This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa
File:                     3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa (raw, json)
Hash identifier:          nFi+ipcei3slR6xJ5GlGKgJXGqfTYRFEoIAi6SGugKw=
Subject key identifier:   FB:7B:D0:C3:BB:45:B5:23:57:DA:62:4E:B1:8B:92:98:F1:6B:30:A0
Certificate issuer:       /CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
Certificate serial:       78E0BC9AFACF02540DB9380C9EC20768346D96E5
Authority key identifier: 51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa
Signing time:             Thu 11 Dec 2025 09:00:01 +0000
ROA not before:           Thu 11 Dec 2025 08:55:01 +0000
ROA not after:            Thu 10 Dec 2026 09:00:01 +0000
asID:                     138119
IP address blocks:        103.131.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl
                          rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:bc:9a:fa:cf:02:54:0d:b9:38:0c:9e:c2:07:68:34:6d:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
        Validity
            Not Before: Dec 11 08:55:01 2025 GMT
            Not After : Dec 10 09:00:01 2026 GMT
        Subject: CN=FB7BD0C3BB45B52357DA624EB18B9298F16B30A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:9c:91:28:46:52:58:da:37:6b:a2:78:37:
                    91:04:6b:09:3c:1c:6f:20:0e:20:da:38:40:80:2c:
                    44:55:e0:09:df:6e:21:1d:c2:1d:51:cd:b8:e4:b4:
                    92:28:ba:63:89:df:19:12:93:c1:0b:78:1d:b3:21:
                    40:46:39:b2:81:da:e0:e5:f6:0a:75:83:87:d2:3b:
                    7b:f4:f8:bf:64:80:06:b3:c1:d1:28:25:c2:9e:99:
                    86:8a:93:73:99:14:73:56:29:c8:08:b1:eb:4e:e9:
                    d8:c9:9a:72:29:ea:9d:af:05:9f:70:19:e6:96:29:
                    21:75:ba:2c:41:50:5f:39:1a:5d:24:90:af:cc:1a:
                    ec:58:21:2d:dd:15:6b:11:d3:7f:da:d6:60:8e:29:
                    34:24:e0:cb:38:24:11:d7:07:a4:36:6a:77:ba:88:
                    22:83:03:2c:15:ff:c4:4a:d6:7f:13:4d:8b:f4:a2:
                    e6:91:da:1d:9e:fa:52:02:92:6a:b4:fd:b7:ee:c5:
                    08:b5:52:2a:09:91:1b:ba:ec:2e:d1:dd:81:5c:a8:
                    6e:09:88:5f:78:14:00:7d:c6:87:25:78:44:2c:f9:
                    9a:ed:d9:5e:dc:bc:f5:74:2e:f9:97:ac:97:b0:86:
                    a2:4b:1f:db:2e:a3:48:1a:20:4c:a2:5e:75:10:fd:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:D0:C3:BB:45:B5:23:57:DA:62:4E:B1:8B:92:98:F1:6B:30:A0
            X509v3 Authority Key Identifier:
                keyid:51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:99:19:70:4e:04:1a:bd:b1:9b:cc:84:6c:b7:dd:74:e6:
         70:10:00:c3:18:ad:39:fa:96:5e:b3:cc:40:64:a4:ab:b2:cd:
         28:cb:15:d6:ae:21:a5:23:69:65:51:2f:ea:2b:4d:11:c1:c9:
         f1:29:af:91:96:62:19:3a:8c:55:a6:e1:a2:06:3b:da:01:1a:
         6d:9a:61:ca:2a:a8:80:7b:de:5f:cb:84:ad:e3:49:89:b4:30:
         58:0f:0f:1f:bd:3c:f9:6c:15:7d:dc:70:3f:f5:1d:e5:6f:88:
         0a:fb:20:92:ef:5b:81:0e:93:16:f6:07:0b:af:05:bd:19:85:
         36:39:67:a3:41:dd:4a:5e:0d:47:4f:5e:a5:45:62:f3:c4:e3:
         ec:cf:26:10:03:26:04:94:d2:c2:7f:67:0b:ed:5b:d7:37:a9:
         88:ac:fb:5e:18:52:a3:70:bb:06:6c:01:60:b7:38:5a:80:cb:
         e6:f7:55:c8:a8:f1:ac:e2:f6:3e:c5:68:9f:1c:21:35:a2:f9:
         ef:3b:73:07:03:53:74:32:93:e2:b0:79:5a:14:5f:ea:18:d2:
         bb:d0:e1:87:e8:eb:a7:ae:52:9f:09:3d:3c:a5:05:26:ad:ce:
         04:67:15:93:ed:af:04:19:8b:ab:49:80:64:90:4b:7a:38:cd:
         98:d8:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:54:36 2025 by rpki-client