This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
File:                     3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (raw, json)
Hash identifier:          MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=
Subject key identifier:   86:DF:37:D3:1A:AE:FE:4D:4C:34:C8:52:DB:F2:2D:32:A3:35:40:34
Certificate issuer:       /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
Certificate serial:       0B92793AE76066BEE3E87C2EB8B93E88B05A5FC6
Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa
Signing time:             Sun 07 Dec 2025 03:00:02 +0000
ROA not before:           Sun 07 Dec 2025 02:55:02 +0000
ROA not after:            Sun 06 Dec 2026 03:00:02 +0000
asID:                     149917
IP address blocks:        103.191.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl
                          rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:92:79:3a:e7:60:66:be:e3:e8:7c:2e:b8:b9:3e:88:b0:5a:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF
        Validity
            Not Before: Dec  7 02:55:02 2025 GMT
            Not After : Dec  6 03:00:02 2026 GMT
        Subject: CN=86DF37D31AAEFE4D4C34C852DBF22D32A3354034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:5f:5b:2a:20:6a:24:64:40:e7:15:37:75:
                    c4:ba:c0:e5:d6:cc:87:fa:1e:52:28:dc:2e:40:31:
                    28:8a:e2:ea:93:85:36:77:ec:93:12:3f:07:a2:52:
                    75:d1:15:c3:9e:3f:11:59:85:df:21:df:c6:7d:2e:
                    d5:47:74:4b:c3:74:2b:9a:20:fd:e6:71:dc:6e:cc:
                    7e:66:b4:ae:dd:da:1e:1f:26:7a:a3:94:11:37:f9:
                    10:60:13:bd:3c:9d:d1:82:19:b1:76:de:32:07:44:
                    fe:dc:f2:fc:72:c8:f9:50:a3:b8:ec:be:c7:ec:49:
                    84:6f:af:e1:a9:10:f4:5f:e0:17:df:86:c2:4a:4d:
                    7a:c9:a9:e1:64:5f:81:94:60:15:11:68:fe:93:1b:
                    ec:ed:da:82:11:c4:b6:70:7f:24:89:06:6b:04:fc:
                    70:41:d2:d5:fe:6d:02:7e:5f:51:27:0c:f8:ce:6b:
                    b8:da:64:3a:93:0b:54:1f:bb:62:14:3a:6f:e6:05:
                    2b:cc:a4:cd:e8:1e:a8:9c:6e:b6:ea:e7:73:2f:14:
                    60:1e:0c:a6:be:70:d4:ab:6e:0f:df:f5:6f:66:3f:
                    41:8f:c7:86:f0:26:f1:2c:73:3d:9e:fa:dd:4e:1e:
                    e5:34:7c:90:7c:9e:11:0f:9d:b5:01:93:e7:f0:11:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:37:D3:1A:AE:FE:4D:4C:34:C8:52:DB:F2:2D:32:A3:35:40:34
            X509v3 Authority Key Identifier:
                keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:82:dd:0d:b2:9f:0d:ee:b2:58:1a:63:4f:90:c6:bc:75:fc:
         f2:89:88:94:a9:39:5a:fb:4a:1a:5c:e7:0a:c7:3f:16:c5:ae:
         fe:ed:48:c3:9a:62:70:83:37:11:3e:e1:f5:4d:bc:cf:68:f6:
         7c:7c:fd:1b:f5:19:23:58:d7:25:2d:71:bc:e8:04:e0:5a:36:
         e0:c6:63:61:22:c1:8e:cf:30:f3:8e:94:42:33:ce:76:53:b8:
         0c:7b:80:2e:c1:34:4c:15:3e:b0:7a:e6:19:e3:7a:ed:1f:10:
         cf:b4:13:06:8a:bb:03:55:dd:a0:21:2a:60:b3:bd:9e:8b:34:
         7e:15:49:8a:91:9c:43:11:59:7f:8e:9a:dc:04:4c:eb:76:02:
         18:bd:83:38:45:6e:4f:98:7c:a8:f3:e9:3f:58:92:d0:ea:f3:
         79:a3:1c:88:54:20:5e:96:f7:55:8f:88:eb:95:08:5d:69:49:
         c0:18:c1:47:ff:fd:b3:2f:9b:2e:f2:4f:f9:24:2b:ef:4f:f2:
         fa:94:66:86:16:b3:75:d5:42:86:9f:43:0a:2b:55:49:35:47:
         84:f1:e5:a0:d1:9b:e9:a9:7c:02:5b:26:67:b6:61:ab:03:f6:
         06:81:c9:82:6a:73:74:0f:85:87:a0:6d:fd:3e:76:40:25:b0:
         3c:78:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:46:42 2025 by rpki-client