This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          JP4Zum4iV9kK+sjwkFZOVqNzSo/R4flchawr+ijKpxA=
Subject key identifier:   18:10:CE:69:B9:18:BE:9E:C6:8D:F7:71:EB:40:93:FC:33:60:80:09
Certificate issuer:       /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial:       6CCDBAE7AD045DA093E5508A89A92B67309E5611
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 21 Dec 2025 16:00:01 +0000
ROA not before:           Sun 21 Dec 2025 15:55:01 +0000
ROA not after:            Sun 20 Dec 2026 16:00:01 +0000
asID:                     139952
IP address blocks:        103.162.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
                          rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 01:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cd:ba:e7:ad:04:5d:a0:93:e5:50:8a:89:a9:2b:67:30:9e:56:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
        Validity
            Not Before: Dec 21 15:55:01 2025 GMT
            Not After : Dec 20 16:00:01 2026 GMT
        Subject: CN=1810CE69B918BE9EC68DF771EB4093FC33608009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:78:96:68:96:2d:14:45:38:45:ba:48:aa:
                    35:bb:3b:1d:2c:fb:59:70:97:22:3c:6d:e4:5f:dd:
                    b6:7c:85:96:95:1c:80:0e:75:11:2b:ee:7b:ac:be:
                    7b:ef:c8:8d:15:e4:7f:b2:b7:4d:64:93:99:41:b6:
                    37:c5:30:e4:42:ca:d3:83:a5:f0:5d:a4:f4:5c:46:
                    9f:86:34:c9:ac:b2:90:19:37:5a:92:75:0b:ee:6e:
                    de:1b:dd:a5:ca:ac:ee:f2:f0:81:d1:a0:69:87:97:
                    1d:cc:4f:58:f3:8b:f4:3b:6a:85:d2:e1:ed:d9:68:
                    38:65:92:52:ba:eb:fc:25:3e:51:f8:6e:df:b3:40:
                    52:7b:3b:7e:14:6f:18:43:b9:4d:ba:34:f5:9e:82:
                    50:68:4b:cf:44:9c:8f:11:3a:df:3b:8a:84:b8:97:
                    e6:8c:bb:0b:53:75:91:d8:87:fd:3f:d7:8a:ce:ac:
                    56:5c:49:cb:04:0c:22:92:33:32:27:1f:6e:99:6a:
                    e7:62:76:97:1c:a0:70:05:07:cd:e7:0a:25:41:c6:
                    3c:a6:dd:e4:f9:33:ec:57:57:b5:31:37:7f:37:d7:
                    9d:4c:6f:01:b1:0c:90:7f:10:b9:18:9d:4d:6f:63:
                    48:0d:c4:c6:bf:d1:7d:d4:18:90:a4:3f:ad:cb:37:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:10:CE:69:B9:18:BE:9E:C6:8D:F7:71:EB:40:93:FC:33:60:80:09
            X509v3 Authority Key Identifier:
                keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:43:c5:3e:e4:bd:64:d4:64:af:7c:3c:f1:c5:a9:da:a5:
         9c:b1:ef:8a:2d:0f:bc:ab:da:98:5b:1f:b3:3c:d0:b6:20:86:
         d5:a9:0e:1f:ff:df:a0:cc:99:94:5c:a5:54:7f:95:e6:bc:5a:
         c2:6a:05:18:ae:78:54:b2:ae:dc:a9:5d:ba:a4:0b:2c:44:20:
         0b:ad:b3:57:82:4c:6c:39:50:33:3c:eb:2e:a3:e7:7f:8c:c2:
         3b:c1:0f:2a:cd:72:46:4f:74:37:99:01:37:2e:d8:d1:68:d8:
         86:96:19:5d:95:18:91:67:ce:ba:d7:80:2b:cc:a1:3e:30:46:
         98:cb:27:e9:ac:3f:1f:1a:84:7f:45:ae:14:f4:ea:3f:60:ec:
         c2:81:d7:87:de:65:d2:55:e9:f0:81:8e:cf:b8:80:1b:53:c1:
         b8:ec:19:09:c4:a0:cf:eb:be:07:df:5f:f4:19:32:ca:2c:56:
         7a:4f:ae:d7:66:e1:87:0a:95:73:39:e4:b9:69:d2:6c:06:c7:
         61:7f:69:f8:ac:e7:cf:fc:43:a4:1a:ea:c2:65:1d:3a:86:b8:
         ea:d7:2c:4d:7b:05:6f:a2:be:40:8d:74:cb:38:46:fd:e7:7b:
         76:a4:a0:63:c8:68:5c:3a:4c:fc:d7:db:be:9b:da:5e:bd:00:
         6c:c0:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:40:08 2025 by rpki-client