This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa
File:                     3130332e34302e39342e302f32342d3234203d3e203633353036.roa (raw, json)
Hash identifier:          WRQr/4s6i86uzriKB9RHRYKn5SQtBKQDw9UpfGvIHbw=
Subject key identifier:   F2:B0:C2:FC:72:BA:DB:CB:8D:F4:AE:F6:08:FC:47:6B:41:44:5F:8B
Certificate issuer:       /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial:       413A1EE18E6BC4F6BE9B1957DC59FAE6ED6C70C6
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa
Signing time:             Thu 18 Dec 2025 17:02:14 +0000
ROA not before:           Thu 18 Dec 2025 16:57:14 +0000
ROA not after:            Thu 17 Dec 2026 17:02:14 +0000
asID:                     63506
IP address blocks:        103.40.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
                          rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 03:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3a:1e:e1:8e:6b:c4:f6:be:9b:19:57:dc:59:fa:e6:ed:6c:70:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
        Validity
            Not Before: Dec 18 16:57:14 2025 GMT
            Not After : Dec 17 17:02:14 2026 GMT
        Subject: CN=F2B0C2FC72BADBCB8DF4AEF608FC476B41445F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:91:4f:82:20:a3:48:be:81:2b:32:06:33:
                    19:1a:04:40:3b:67:a5:1a:4a:fe:6b:8a:14:e0:89:
                    87:98:f9:40:dc:4a:0e:2d:b8:25:cc:19:d7:34:50:
                    aa:f8:f4:2b:2e:88:0f:87:d7:12:e2:6a:84:d2:9a:
                    23:17:ea:19:d2:b3:d7:4f:f3:f2:ce:0c:ee:68:8e:
                    ae:6a:1f:3f:85:93:42:07:00:4d:8a:15:31:a6:d5:
                    83:0a:e3:0f:7e:af:3b:37:5e:e7:77:78:2c:48:de:
                    8d:b7:fc:c1:87:97:a1:3f:56:77:95:bc:df:13:b3:
                    f0:89:92:27:66:bc:8c:82:88:09:68:70:1a:1f:95:
                    af:a9:35:e5:d7:d4:2a:8a:9b:6f:62:2f:f0:bb:1c:
                    be:a3:28:a4:82:7b:c3:5d:16:d1:50:e9:7a:98:eb:
                    b0:0e:ce:1e:88:20:7e:a6:7c:18:87:b2:f0:9d:49:
                    de:2d:ff:fe:26:81:04:5e:5f:62:7a:d6:f8:d6:e4:
                    16:d1:ef:6f:d5:ec:1e:4d:d4:20:4c:1c:f9:ef:77:
                    3e:d0:bd:26:24:21:9a:33:a4:f2:8a:5e:b6:c8:86:
                    8c:87:21:dd:e3:40:16:08:af:21:8c:d7:08:34:d5:
                    34:8f:fe:91:9b:0b:80:f1:ff:4c:af:48:5c:39:d2:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B0:C2:FC:72:BA:DB:CB:8D:F4:AE:F6:08:FC:47:6B:41:44:5F:8B
            X509v3 Authority Key Identifier:
                keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/3130332e34302e39342e302f32342d3234203d3e203633353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:76:26:a9:2b:10:93:ba:1e:ca:4d:9a:c3:59:c8:28:43:df:
         76:b3:48:0c:58:86:ec:ad:df:49:cc:17:68:98:c3:9b:e4:b5:
         10:09:45:0f:c2:af:9e:51:cc:2a:fd:ab:3b:9f:94:b0:2b:01:
         77:dc:7e:7f:ad:76:37:fc:3f:cc:e2:38:0c:53:00:08:70:1f:
         d7:cb:7f:cd:7d:52:8d:0b:bd:6c:22:a3:e5:ff:a2:72:69:af:
         f5:c2:c6:c7:74:cf:1d:45:99:ae:a3:5f:f9:6e:77:a1:85:7f:
         ca:93:0f:60:27:b8:5b:5b:52:89:27:1d:ea:cb:af:74:a5:1b:
         f0:4e:1d:a0:d7:46:71:f3:72:af:2d:01:d2:12:78:88:a2:2d:
         11:4e:09:69:4c:39:2a:d1:4d:a8:f4:a4:20:66:04:a3:67:6c:
         2f:01:f7:b5:e1:a1:e0:a0:11:44:cc:63:2e:2b:52:d9:17:76:
         84:4d:9b:29:42:f6:48:8a:71:f7:01:98:8e:8b:fd:23:f7:a5:
         7b:e9:c7:54:8d:16:cb:84:d3:34:d3:25:21:40:a8:d6:c1:6f:
         9b:22:06:62:5b:6f:cb:09:cb:65:02:f2:d1:32:47:fd:c4:e1:
         c2:45:d4:8d:86:f4:fb:be:84:c9:22:1e:9a:6d:b9:5f:58:86:
         d7:61:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:32:23 2025 by rpki-client