This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa
File:                     3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=
Subject key identifier:   96:13:73:6E:3C:FC:13:29:9B:24:A4:12:E8:1E:0B:8C:07:E0:D0:AC
Certificate issuer:       /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Certificate serial:       6073F88F9CD6FD4D6C4EE3F0B7E755BF0A60BA19
Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa
Signing time:             Thu 13 Nov 2025 05:00:02 +0000
ROA not before:           Thu 13 Nov 2025 04:55:02 +0000
ROA not after:            Thu 12 Nov 2026 05:00:02 +0000
asID:                     140443
IP address blocks:        103.79.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
                          rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 11:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:73:f8:8f:9c:d6:fd:4d:6c:4e:e3:f0:b7:e7:55:bf:0a:60:ba:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
        Validity
            Not Before: Nov 13 04:55:02 2025 GMT
            Not After : Nov 12 05:00:02 2026 GMT
        Subject: CN=9613736E3CFC13299B24A412E81E0B8C07E0D0AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:b2:e6:f7:74:18:f3:d9:42:92:44:06:23:
                    4a:82:85:c4:fb:94:46:b9:f9:74:c8:70:a8:fb:fa:
                    56:67:ce:ed:dc:03:eb:19:f0:0a:d9:87:50:35:02:
                    5b:29:3e:85:52:04:57:c3:e8:ff:59:9e:50:92:fd:
                    21:23:85:c2:b3:dd:09:8a:80:01:da:8f:29:10:2d:
                    56:77:69:e2:6a:56:c2:51:19:9c:32:62:02:29:b6:
                    f5:19:a2:e7:2c:4e:ad:68:3a:40:11:ac:4b:22:72:
                    24:1a:7e:34:c3:fd:da:94:8a:cb:8f:4e:9a:ba:19:
                    26:f4:09:50:51:4e:ee:d2:04:4d:14:ce:80:7b:ee:
                    c5:ad:24:bb:67:09:63:90:84:fe:69:14:b1:7f:96:
                    93:b0:83:f2:42:0a:0f:31:76:43:52:f0:78:e5:ea:
                    32:1a:3a:4b:6b:ce:98:53:35:29:ae:8c:c1:04:3e:
                    0d:be:6a:24:c3:a6:2e:b1:fd:97:48:1f:4e:ec:49:
                    ed:c0:bc:a5:86:00:80:0c:46:b2:1c:6e:59:6f:26:
                    87:16:8d:61:74:8e:44:31:40:7d:00:fc:4d:52:22:
                    66:1b:c8:ac:d2:c8:e7:fa:5c:fd:44:56:0c:e8:aa:
                    df:05:f2:f9:0b:45:8a:48:97:4d:8b:86:f1:73:7a:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:13:73:6E:3C:FC:13:29:9B:24:A4:12:E8:1E:0B:8C:07:E0:D0:AC
            X509v3 Authority Key Identifier:
                keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:88:77:29:ba:f4:fb:ea:64:56:ee:c8:8a:82:91:19:5f:22:
         d0:b2:bf:06:7e:d6:f7:b6:e0:76:2c:9a:82:73:60:1b:af:e7:
         2d:a7:1d:3d:36:7c:e8:13:a5:dd:82:51:c1:6d:da:54:21:eb:
         79:c0:77:4a:94:17:95:e5:5b:cf:a4:47:6a:41:27:93:77:c0:
         dd:36:7c:20:fc:83:bc:4c:a9:64:e3:11:ba:2e:bf:17:8c:b9:
         57:96:44:8a:2e:3e:51:a1:90:b4:0c:6e:47:d9:77:ca:5e:c7:
         8e:31:43:00:0a:73:d3:42:f1:a1:b0:b2:c4:3a:a0:93:1e:42:
         3a:e7:10:94:34:e9:0c:eb:79:d4:21:69:24:43:92:5b:c0:0d:
         65:fb:66:9c:0f:a9:84:be:64:c9:b5:55:18:a0:37:0a:c6:64:
         1f:3b:24:75:03:ed:5b:3c:82:97:8c:94:bf:67:45:8a:11:68:
         68:bd:48:12:f5:5c:ab:8a:13:87:0d:a0:87:bf:36:0f:e2:97:
         4c:28:45:d1:cd:84:55:3e:a3:17:37:13:37:de:c8:52:25:4a:
         ce:9c:6a:d2:00:6b:55:d7:2f:d5:2d:e0:b9:6d:6b:8f:16:05:
         a1:71:3e:2c:ca:86:a3:45:2c:11:b5:04:56:2c:a0:c0:9c:d0:
         44:a1:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:44:25 2025 by rpki-client