This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa
File:                     3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=
Subject key identifier:   77:9C:07:81:7B:1F:90:91:F5:AE:42:A3:CE:0D:97:68:A9:BE:F9:1B
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       787FAC6BEF1B3E047CCA3B52FE51C8F5F650E3C8
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa
Signing time:             Tue 23 Dec 2025 05:00:00 +0000
ROA not before:           Tue 23 Dec 2025 04:55:00 +0000
ROA not after:            Tue 22 Dec 2026 05:00:00 +0000
asID:                     137316
IP address blocks:        103.105.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:ac:6b:ef:1b:3e:04:7c:ca:3b:52:fe:51:c8:f5:f6:50:e3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Dec 23 04:55:00 2025 GMT
            Not After : Dec 22 05:00:00 2026 GMT
        Subject: CN=779C07817B1F9091F5AE42A3CE0D9768A9BEF91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:80:3f:90:41:8e:3e:6a:4f:43:a1:44:3a:
                    8c:73:1d:17:cb:12:bb:a9:37:83:0c:8f:f6:f5:f5:
                    32:0f:7b:f3:15:ff:71:93:ff:ee:5c:fb:d8:ad:eb:
                    b6:06:1b:70:55:e9:aa:d9:99:c3:55:bf:2d:34:e1:
                    63:d5:bd:73:e4:eb:8e:01:b0:0d:32:0c:df:dc:ae:
                    99:35:96:94:b1:40:f7:0b:50:47:90:11:17:30:12:
                    e5:ea:ea:d5:f5:02:80:8d:84:1d:2a:12:23:33:55:
                    5c:7e:69:af:db:e6:84:b4:cf:8a:c9:c7:7b:fc:47:
                    38:fd:b4:9d:6d:ae:fa:6c:79:ed:dc:71:db:37:4a:
                    6a:72:1a:e2:fd:ed:6c:d1:90:df:f7:c2:44:cb:42:
                    8f:5b:17:0b:ec:f0:ae:f3:c7:17:55:52:11:b6:6e:
                    40:05:49:73:8f:63:ae:88:1d:25:47:1b:c3:1d:87:
                    3a:06:a2:b8:2b:81:56:7c:02:60:fc:aa:57:f7:37:
                    0d:31:b8:33:e7:df:85:8e:c1:e0:d1:0e:13:d0:05:
                    43:2f:41:ad:b4:76:18:8c:6d:38:0d:3d:c2:8f:57:
                    80:cf:72:03:c6:07:50:58:80:b4:c2:03:65:15:5e:
                    18:d6:7b:fa:b2:7d:0c:46:75:9a:12:03:e0:fe:44:
                    57:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:07:81:7B:1F:90:91:F5:AE:42:A3:CE:0D:97:68:A9:BE:F9:1B
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f4:fd:62:1c:a0:80:c9:68:e9:33:e1:b2:90:64:c3:e0:f5:
         6f:92:cc:a2:b8:74:a4:96:56:a4:42:55:33:2c:ba:0b:43:1f:
         6f:28:ee:92:b6:e0:e0:bc:d5:d4:52:f0:96:76:69:35:fb:c5:
         fd:8b:1c:61:d8:5c:b9:23:a1:71:4c:89:58:e7:08:29:08:51:
         e5:1c:5f:de:dc:b2:b0:35:de:39:77:0c:ac:13:b7:f8:ad:d3:
         20:d2:8a:83:7f:10:1d:73:c6:9b:4c:04:f8:bd:29:73:5a:ee:
         e4:9f:ba:e3:c8:2a:c4:96:4a:7c:f9:ad:60:e7:cb:77:96:37:
         f5:bb:71:eb:27:1e:b8:c2:f4:ce:57:9f:5c:1d:6d:24:78:03:
         68:cf:ed:25:7f:92:cc:f4:36:5b:07:87:61:f3:a4:c2:90:0b:
         55:a7:9e:99:a0:af:9b:f7:b1:4f:7b:68:3a:20:c6:dc:00:ab:
         7b:49:25:be:79:3e:d5:c2:73:10:30:1f:dd:39:6f:cf:87:e1:
         c0:f3:78:e1:6a:fc:02:af:71:b6:20:be:73:ae:ab:fe:e6:5b:
         ce:5a:dd:58:eb:19:6a:3e:6b:80:f5:79:f9:cf:60:5b:b9:bd:
         d6:b3:54:9a:e7:3b:16:c8:4f:7a:03:66:ef:94:fc:39:92:42:
         c6:d1:e7:e9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeH+sa+8bPgR8yjtS/lHI9fZQ48gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0
NzQyNDRCMTAeFw0yNTEyMjMwNDU1MDBaFw0yNjEyMjIwNTAwMDBaMDMxMTAvBgNV
BAMTKDc3OUMwNzgxN0IxRjkwOTFGNUFFNDJBM0NFMEQ5NzY4QTlCRUY5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmYA/kEGOPmpPQ6FEOoxzHRfL
ErupN4MMj/b19TIPe/MV/3GT/+5c+9it67YGG3BV6arZmcNVvy004WPVvXPk644B
sA0yDN/crpk1lpSxQPcLUEeQERcwEuXq6tX1AoCNhB0qEiMzVVx+aa/b5oS0z4rJ
x3v8Rzj9tJ1trvpsee3ccds3SmpyGuL97WzRkN/3wkTLQo9bFwvs8K7zxxdVUhG2
bkAFSXOPY66IHSVHG8MdhzoGorgrgVZ8AmD8qlf3Nw0xuDPn34WOweDRDhPQBUMv
Qa20dhiMbTgNPcKPV4DPcgPGB1BYgLTCA2UVXhjWe/qyfQxGdZoSA+D+RFdPAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUd5wHgXsfkJH1rkKjzg2XaKm++RswHwYDVR0j
BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG
RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy
NDRCMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MjRmYTlhLWU1ZjMtNDI2NS05
ZTFkLTg0ZTQ1MzU5NjFkMC8wLzMxMzAzMzJlMzEzMDM1MmUzMTM5MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnacEwDQYJ
KoZIhvcNAQELBQADggEBABr0/WIcoIDJaOkz4bKQZMPg9W+SzKK4dKSWVqRCVTMs
ugtDH28o7pK24OC81dRS8JZ2aTX7xf2LHGHYXLkjoXFMiVjnCCkIUeUcX97csrA1
3jl3DKwTt/it0yDSioN/EB1zxptMBPi9KXNa7uSfuuPIKsSWSnz5rWDny3eWN/W7
cesnHrjC9M5Xn1wdbSR4A2jP7SV/ksz0NlsHh2HzpMKQC1Wnnpmgr5v3sU97aDog
xtwAq3tJJb55PtXCcxAwH905b8+H4cDzeOFq/AKvcbYgvnOuq/7mW85a3VjrGWo+
a4D1efnPYFu5vdazVJrnOxbIT3oDZu+U/DmSQsbR5+k=
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:30 2026 by rpki-client