This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa
File:                     3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa (raw, json)
Hash identifier:          CSEyFnNOQdFjnYqiU1M0FD+ncVnXGi/YiRfm0U9hHlg=
Subject key identifier:   D8:87:0F:F1:2C:6F:13:FC:D0:4B:12:99:C1:51:2F:A3:BC:6B:FD:8D
Certificate issuer:       /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
Certificate serial:       496363FBE6CE5A9332DE744A39C50F71E19F3A85
Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa
Signing time:             Thu 18 Dec 2025 22:43:58 +0000
ROA not before:           Thu 18 Dec 2025 22:38:58 +0000
ROA not after:            Thu 17 Dec 2026 22:43:58 +0000
asID:                     150958
IP address blocks:        103.81.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl
                          rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:63:63:fb:e6:ce:5a:93:32:de:74:4a:39:c5:0f:71:e1:9f:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623
        Validity
            Not Before: Dec 18 22:38:58 2025 GMT
            Not After : Dec 17 22:43:58 2026 GMT
        Subject: CN=D8870FF12C6F13FCD04B1299C1512FA3BC6BFD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:fa:3b:ef:92:27:a0:9c:7a:84:48:24:62:
                    0e:ce:1b:53:49:42:64:c8:62:19:77:a6:00:89:d3:
                    c1:c6:6f:12:40:f7:d4:a9:ca:ff:9a:81:3e:39:de:
                    de:4d:da:b4:0b:b4:c0:b4:b0:4f:78:cd:dd:ce:38:
                    1b:e3:5d:35:fa:c3:2f:b5:23:ff:bb:31:9f:8b:ae:
                    27:32:9d:df:89:fc:a5:97:b9:9b:b9:b8:b9:e1:68:
                    18:5a:36:15:78:83:e0:c4:98:81:6f:6b:d7:47:cc:
                    70:b6:20:d4:e1:bf:39:e3:76:3a:a8:37:3d:86:9f:
                    8a:23:33:eb:08:43:dc:61:76:19:65:c9:a3:06:9f:
                    c1:9e:12:6b:97:3b:24:dc:48:ac:eb:92:81:b1:11:
                    a2:3f:8b:02:19:9d:28:a6:1d:9e:35:88:ef:fe:70:
                    c0:72:ea:9a:fd:59:0d:25:4f:f8:16:b9:df:56:45:
                    d3:38:3a:67:e0:e3:ce:7f:11:0c:65:b5:46:ed:e0:
                    20:28:f1:fc:cc:8c:4e:ef:ab:18:a9:18:bf:25:29:
                    a0:99:70:0b:9c:f8:c3:d0:8f:8e:d6:38:19:a1:a3:
                    8f:b6:d0:63:a7:3a:36:79:9c:9a:c1:df:8e:e7:61:
                    65:70:33:b7:7f:a1:b4:12:bf:20:38:9b:3d:2a:ad:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:87:0F:F1:2C:6F:13:FC:D0:4B:12:99:C1:51:2F:A3:BC:6B:FD:8D
            X509v3 Authority Key Identifier:
                keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/3130332e38312e3131312e302f32342d3234203d3e20313530393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:89:1a:fd:83:08:25:d7:4f:33:bd:14:27:7b:5e:bf:5b:d4:
         58:ba:57:32:bd:94:9a:56:b8:20:d1:df:9c:fa:16:99:0d:85:
         05:d5:d0:62:6e:93:f7:87:14:73:e0:6a:84:b9:30:87:16:58:
         3d:d0:34:94:75:e9:35:08:62:fc:7a:fe:76:e5:8d:1a:73:73:
         53:6a:42:83:f2:7f:87:0a:59:4f:aa:c0:6e:93:f0:12:99:e8:
         2a:34:4e:43:56:39:16:3c:3e:fd:cf:d1:ac:43:3b:77:c7:bf:
         d0:02:84:5c:b4:ac:2d:de:f6:9b:1a:56:88:76:26:73:f4:a3:
         c0:d5:ca:c1:40:ee:ad:ee:cb:33:a7:50:10:38:f8:84:ed:bf:
         28:93:5c:07:42:20:c6:7a:b9:26:9a:bb:b8:b3:98:6a:4a:13:
         dd:93:f6:02:2f:5b:9d:31:e1:49:02:2b:fd:3d:19:59:07:3e:
         d5:7d:7a:83:05:aa:59:33:13:c2:93:b2:49:f8:be:51:bd:98:
         54:d5:aa:46:c5:77:5c:f0:a8:38:00:94:c9:23:9c:f5:63:fb:
         e7:5e:79:b6:24:ec:f9:10:e1:f6:30:e6:34:0f:a5:1f:14:52:
         b5:75:d1:9f:44:c5:a6:fb:d4:7a:b7:38:37:02:95:e8:3a:6d:
         08:38:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:19 2025 by rpki-client