This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa
File:                     3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa (raw, json)
Hash identifier:          Uh57pAv0mqj4CTv0ZQWj32JWMO2O305QNzVfJz6XYFU=
Subject key identifier:   3C:90:DA:0C:39:ED:01:E7:2C:34:A4:8F:CE:79:19:13:DD:E3:17:97
Certificate issuer:       /CN=279F9ED4B08F2103C13392D95636C445577A6339
Certificate serial:       69DD1FE2AA6B1A0D6DB718C651E72725D8F24CF9
Authority key identifier: 27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa
Signing time:             Tue 09 Dec 2025 08:02:21 +0000
ROA not before:           Tue 09 Dec 2025 07:57:21 +0000
ROA not after:            Tue 08 Dec 2026 08:02:21 +0000
asID:                     150494
IP address blocks:        103.120.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.crl
                          rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 22:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:dd:1f:e2:aa:6b:1a:0d:6d:b7:18:c6:51:e7:27:25:d8:f2:4c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279F9ED4B08F2103C13392D95636C445577A6339
        Validity
            Not Before: Dec  9 07:57:21 2025 GMT
            Not After : Dec  8 08:02:21 2026 GMT
        Subject: CN=3C90DA0C39ED01E72C34A48FCE791913DDE31797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:85:4b:90:f9:3a:f8:a1:9b:a2:28:b5:e0:
                    98:3f:e7:8d:67:71:da:02:64:42:bf:e8:61:cf:e5:
                    6f:91:42:53:52:dd:63:8b:69:3e:23:ec:f6:0d:ff:
                    b6:a3:33:2a:7e:b5:ab:22:11:7e:10:36:dc:c0:ae:
                    07:eb:11:23:18:65:7e:60:34:92:5f:1d:79:41:0f:
                    2f:bc:a8:eb:46:d2:db:60:b4:08:53:f8:33:c6:bb:
                    ab:f5:7e:06:be:bc:c2:3e:d7:17:2a:de:64:70:de:
                    7b:7d:2a:7c:0f:ef:67:e3:6e:9f:87:be:36:9e:80:
                    29:c2:1c:3f:eb:df:b2:e8:15:16:c3:89:7f:e1:ed:
                    40:03:52:4a:5b:44:1d:ea:6c:bd:2d:93:72:fb:75:
                    b1:28:4a:d4:73:9a:82:d4:a8:21:ec:1b:88:64:1d:
                    bf:77:0c:c4:38:c5:ef:83:6f:6a:0d:5b:1b:0a:8c:
                    f8:5d:c4:6b:e4:d6:c7:c5:58:22:40:b0:42:4e:c6:
                    02:bd:f4:3a:dd:f7:69:b9:29:17:df:01:80:a9:a8:
                    e0:f6:b8:d5:23:1f:ad:f7:9c:13:53:2f:e9:2f:be:
                    ca:5b:99:2a:db:21:38:49:6f:0e:26:93:71:58:6e:
                    dc:11:f6:ee:7c:4c:b8:47:36:42:a7:05:b5:0e:50:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:90:DA:0C:39:ED:01:E7:2C:34:A4:8F:CE:79:19:13:DD:E3:17:97
            X509v3 Authority Key Identifier:
                keyid:27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/3130332e3132302e34302e302f32342d3234203d3e20313530343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:75:e2:95:5b:ed:cb:bc:0f:f7:be:f8:ac:2f:4f:25:9e:9a:
         2d:ab:9c:d8:35:b2:08:19:5d:0f:5b:26:b4:37:4e:08:72:b8:
         2e:1b:39:0d:dd:07:27:82:07:6b:79:ad:34:df:74:5d:17:8d:
         ee:b6:69:16:85:1e:3e:f2:58:b0:fe:ad:30:91:de:62:88:a9:
         12:03:4f:02:79:26:6f:0f:02:10:34:d4:9f:cc:e5:15:47:50:
         03:ae:3c:25:67:86:ac:c7:6e:ca:4f:ed:63:27:61:d3:6c:5e:
         c6:d6:7b:65:da:a9:3e:2e:27:b5:c7:5f:cc:c1:3f:0e:53:c0:
         77:46:f5:67:c7:b7:62:8e:15:3b:d7:b8:cb:1e:fb:b4:58:2a:
         91:5c:4b:9e:52:7c:33:20:14:4e:af:89:8d:53:59:1b:43:7b:
         e7:0b:9f:dc:b8:7f:cf:5b:07:9e:e7:84:b0:fb:95:98:0f:db:
         32:88:10:3c:36:2b:c7:6f:b5:7b:02:99:33:60:14:04:5b:1a:
         af:74:07:a8:8d:f8:39:49:6b:54:46:9f:78:d9:66:18:ac:8b:
         48:58:e2:c8:38:59:eb:d7:d6:86:87:ed:84:39:40:4a:3b:de:
         0e:22:2e:02:28:e9:06:01:5a:d9:6f:d2:46:eb:a2:00:de:41:
         ba:cb:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:08:19 2025 by rpki-client