This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa
File:                     3130332e31312e32322e302f32332d3234203d3e203538333930.roa (raw, json)
Hash identifier:          FtcYNnQ+tpgDczZdWAIIZbO3eWyrmnKrL3Da652AKfg=
Subject key identifier:   7C:11:57:C0:68:1A:53:0C:A4:C0:D6:25:E6:18:E1:E1:08:A0:D8:3B
Certificate issuer:       /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial:       488DEEAF23A6A8ADDFB5749A101D7964C7BA7759
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa
Signing time:             Mon 08 Dec 2025 08:00:02 +0000
ROA not before:           Mon 08 Dec 2025 07:55:02 +0000
ROA not after:            Mon 07 Dec 2026 08:00:02 +0000
asID:                     58390
IP address blocks:        103.11.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
                          rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 09:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8d:ee:af:23:a6:a8:ad:df:b5:74:9a:10:1d:79:64:c7:ba:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Validity
            Not Before: Dec  8 07:55:02 2025 GMT
            Not After : Dec  7 08:00:02 2026 GMT
        Subject: CN=7C1157C0681A530CA4C0D625E618E1E108A0D83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:d9:10:8e:c1:1c:b8:4d:d6:33:3b:ec:a7:
                    c5:b7:77:08:78:eb:03:a4:15:bc:4a:b3:b9:d0:c8:
                    64:f5:db:3f:e2:6e:84:a6:ed:14:79:bd:3b:f1:68:
                    f7:b9:c8:2e:59:99:5b:70:2c:99:22:9f:a6:6e:88:
                    e0:4c:ab:c5:a7:b6:5b:5d:ba:7e:c1:fe:52:bf:e9:
                    e3:d1:fa:b8:ee:4b:bd:29:c0:5a:40:3e:8d:ef:7c:
                    6c:73:bb:08:94:bc:a9:46:2c:b7:87:c7:3a:58:7f:
                    1e:79:ce:19:5e:a2:ed:f7:08:08:85:32:3e:a1:d8:
                    79:9b:ef:98:1a:52:84:93:b3:16:34:07:6a:c2:86:
                    29:2e:3a:9c:21:c3:19:a7:48:30:04:94:05:d2:34:
                    44:f0:b2:44:d9:a7:62:88:30:b9:a2:07:62:b1:0e:
                    3b:9a:4f:c9:f8:67:b9:21:83:5f:6f:f1:82:10:14:
                    b3:3e:9c:77:63:78:7a:c9:91:dd:48:d9:13:67:e9:
                    6c:11:a1:61:ec:81:54:d5:53:56:2f:0c:fc:02:2b:
                    46:c6:c9:2f:d9:3d:ad:2a:26:a1:1d:5f:49:38:38:
                    2d:fb:41:ea:9f:65:88:7c:c3:d1:81:0c:ed:12:80:
                    df:ac:37:4b:70:86:16:d1:00:8a:a3:f9:8c:29:bf:
                    f3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:57:C0:68:1A:53:0C:A4:C0:D6:25:E6:18:E1:E1:08:A0:D8:3B
            X509v3 Authority Key Identifier:
                keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:bb:d1:96:81:0f:0b:92:30:6f:6e:ee:a9:09:89:19:b6:a6:
         df:d6:3e:a7:d3:7a:d6:54:14:0a:e1:35:48:73:b8:88:62:7b:
         33:84:d2:a9:5a:62:87:33:49:27:17:8f:8c:f3:62:5e:a6:bd:
         f2:e9:e6:aa:be:6f:5a:ef:10:5e:5d:90:b8:81:70:37:db:69:
         f7:7d:44:bb:a8:35:93:c3:ff:5b:d2:b1:5c:2d:6d:ad:75:5f:
         2f:03:c5:c8:d5:1b:fd:31:f0:3d:cd:c4:fc:08:73:08:a3:4e:
         c1:02:1f:12:50:8b:93:a1:95:90:0c:f2:87:19:d8:55:5e:63:
         cc:d2:56:a1:c2:b4:ee:2d:30:9d:fb:55:1f:f7:8c:02:2e:d3:
         32:64:26:24:b2:62:1a:8c:15:70:b8:f3:53:08:c2:52:75:12:
         36:e7:47:4b:d4:71:29:69:15:50:53:ca:33:4f:16:43:78:3e:
         dd:0d:6b:a3:8e:0b:5a:a6:b8:3b:3b:23:89:99:9f:96:de:76:
         6b:be:0c:a0:0c:8d:71:e3:6e:ed:1f:89:c0:c6:0f:93:71:47:
         18:5c:50:f5:bf:cc:8a:9a:bd:f5:0e:c3:71:37:91:50:1e:55:
         7e:2c:b8:fd:b3:1e:93:5a:1f:29:28:2f:b3:22:f1:51:54:98:
         78:fc:d8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 13:25:11 2025 by rpki-client