This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa
File:                     3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa (raw, json)
Hash identifier:          6WBleXSX0c07tXo+dC+vbRCMKLXoYLwo1rSzqObcWfU=
Subject key identifier:   C9:42:24:BD:9B:55:9F:23:88:02:BB:73:D2:3C:47:EA:A3:72:84:9D
Certificate issuer:       /CN=743D7544160232918AB5AB2CD90221B4C4E978E5
Certificate serial:       01F1409932927E61F06021D23711B27EF5D3C83A
Authority key identifier: 74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa
Signing time:             Mon 22 Dec 2025 11:00:02 +0000
ROA not before:           Mon 22 Dec 2025 10:55:02 +0000
ROA not after:            Mon 21 Dec 2026 11:00:02 +0000
asID:                     150553
IP address blocks:        103.81.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl
                          rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 15:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f1:40:99:32:92:7e:61:f0:60:21:d2:37:11:b2:7e:f5:d3:c8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743D7544160232918AB5AB2CD90221B4C4E978E5
        Validity
            Not Before: Dec 22 10:55:02 2025 GMT
            Not After : Dec 21 11:00:02 2026 GMT
        Subject: CN=C94224BD9B559F238802BB73D23C47EAA372849D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:62:00:06:34:ac:02:a6:7b:78:1a:98:30:
                    6f:d2:e2:8a:8c:eb:de:09:88:ce:35:11:50:aa:4a:
                    0b:99:ce:6a:c3:b9:a7:5c:e3:0e:e6:70:07:a6:50:
                    7d:56:58:03:67:f9:0b:c6:76:c5:09:fb:d8:5b:6b:
                    7e:fa:20:bc:88:aa:c2:d2:bb:0c:29:e6:96:31:b8:
                    e4:85:7f:f7:bf:0f:28:86:27:d6:cb:57:b8:5d:70:
                    37:dc:0c:45:ca:54:7a:9d:ef:d5:73:a6:2c:8e:51:
                    07:2a:c0:22:17:92:34:49:63:8e:12:25:d4:6e:89:
                    48:0f:fc:0c:ad:4d:7c:fe:94:f5:6d:89:28:aa:1a:
                    1f:87:d8:08:a8:cf:cc:d6:de:17:de:44:63:19:14:
                    e0:35:ef:3e:d3:9c:7d:ff:4e:c5:e4:39:51:bf:d8:
                    ea:9a:38:60:a4:b1:f7:f9:6f:29:a3:8f:8f:68:4e:
                    80:be:56:ed:a2:42:7a:46:63:82:4b:3d:b9:49:76:
                    5f:8c:76:90:26:a1:b0:d5:f5:9e:cb:e3:ba:53:67:
                    88:5c:03:72:56:78:92:3e:90:3a:08:db:8a:b6:c4:
                    8b:91:0a:d4:59:7d:2a:9d:5b:4e:8f:20:1f:6c:ad:
                    8d:d6:8f:a3:df:0b:42:e8:2d:a6:aa:a0:f7:a0:c9:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:42:24:BD:9B:55:9F:23:88:02:BB:73:D2:3C:47:EA:A3:72:84:9D
            X509v3 Authority Key Identifier:
                keyid:74:3D:75:44:16:02:32:91:8A:B5:AB:2C:D9:02:21:B4:C4:E9:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/743D7544160232918AB5AB2CD90221B4C4E978E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/743D7544160232918AB5AB2CD90221B4C4E978E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dfd4234-1323-4f0e-b686-1d72acb88029/0/3130332e38312e3235352e302f32342d3234203d3e20313530353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:78:17:fb:c1:02:e0:35:6a:0a:2d:f3:d9:40:2b:f8:32:
         08:fd:4f:62:d5:ce:f9:50:b2:d4:99:73:1c:2f:ef:b0:7f:80:
         85:60:69:84:11:bd:05:62:a3:73:4d:88:21:ec:5a:6a:74:66:
         2c:6c:1c:db:b6:6c:28:1b:ee:4d:cb:cb:19:e0:9d:62:2a:e0:
         70:c0:a4:70:f4:2d:0d:4b:38:56:4e:8e:ba:3a:4b:4c:36:3b:
         62:1c:c4:a9:36:b6:f9:6b:ac:7b:a7:c0:8d:f5:40:f4:b1:5b:
         70:f0:6d:c1:88:4f:ea:55:55:b6:0f:89:d1:5b:88:8d:c4:31:
         40:c3:19:ff:11:41:23:69:03:1d:fa:76:ab:95:b8:18:31:52:
         7b:7d:0e:71:55:d8:76:88:e2:8b:d9:6b:d8:99:2f:18:4b:ba:
         50:92:56:4f:3a:05:4a:53:3f:16:54:7c:dc:8e:f2:e6:2c:10:
         4b:8b:76:da:98:f3:a9:11:52:9a:b3:61:e5:87:7d:3e:6d:e9:
         7e:cb:98:a8:e3:1c:c0:04:73:d8:56:26:5f:0b:64:f8:69:c2:
         e5:4a:59:f1:2b:b8:f0:c9:8c:31:d3:fa:4e:ae:14:21:6e:af:
         5e:29:3c:a1:97:6c:f1:88:a3:da:1b:8e:85:f0:34:df:fe:be:
         fb:d7:84:2b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAfFAmTKSfmHwYCHSNxGyfvXTyDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRD
NEU5NzhFNTAeFw0yNTEyMjIxMDU1MDJaFw0yNjEyMjExMTAwMDJaMDMxMTAvBgNV
BAMTKEM5NDIyNEJEOUI1NTlGMjM4ODAyQkI3M0QyM0M0N0VBQTM3Mjg0OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGWIABjSsAqZ7eBqYMG/S4oqM
694JiM41EVCqSguZzmrDuadc4w7mcAemUH1WWANn+QvGdsUJ+9hba376ILyIqsLS
uwwp5pYxuOSFf/e/DyiGJ9bLV7hdcDfcDEXKVHqd79VzpiyOUQcqwCIXkjRJY44S
JdRuiUgP/AytTXz+lPVtiSiqGh+H2Aioz8zW3hfeRGMZFOA17z7TnH3/TsXkOVG/
2OqaOGCksff5bymjj49oToC+Vu2iQnpGY4JLPblJdl+MdpAmobDV9Z7L47pTZ4hc
A3JWeJI+kDoI24q2xIuRCtRZfSqdW06PIB9srY3Wj6PfC0LoLaaqoPegyYmXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUyUIkvZtVnyOIArtz0jxH6qNyhJ0wHwYDVR0j
BBgwFoAUdD11RBYCMpGKtass2QIhtMTpeOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGZkNDIzNC0xMzIzLTRmMGUtYjY4Ni0xZDcyYWNiODgwMjkvMC83NDNENzU0NDE2
MDIzMjkxOEFCNUFCMkNEOTAyMjFCNEM0RTk3OEU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQzRDc1NDQxNjAyMzI5MThBQjVBQjJDRDkwMjIxQjRDNEU5
NzhFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZmQ0MjM0LTEzMjMtNGYwZS1i
Njg2LTFkNzJhY2I4ODAyOS8wLzMxMzAzMzJlMzgzMTJlMzIzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1H/MA0GCSqG
SIb3DQEBCwUAA4IBAQCBrXgX+8EC4DVqCi3z2UAr+DII/U9i1c75ULLUmXMcL++w
f4CFYGmEEb0FYqNzTYgh7FpqdGYsbBzbtmwoG+5Ny8sZ4J1iKuBwwKRw9C0NSzhW
To66OktMNjtiHMSpNrb5a6x7p8CN9UD0sVtw8G3BiE/qVVW2D4nRW4iNxDFAwxn/
EUEjaQMd+narlbgYMVJ7fQ5xVdh2iOKL2WvYmS8YS7pQklZPOgVKUz8WVHzcjvLm
LBBLi3bamPOpEVKas2Hlh30+bel+y5io4xzABHPYViZfC2T4acLlSlnxK7jwyYwx
0/pOrhQhbq9eKTyhl2zxiKPaG46F8DTf/r7714Qr
-----END CERTIFICATE-----
Generated at Wed Dec 24 22:08:41 2025 by rpki-client