This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa
File:                     3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (raw, json)
Hash identifier:          fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=
Subject key identifier:   0C:85:2C:BA:E5:71:FA:B1:07:35:DD:DE:42:DE:EC:74:0A:BC:41:3A
Certificate issuer:       /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Certificate serial:       59C57B79A279C613D20CCE2754B12EFC118450D6
Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa
Signing time:             Sun 07 Dec 2025 03:00:02 +0000
ROA not before:           Sun 07 Dec 2025 02:55:02 +0000
ROA not after:            Sun 06 Dec 2026 03:00:02 +0000
asID:                     149917
IP address blocks:        103.191.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl
                          rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:7b:79:a2:79:c6:13:d2:0c:ce:27:54:b1:2e:fc:11:84:50:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
        Validity
            Not Before: Dec  7 02:55:02 2025 GMT
            Not After : Dec  6 03:00:02 2026 GMT
        Subject: CN=0C852CBAE571FAB10735DDDE42DEEC740ABC413A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:38:b9:53:f2:42:52:27:d6:6b:9f:71:d7:
                    92:96:a1:cb:a7:5d:2c:95:ab:34:0b:f6:c5:23:64:
                    b6:49:37:99:8a:24:fe:09:32:37:23:65:42:ad:9d:
                    06:2b:a2:47:2c:30:6f:95:1a:25:0d:78:04:d0:f7:
                    8f:4b:53:22:19:96:09:f5:1d:82:3d:49:06:45:fa:
                    fd:07:eb:97:c6:d7:21:bd:88:9b:5f:71:fb:19:47:
                    13:a1:e1:31:d9:a2:ae:7d:99:92:a8:b6:9b:d6:15:
                    d4:9f:c5:6c:9c:7a:a6:ca:b4:14:9c:cd:b2:e9:51:
                    99:12:c4:d4:22:68:4f:f6:ad:3c:4b:6c:a1:a0:0d:
                    25:a4:e9:9b:0e:c3:a8:cd:f0:67:ed:f4:88:06:3e:
                    39:14:70:21:a1:62:0a:01:b7:17:98:c5:d7:c5:7d:
                    db:23:88:a7:1d:85:34:dd:01:4f:09:96:e5:52:f7:
                    c2:41:de:13:e6:61:81:77:b3:f1:37:32:00:07:c8:
                    18:69:7b:4d:15:21:71:b6:99:c9:89:f1:01:66:e8:
                    45:54:b6:98:bf:12:ae:96:71:7b:ea:9d:d8:a5:ab:
                    2d:b8:b7:40:6b:70:c7:dd:a8:3b:ed:13:5f:0d:47:
                    8f:bc:7b:9e:3f:b0:ea:64:b0:47:a8:cc:11:b6:1d:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:2C:BA:E5:71:FA:B1:07:35:DD:DE:42:DE:EC:74:0A:BC:41:3A
            X509v3 Authority Key Identifier:
                keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:11:59:54:87:58:22:32:ce:e4:02:4d:c8:e8:ef:70:6f:
         b7:79:fb:9e:13:7a:94:55:8b:5d:90:fe:52:f0:6a:47:c3:d6:
         7f:2f:67:54:00:19:43:ef:0a:1c:bf:c0:f9:d5:6e:3d:37:a6:
         13:ed:74:ee:15:64:42:08:c7:ca:eb:4f:aa:12:07:99:cb:8a:
         9d:c4:0e:04:e3:b7:6c:1a:5f:d4:d6:ca:5b:8f:86:c8:90:ce:
         4f:90:ab:d0:43:e4:e0:71:ee:f4:5b:ed:aa:c1:d0:dd:4d:dc:
         85:d3:98:34:4a:eb:14:8e:60:e6:be:a3:cd:60:22:95:94:aa:
         bc:a2:c9:c0:64:e2:e4:0a:f1:90:af:aa:1a:22:48:bc:b4:c2:
         de:13:60:85:da:25:63:e9:52:44:93:62:bc:41:57:a4:8b:2e:
         38:9e:a2:00:f0:09:48:9d:c3:9b:7f:6f:24:7a:53:5a:91:63:
         af:59:d8:dd:b8:cd:77:51:70:b3:2a:95:b1:8f:bb:40:11:d5:
         29:5c:67:b6:07:6a:c2:54:62:00:97:65:87:25:fa:e7:30:c5:
         49:3d:f2:30:f8:27:01:e7:b8:39:a6:c6:48:bc:67:e1:08:3f:
         ca:f1:9e:f6:61:67:4b:f0:d1:b6:43:06:7b:ff:f5:99:c2:f0:
         14:52:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:46:37 2025 by rpki-client