This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa
File:                     3130332e32332e3134312e302f32342d3234203d3e203538343031.roa (raw, json)
Hash identifier:          WW7MnkMbYSzZSz/FHUQYTbHWS6X3Dh2EHT3kv3qAo0o=
Subject key identifier:   F3:24:60:38:2C:D1:B1:71:73:86:88:94:FD:E3:7E:B1:8F:F7:34:95
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       3754CE70759805FAEFA9135FA8066E764A39C3B6
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa
Signing time:             Wed 05 Nov 2025 10:03:04 +0000
ROA not before:           Wed 05 Nov 2025 09:58:04 +0000
ROA not after:            Wed 04 Nov 2026 10:03:04 +0000
asID:                     58401
IP address blocks:        103.23.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:54:ce:70:75:98:05:fa:ef:a9:13:5f:a8:06:6e:76:4a:39:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Nov  5 09:58:04 2025 GMT
            Not After : Nov  4 10:03:04 2026 GMT
        Subject: CN=F32460382CD1B17173868894FDE37EB18FF73495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:99:99:62:b3:b9:3f:4f:c8:67:9e:07:ac:4d:
                    6b:f2:2d:14:33:57:7c:85:1e:ca:02:56:57:e7:9d:
                    57:59:6e:31:22:f1:ac:97:e2:78:67:a2:2d:ed:d6:
                    02:48:c0:0a:72:db:f4:29:a3:25:06:da:1e:18:39:
                    6b:54:6c:f5:ed:e8:40:cb:0f:1a:96:dd:53:de:f5:
                    c0:03:79:76:dc:49:00:a8:61:05:60:a9:04:69:48:
                    f2:4e:80:23:fb:6d:cf:80:a7:31:be:bf:da:28:71:
                    71:fe:95:39:d8:6e:d1:be:e6:ab:f9:4d:80:f1:92:
                    75:e8:4b:17:bd:5c:cd:62:b6:7d:1a:ca:41:0d:d5:
                    0d:9d:b1:32:b4:bf:56:10:0b:17:38:74:a1:28:c5:
                    7f:a0:f3:35:35:27:08:20:f4:be:0a:0f:34:d2:9b:
                    8c:d1:89:ae:73:1f:a7:1e:f6:de:6c:2a:c9:b5:76:
                    49:b0:35:a4:7e:0c:a6:fe:dc:a1:86:6e:d0:09:44:
                    41:49:aa:62:ed:6d:7f:0f:9e:20:0f:08:55:1b:ae:
                    29:ef:f3:a1:47:b8:7c:1f:af:e5:d4:2b:2b:25:3b:
                    dd:85:4a:f0:80:47:ec:29:47:8c:60:c7:16:3a:74:
                    54:5e:d9:bc:ac:4b:6d:dc:c2:1a:88:95:35:ba:5e:
                    87:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:24:60:38:2C:D1:B1:71:73:86:88:94:FD:E3:7E:B1:8F:F7:34:95
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e32332e3134312e302f32342d3234203d3e203538343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:90:40:cd:dc:2d:b9:af:ed:b5:60:69:cc:a0:4a:f9:7d:
         ff:3c:88:94:cd:51:a8:e7:71:3a:a1:04:ab:4a:b9:99:d9:76:
         04:9c:33:c0:e3:44:d1:77:a8:db:93:4b:d1:f4:ef:05:17:a9:
         3e:8e:9a:20:91:a1:62:80:0d:4d:84:3e:d8:a2:5c:f3:88:96:
         c7:53:42:76:b6:1d:2b:dc:66:66:60:93:04:20:72:f6:f8:b6:
         25:13:7b:22:15:2a:3f:23:dd:8b:a4:62:9c:be:00:8c:21:09:
         cf:6b:7b:1c:0c:8e:30:13:bf:33:9f:d7:c0:9b:dd:70:e9:f4:
         26:3c:3e:61:7d:8d:9c:e9:28:6c:60:58:54:95:73:05:eb:5c:
         63:5c:57:08:fc:10:02:66:4a:26:2a:0c:27:52:aa:7b:5d:2b:
         5d:45:b9:68:28:ac:39:b5:28:d7:6c:c4:5c:a8:36:14:6c:b5:
         a2:82:fe:a5:95:ea:9b:3f:af:69:58:83:78:f7:42:f6:5a:38:
         62:86:06:7b:9b:14:f3:6d:fe:82:45:3f:83:9e:ab:a3:8a:0a:
         d7:e6:37:45:21:ce:92:7e:38:c3:09:43:38:83:3e:16:42:65:
         38:b5:cb:01:17:88:75:94:b0:0e:06:6a:44:55:68:b7:c4:57:
         1b:be:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:17:12 2025 by rpki-client