This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa
File:                     3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (raw, json)
Hash identifier:          RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=
Subject key identifier:   B7:95:6D:A3:E3:D2:3F:AB:F8:80:28:DD:8B:91:1E:00:C0:46:B4:1D
Certificate issuer:       /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
Certificate serial:       3DD868CE150949798A50040B92ADBF659728FC9B
Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa
Signing time:             Mon 29 Dec 2025 11:00:02 +0000
ROA not before:           Mon 29 Dec 2025 10:55:02 +0000
ROA not after:            Mon 28 Dec 2026 11:00:02 +0000
asID:                     133355
IP address blocks:        103.185.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl
                          rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d8:68:ce:15:09:49:79:8a:50:04:0b:92:ad:bf:65:97:28:fc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7
        Validity
            Not Before: Dec 29 10:55:02 2025 GMT
            Not After : Dec 28 11:00:02 2026 GMT
        Subject: CN=B7956DA3E3D23FABF88028DD8B911E00C046B41D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:34:02:ba:58:86:b6:de:9c:f8:22:3a:dd:
                    5d:4a:7e:f2:90:b8:ea:11:32:48:4f:bd:03:2d:96:
                    2f:12:f3:06:6b:c7:4b:07:d3:f4:a4:e1:73:6e:c8:
                    52:14:c5:bd:b9:a5:6c:e6:89:aa:dc:3f:0c:94:88:
                    df:4f:ce:89:62:60:10:f4:f0:7a:88:cf:3b:d3:11:
                    60:20:4a:07:3f:ed:29:e6:f5:50:e2:21:80:91:9e:
                    9d:84:2e:e9:c5:ba:91:c1:94:f6:88:17:a8:54:2b:
                    80:72:64:59:d5:cb:e0:64:92:a0:d9:7b:94:59:00:
                    13:53:dc:a4:2b:db:01:27:c2:cb:40:81:e4:8e:f5:
                    35:8c:a0:95:48:be:dd:a4:94:80:24:09:09:a8:0e:
                    eb:85:7e:47:55:46:c1:40:a4:20:1e:a7:c8:fe:d7:
                    bd:35:35:80:d6:3e:bb:cd:d0:2a:b7:34:cc:6a:70:
                    47:00:fa:f2:01:54:16:40:a2:15:39:1d:18:c1:30:
                    06:ef:77:2a:50:05:96:e6:43:4b:e0:39:88:d5:b5:
                    0d:72:26:7a:19:d0:42:60:f9:84:dc:0c:35:0d:59:
                    e7:4a:b9:53:3e:83:84:b1:e3:01:1e:2d:2c:53:09:
                    43:5c:2c:44:1c:f1:c5:d7:82:87:82:d0:1a:16:03:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:95:6D:A3:E3:D2:3F:AB:F8:80:28:DD:8B:91:1E:00:C0:46:B4:1D
            X509v3 Authority Key Identifier:
                keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:5b:28:4d:f6:ae:40:c3:63:56:f2:a7:5e:7f:55:ea:fb:f3:
         24:16:2a:33:1d:49:84:e1:f3:5b:42:98:d7:af:c9:d8:c7:8e:
         ab:a1:d2:04:ba:e1:ae:aa:5a:6b:28:4e:bd:20:97:f3:e2:07:
         3b:1a:b9:e3:dc:f1:ba:03:e3:83:5a:97:32:99:d1:09:5b:68:
         59:8a:d3:ea:30:10:40:c9:a4:06:77:8f:80:5c:fe:5b:fd:ad:
         74:4d:25:97:e3:ef:64:68:12:b4:c6:c4:4b:d6:eb:0e:e0:6e:
         a3:a9:b3:58:c7:e7:45:9b:bb:f8:ef:dc:d6:c1:e7:d3:a1:04:
         1f:09:20:b9:34:9b:b5:23:b6:83:68:c8:b5:59:7a:06:06:15:
         e6:e3:f5:27:e8:ae:09:12:b5:03:f1:5b:bb:31:ce:97:4c:8c:
         19:d3:a9:aa:2b:f1:e8:51:6f:dd:28:d8:16:fd:43:79:93:fb:
         3b:90:0f:d5:21:a6:e0:a7:5b:45:c0:d9:4a:d9:f0:b5:de:9d:
         7b:71:a9:1b:92:b3:d1:93:1a:63:df:e7:b1:b0:85:12:10:d1:
         a3:73:3d:7f:cb:f9:3a:a0:a1:62:2e:01:ef:ad:3e:01:04:fc:
         f2:ed:a7:e4:fe:7b:9e:89:95:bf:d9:6c:71:ce:90:e6:46:b5:
         83:a0:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:44 2026 by rpki-client