04:11:ba:d9:4c:07:6b:ea:2b:fb:45:f2:
         be:c5:94:69:35:30:04:a2:24:cd:58:0e:97:3c:8a:02:a8:c3:
         5c:87:40:19:b5:4f:1b:a6:ab:1c:70:48:8a:89:f9:78:82:69:
         cf:96:23:52:f9:11:0c:ed:3b:62:cf:e4:9a:28:2c:70:f7:bc:
         3a:5d:9e:25:09:ca:eb:b0:d8:ce:f9:52:48:73:07:01:3a:51:
         1d:1c:02:b1:c2:1b:6b:58:c1:7d:e3:78:9e:eb:35:d2:79:8e:
         40:40:c2:5f:fb:ad:85:e5:da:0b:ec:fd:36:66:4c:15:13:1c:
         37:f1:64:24:1a:02:03:e1:2f:ca:ef:a0:2f:16:d7:14:b8:e3:
         08:b5:e8:77:aa:39:75:a8:f8:a9:41:5b:af:2a:46:c0:df:9d:
         3e:fc:dc:ca:a6:e8:55:86:b7:ca:61:b5:2f:e8:13:ee:d6:72:
         e4:d7:cc:be:29:4f:1d:66:c7:89:a0:2c:b8:5d:0e:38:1e:6b:
         95:f6:61:48:18:2d:48:dc:ca:97:41:82:ad:b5:3c:c7:8e:c0:
         a1:24:10:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:47 2026 by rpki-client