This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
File:                     3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=
Subject key identifier:   10:9A:E4:D2:95:4C:52:11:CA:1A:1F:B8:13:6B:9B:5D:31:82:8F:2F
Certificate issuer:       /CN=10B7822CA22013D1B3095AB974949FD98A76025C
Certificate serial:       26B4186812D8ED2B6933896D65B544121B959719
Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa
Signing time:             Wed 03 Dec 2025 08:00:01 +0000
ROA not before:           Wed 03 Dec 2025 07:55:01 +0000
ROA not after:            Wed 02 Dec 2026 08:00:01 +0000
asID:                     139456
IP address blocks:        103.145.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl
                          rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 22:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b4:18:68:12:d8:ed:2b:69:33:89:6d:65:b5:44:12:1b:95:97:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C
        Validity
            Not Before: Dec  3 07:55:01 2025 GMT
            Not After : Dec  2 08:00:01 2026 GMT
        Subject: CN=109AE4D2954C5211CA1A1FB8136B9B5D31828F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:56:12:6d:f3:e6:1c:04:5c:c9:e4:0b:1f:
                    71:2c:e4:4b:9f:b0:4f:dd:ed:12:52:ab:79:b5:e3:
                    b0:55:f4:ef:15:0f:64:71:79:36:1b:84:f5:49:b3:
                    a8:ea:af:bd:d6:af:9c:f5:24:b3:a9:70:f5:6b:13:
                    d0:54:91:0b:f8:2e:56:1b:4f:a8:ce:83:8c:c8:70:
                    de:34:54:4d:d7:30:fd:eb:a0:4d:05:60:68:67:8a:
                    7f:c9:5e:b2:78:61:42:f9:de:d2:f3:be:d4:57:95:
                    60:98:f5:25:0f:53:98:69:2e:dd:43:eb:42:c2:04:
                    c7:98:6e:af:cc:7e:f1:46:ef:57:f7:c7:a1:42:4d:
                    a4:a7:95:6b:16:78:6a:93:69:f7:12:7c:55:14:68:
                    3b:ea:24:e2:d5:65:6c:cc:0b:ee:27:50:8c:a8:9b:
                    cf:20:67:88:9d:7c:c2:5f:6d:4e:53:ae:5e:6e:c3:
                    6b:d0:72:39:f7:64:1b:49:a8:44:9d:c7:a4:bb:8a:
                    92:50:e4:24:fc:c5:41:d1:6e:43:cb:f0:24:d4:b7:
                    f7:fc:c0:4e:64:ba:85:b6:b9:25:bb:d1:5c:52:87:
                    cf:9e:a0:f7:a1:28:15:ba:d6:5d:58:d9:7e:7c:73:
                    fb:cd:df:72:85:fd:50:e7:47:e0:94:62:8c:32:2f:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9A:E4:D2:95:4C:52:11:CA:1A:1F:B8:13:6B:9B:5D:31:82:8F:2F
            X509v3 Authority Key Identifier:
                keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:36:4c:f5:1b:9e:78:13:fc:81:9b:84:c8:d9:35:0b:8c:
         bc:c7:a5:84:42:d8:c8:e0:ef:73:fe:2a:08:cb:9e:6f:a0:c7:
         b7:52:12:3d:54:81:10:e7:e6:93:33:af:d6:15:16:6b:d5:a5:
         ee:e4:51:cb:66:14:89:a3:49:1f:61:2e:8a:1a:57:dc:7c:9c:
         31:cc:60:9c:d7:72:bb:02:f0:69:da:b0:e0:95:a8:29:94:23:
         36:27:76:09:27:34:df:ca:df:00:d4:ff:f5:16:f9:80:c3:eb:
         44:db:63:99:47:c5:4a:8b:94:34:cf:50:82:03:e2:84:1f:ed:
         78:67:d5:0c:32:60:1b:38:f1:84:9a:30:d6:18:75:0b:fb:52:
         76:5c:95:f6:b5:64:b6:8c:3d:40:49:45:63:b7:45:9e:90:ad:
         38:ba:5b:df:97:44:84:e9:ff:89:d1:a1:cf:ec:82:eb:b9:75:
         48:33:b8:cb:2a:6d:e2:99:ee:5c:57:17:a3:f8:6c:0a:42:d2:
         40:34:87:b9:81:40:56:f9:cd:64:36:b4:2b:75:7d:4d:cc:e1:
         13:5f:db:49:df:24:e4:5c:12:4e:d1:35:1d:dd:25:3d:af:0f:
         f9:9f:d3:ef:52:7a:d2:e3:15:61:33:ee:75:e1:f7:63:a2:d9:
         7d:9e:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:59:33 2025 by rpki-client