This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa
File:                     3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (raw, json)
Hash identifier:          PLqhlcBUSNHLYLT+5XLCOOcIr4U8C0+hPMYYOouVTwE=
Subject key identifier:   9D:94:FF:E0:27:CD:48:04:2D:07:3F:45:D9:65:7D:E9:1B:18:6C:A7
Certificate issuer:       /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A
Certificate serial:       7C2335E69C447885C842EC50B945560B7BEB46F3
Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa
Signing time:             Sun 21 Dec 2025 04:02:35 +0000
ROA not before:           Sun 21 Dec 2025 03:57:35 +0000
ROA not after:            Sun 20 Dec 2026 04:02:35 +0000
asID:                     150550
IP address blocks:        103.85.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl
                          rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 14:58:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:23:35:e6:9c:44:78:85:c8:42:ec:50:b9:45:56:0b:7b:eb:46:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A
        Validity
            Not Before: Dec 21 03:57:35 2025 GMT
            Not After : Dec 20 04:02:35 2026 GMT
        Subject: CN=9D94FFE027CD48042D073F45D9657DE91B186CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:28:16:f7:aa:46:2e:34:a6:c1:32:3b:b6:
                    3f:b5:c4:0a:8f:cd:c7:2c:7a:c6:29:7e:c7:f9:58:
                    9c:56:af:ca:8a:92:f5:3c:ae:53:ff:05:8c:2b:e9:
                    1f:a3:ff:39:ba:b0:47:df:4d:8a:71:7a:55:a0:c1:
                    bc:49:a0:04:83:88:c7:3c:3c:12:40:12:b6:e3:77:
                    17:87:7e:ae:b4:89:0b:b1:68:f5:73:09:93:93:98:
                    67:dd:6e:aa:37:9e:a0:53:c5:72:9f:20:a5:84:ed:
                    89:28:dd:a1:f7:bb:f2:34:b2:67:56:f5:58:2b:3d:
                    13:fb:43:c4:99:e3:82:3c:e8:22:a6:61:9d:a5:0b:
                    60:37:d2:06:47:17:45:25:06:a5:db:ec:e2:d0:65:
                    37:76:03:89:16:09:a9:0a:d3:56:1e:b9:4f:b5:51:
                    b1:8e:17:b0:45:5d:c7:86:a8:c8:6e:ec:b5:1d:86:
                    9a:82:cd:fa:29:01:aa:87:4d:07:7a:11:b8:14:06:
                    60:34:cc:c0:92:5a:93:72:64:da:c4:5e:71:fa:d4:
                    a0:6c:a9:6f:a2:8c:c5:b3:28:54:03:33:26:cf:3e:
                    82:34:2b:84:d1:4b:24:95:88:ad:2a:bf:de:b9:c0:
                    0a:69:de:df:bf:56:dc:f1:88:51:ba:42:0e:55:02:
                    5e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:FF:E0:27:CD:48:04:2D:07:3F:45:D9:65:7D:E9:1B:18:6C:A7
            X509v3 Authority Key Identifier:
                keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:05:8a:c2:4a:5f:b9:b7:b3:18:24:3b:a2:f2:f7:bd:39:
         93:45:d5:0c:ca:2d:d2:15:99:21:0d:8b:15:0e:27:ad:58:aa:
         f3:57:30:60:7f:c0:5d:8f:1e:33:8f:40:91:ab:e7:8d:57:9e:
         a5:33:39:d3:65:c8:ab:d3:f2:34:b6:e7:b6:65:f4:79:69:d7:
         8a:9c:5c:e3:ff:83:e1:94:bb:a5:77:f3:07:7e:c2:00:c3:bf:
         c6:24:3e:a6:68:89:be:88:4c:1f:30:eb:41:d1:55:5c:b1:24:
         3d:72:d5:43:d9:f0:86:5b:d1:03:6a:b5:59:15:ac:6d:81:72:
         62:fd:b3:b7:1a:12:60:6f:6d:e9:c1:f0:85:a0:83:61:0e:85:
         93:c2:4b:84:c0:eb:0f:ec:53:65:b8:3e:b7:e6:5b:e0:b4:ba:
         a9:33:ca:17:b6:72:b8:50:b6:24:4f:97:1f:af:88:78:4a:f9:
         2f:c9:6a:cb:09:6d:19:fd:29:bf:3e:cd:b2:95:c0:81:02:62:
         b4:a7:fc:dd:0a:a8:8c:dd:98:fa:b9:d2:5b:8b:84:45:ab:9d:
         e9:e5:f9:b4:69:2f:1b:45:5d:c3:c5:50:e1:26:52:c5:13:9e:
         35:b3:f5:5a:fd:e8:82:4d:43:1d:d9:26:4b:21:34:5d:ed:45:
         b6:d3:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:27:47 2026 by rpki-client