This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa
File:                     3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier:          zHu+x2gGwUwgUlq5CctYUcopUHkJoC2ZyqysIaSRBBM=
Subject key identifier:   59:D3:D4:C4:D3:51:91:90:B9:5B:87:03:46:98:07:2E:F2:17:84:2B
Certificate issuer:       /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
Certificate serial:       2F86BA637D59D042B0E0C79E80FD77F07BF38DC1
Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa
Signing time:             Thu 25 Dec 2025 04:00:00 +0000
ROA not before:           Thu 25 Dec 2025 03:55:00 +0000
ROA not after:            Thu 24 Dec 2026 04:00:00 +0000
asID:                     150942
IP address blocks:        103.105.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl
                          rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:86:ba:63:7d:59:d0:42:b0:e0:c7:9e:80:fd:77:f0:7b:f3:8d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
        Validity
            Not Before: Dec 25 03:55:00 2025 GMT
            Not After : Dec 24 04:00:00 2026 GMT
        Subject: CN=59D3D4C4D3519190B95B87034698072EF217842B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:9c:c2:9b:9b:7d:0d:05:30:73:0c:fa:23:
                    39:a6:da:17:f1:a3:07:7b:d0:ed:17:44:ea:c5:e6:
                    f3:d3:be:1a:95:7d:65:73:0f:3d:a6:1c:36:b4:79:
                    7f:65:36:bc:5f:da:1c:bc:d1:b5:ba:4d:b2:5c:0a:
                    07:51:38:3f:51:ac:b0:a6:e6:08:8b:17:a1:5a:47:
                    17:1b:17:15:e4:1a:2b:91:b6:0a:e0:73:c8:a2:e4:
                    e3:2d:03:52:49:a1:99:68:c4:d4:77:1d:8c:ad:78:
                    f6:3b:26:48:de:a7:9c:71:26:b8:ad:73:ff:f1:e8:
                    2c:67:f2:bb:6f:25:89:13:55:d9:63:c4:88:9c:dc:
                    4f:d7:ff:97:92:29:05:2f:9c:06:de:e7:4a:a9:b6:
                    bc:dd:50:3d:7c:0a:bf:be:33:ba:87:ef:dd:30:4c:
                    55:40:3e:e2:68:0c:88:6a:05:b2:a7:2d:88:1f:10:
                    5e:d1:30:8e:77:c1:4b:58:6f:a1:6f:9b:57:56:fb:
                    b3:b9:00:2f:cf:2c:7d:9c:29:a5:a1:fa:8c:86:2b:
                    62:d2:0e:eb:3c:cb:37:3a:16:2e:f6:fa:a6:ea:93:
                    a1:b0:d6:30:38:72:a1:cc:54:ad:70:b1:e8:ff:90:
                    7a:70:5c:44:95:3d:e1:2c:01:8c:3d:4c:1c:47:c7:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D3:D4:C4:D3:51:91:90:B9:5B:87:03:46:98:07:2E:F2:17:84:2B
            X509v3 Authority Key Identifier:
                keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:4a:70:95:bc:fe:5b:22:24:3e:c0:6a:ef:40:49:a2:0b:04:
         fd:73:0f:d6:35:db:ee:30:87:e6:88:25:1f:a0:3e:4f:a2:ee:
         7d:9c:c4:8a:7b:5b:aa:98:90:dd:2f:7d:17:09:ef:e4:9c:0d:
         e4:20:f7:1e:84:34:59:a9:d5:41:97:f1:48:6b:cc:c0:6c:fc:
         0b:5c:bb:d8:8d:b8:e9:27:23:77:2b:7e:c3:50:2e:ab:81:d6:
         be:7d:be:91:52:73:1a:d9:8b:e8:f4:48:a2:d0:29:e3:47:6f:
         34:89:e1:64:ee:b8:bb:88:77:fa:e2:21:45:4b:67:75:14:2c:
         70:d0:da:63:13:bd:3f:e2:40:9b:39:3b:5f:ff:12:e9:f9:14:
         ba:b7:41:c8:ed:de:37:c3:1d:99:0a:dc:fb:14:04:d6:88:f5:
         9a:f3:2f:4b:1c:72:de:5d:b3:2b:b2:4a:2b:07:dd:37:78:a3:
         46:94:bd:06:37:cb:8f:08:6b:14:a2:39:5b:3f:d2:8c:19:64:
         70:a9:23:0c:12:69:72:6f:5a:f1:b9:18:82:04:a2:8f:37:69:
         07:b9:7a:03:b5:a1:8d:80:2e:99:e0:df:8d:2b:c5:4b:fa:b9:
         18:b0:bb:73:56:16:b4:f5:d5:2b:12:84:80:76:6d:b7:40:44:
         78:bd:2b:cc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUL4a6Y31Z0EKw4MeegP138HvzjcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUz
MkI4RTk0MzAeFw0yNTEyMjUwMzU1MDBaFw0yNjEyMjQwNDAwMDBaMDMxMTAvBgNV
BAMTKDU5RDNENEM0RDM1MTkxOTBCOTVCODcwMzQ2OTgwNzJFRjIxNzg0MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhZzCm5t9DQUwcwz6Izmm2hfx
owd70O0XROrF5vPTvhqVfWVzDz2mHDa0eX9lNrxf2hy80bW6TbJcCgdROD9RrLCm
5giLF6FaRxcbFxXkGiuRtgrgc8ii5OMtA1JJoZloxNR3HYytePY7Jkjep5xxJrit
c//x6Cxn8rtvJYkTVdljxIic3E/X/5eSKQUvnAbe50qptrzdUD18Cr++M7qH790w
TFVAPuJoDIhqBbKnLYgfEF7RMI53wUtYb6Fvm1dW+7O5AC/PLH2cKaWh+oyGK2LS
Dus8yzc6Fi72+qbqk6Gw1jA4cqHMVK1wsej/kHpwXESVPeEsAYw9TBxHx3MtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWdPUxNNRkZC5W4cDRpgHLvIXhCswHwYDVR0j
BBgwFoAU4p6DwsWJf6T2zv48N+4aZTK46UMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
OTdjZjlhMC1lOTI3LTQ4MTQtODQ0Ny04YjNhMDAyNzYwYTgvMC9FMjlFODNDMkM1
ODk3RkE0RjZDRUZFM0MzN0VFMUE2NTMyQjhFOTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTI5RTgzQzJDNTg5N0ZBNEY2Q0VGRTNDMzdFRTFBNjUzMkI4
RTk0My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5N2NmOWEwLWU5MjctNDgxNC04
NDQ3LThiM2EwMDI3NjBhOC8wLzMxMzAzMzJlMzEzMDM1MmUzNTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2k4MA0GCSqG
SIb3DQEBCwUAA4IBAQDJSnCVvP5bIiQ+wGrvQEmiCwT9cw/WNdvuMIfmiCUfoD5P
ou59nMSKe1uqmJDdL30XCe/knA3kIPcehDRZqdVBl/FIa8zAbPwLXLvYjbjpJyN3
K37DUC6rgda+fb6RUnMa2Yvo9Eii0CnjR280ieFk7ri7iHf64iFFS2d1FCxw0Npj
E70/4kCbOTtf/xLp+RS6t0HI7d43wx2ZCtz7FATWiPWa8y9LHHLeXbMrskorB903
eKNGlL0GN8uPCGsUojlbP9KMGWRwqSMMEmlyb1rxuRiCBKKPN2kHuXoDtaGNgC6Z
4N+NK8VL+rkYsLtzVha09dUrEoSAdm23QER4vSvM
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:22 2026 by rpki-client