This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e32312e302f32342d3234203d3e203538333936.roa
File:                     3130332e31312e32312e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          aipV7gSPPQMPuhlrSaPNdI8S0WHBDF5eYCWn7YcDp/A=
Subject key identifier:   ED:2B:27:F2:1E:68:7C:EF:1B:2E:AA:D8:7E:5B:34:49:59:34:DC:1A
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       0723AEB9402E38A724833AD1CDE573464AC7A78D
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e32312e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 05 Nov 2025 10:03:04 +0000
ROA not before:           Wed 05 Nov 2025 09:58:04 +0000
ROA not after:            Wed 04 Nov 2026 10:03:04 +0000
asID:                     58396
IP address blocks:        103.11.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:23:ae:b9:40:2e:38:a7:24:83:3a:d1:cd:e5:73:46:4a:c7:a7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Nov  5 09:58:04 2025 GMT
            Not After : Nov  4 10:03:04 2026 GMT
        Subject: CN=ED2B27F21E687CEF1B2EAAD87E5B34495934DC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:43:51:7f:78:56:81:af:32:06:44:18:e4:
                    11:83:eb:25:17:cf:e2:c1:bb:d1:da:4c:a8:40:ca:
                    53:fd:38:cd:1e:56:61:47:57:59:a4:23:f9:f1:67:
                    b4:db:51:06:30:c7:88:77:2e:13:a3:a5:06:87:99:
                    b9:38:89:92:f0:a5:b0:4a:9f:9f:73:4b:f8:c0:49:
                    4b:c8:62:20:41:4c:15:5f:fa:a6:e5:63:81:84:94:
                    11:e4:f6:dc:36:0d:86:31:8c:de:02:9c:a7:0d:1f:
                    2d:c4:41:26:29:a8:6b:b6:66:0a:5f:00:b4:a9:3b:
                    31:7e:26:74:be:9b:d0:1a:dd:5f:8e:c7:82:42:5b:
                    13:bc:c8:22:0f:c6:59:bc:1e:66:5f:3f:be:d3:92:
                    76:31:06:49:bb:74:a0:c1:9d:e2:d0:3e:13:d8:5f:
                    33:64:80:4e:ba:1d:cd:4e:c8:c1:6c:93:28:f3:20:
                    43:96:9c:cc:9d:7a:e2:16:05:77:6f:4a:9f:57:a5:
                    00:b5:83:26:67:9c:2a:33:fe:9a:6f:3c:76:6f:22:
                    d8:23:ad:bd:79:da:8c:ee:76:52:86:2d:a5:90:d8:
                    5e:0c:c8:57:af:ff:23:5a:2b:91:6a:58:6e:df:bd:
                    5e:73:ec:db:a9:96:da:e1:30:7a:1e:58:68:96:a5:
                    5c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:27:F2:1E:68:7C:EF:1B:2E:AA:D8:7E:5B:34:49:59:34:DC:1A
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e32312e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:9f:fb:a8:70:bc:0d:f6:70:f4:de:ce:88:90:9d:0b:d6:
         4b:cd:3f:09:26:9c:ff:ea:00:64:99:bf:42:cc:be:7d:3b:05:
         cc:f8:51:df:35:59:d6:33:db:f9:bf:13:34:b1:2b:e3:10:36:
         b3:1e:9c:bb:70:43:55:5a:be:95:5f:ad:c2:2e:87:87:48:6a:
         a7:b3:e3:74:e7:0e:49:ab:39:d6:fc:0a:3f:b1:28:52:74:d9:
         54:24:21:94:8d:ce:6a:14:81:3d:43:0d:06:4b:20:1c:71:43:
         d8:fc:e2:19:6f:e9:59:1d:06:63:53:f6:f3:4a:4d:39:86:93:
         d2:0b:26:fa:63:d4:19:2c:e4:1b:3a:2e:25:ca:be:7f:09:dc:
         a9:73:64:5e:02:03:3e:87:c0:01:19:d4:5c:62:14:34:a8:df:
         5e:aa:9d:a0:4b:82:f5:63:fc:47:6c:da:6a:5e:82:ca:8f:25:
         80:7a:d3:d5:da:48:7a:8a:91:8c:f2:6b:93:dd:ee:8d:ca:e9:
         29:6c:1a:c7:bc:89:60:a6:3b:38:c5:c7:16:40:46:74:a8:3a:
         1d:fa:f2:60:e1:84:de:70:49:77:eb:65:cc:9b:da:23:2e:cd:
         0d:56:a8:9c:ce:fa:66:56:3e:4d:b0:cd:4e:25:23:10:6a:af:
         b1:e6:0f:88
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUByOuuUAuOKckgzrRzeVzRkrHp40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1
N0NFQUQ4QzAeFw0yNTExMDUwOTU4MDRaFw0yNjExMDQxMDAzMDRaMDMxMTAvBgNV
BAMTKEVEMkIyN0YyMUU2ODdDRUYxQjJFQUFEODdFNUIzNDQ5NTkzNERDMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbkNRf3hWga8yBkQY5BGD6yUX
z+LBu9HaTKhAylP9OM0eVmFHV1mkI/nxZ7TbUQYwx4h3LhOjpQaHmbk4iZLwpbBK
n59zS/jASUvIYiBBTBVf+qblY4GElBHk9tw2DYYxjN4CnKcNHy3EQSYpqGu2Zgpf
ALSpOzF+JnS+m9Aa3V+Ox4JCWxO8yCIPxlm8HmZfP77TknYxBkm7dKDBneLQPhPY
XzNkgE66Hc1OyMFskyjzIEOWnMydeuIWBXdvSp9XpQC1gyZnnCoz/ppvPHZvItgj
rb152ozudlKGLaWQ2F4MyFev/yNaK5FqWG7fvV5z7NupltrhMHoeWGiWpVxPAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7Ssn8h5ofO8bLqrYfls0SVk03BowHwYDVR0j
BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF
QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF
QUQ4Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i
ODllLTA0MWJmOTExMGFmOC8wLzMxMzAzMzJlMzEzMTJlMzIzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCxUwDQYJKoZIhvcN
AQELBQADggEBAH6gn/uocLwN9nD03s6IkJ0L1kvNPwkmnP/qAGSZv0LMvn07Bcz4
Ud81WdYz2/m/EzSxK+MQNrMenLtwQ1VavpVfrcIuh4dIaqez43TnDkmrOdb8Cj+x
KFJ02VQkIZSNzmoUgT1DDQZLIBxxQ9j84hlv6VkdBmNT9vNKTTmGk9ILJvpj1Bks
5Bs6LiXKvn8J3KlzZF4CAz6HwAEZ1FxiFDSo316qnaBLgvVj/Eds2mpegsqPJYB6
09XaSHqKkYzya5Pd7o3K6SlsGse8iWCmOzjFxxZARnSoOh368mDhhN5wSXfrZcyb
2iMuzQ1WqJzO+mZWPk2wzU4lIxBqr7HmD4g=
-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:10 2025 by rpki-client