This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          KdIUSWjYk6G6khIi44dRxNIcc82FtwrOj3DoMvqmaNE=
Subject key identifier:   E5:D6:DE:4A:68:F3:C3:1D:C7:A2:2F:91:1F:70:37:B6:EE:4A:1A:B2
Certificate issuer:       /CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
Certificate serial:       268FE0DD3DD866D73CEE975BE8A25B4C0C0974D6
Authority key identifier: EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa
Signing time:             Tue 09 Dec 2025 13:00:01 +0000
ROA not before:           Tue 09 Dec 2025 12:55:01 +0000
ROA not after:            Tue 08 Dec 2026 13:00:01 +0000
asID:                     138089
IP address blocks:        103.153.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl
                          rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8f:e0:dd:3d:d8:66:d7:3c:ee:97:5b:e8:a2:5b:4c:0c:09:74:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C
        Validity
            Not Before: Dec  9 12:55:01 2025 GMT
            Not After : Dec  8 13:00:01 2026 GMT
        Subject: CN=E5D6DE4A68F3C31DC7A22F911F7037B6EE4A1AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:59:13:f7:59:60:02:4c:3f:da:53:5f:0b:0d:
                    07:e3:43:b4:90:a5:92:3f:8f:6c:c6:a1:7e:9a:93:
                    f1:d4:29:3a:5a:0f:44:ba:02:11:ba:42:72:61:52:
                    4a:cb:fd:81:31:b5:e2:08:c3:ad:18:33:8c:35:36:
                    01:08:44:5f:ff:aa:d6:f0:9b:b1:10:8a:d1:9f:25:
                    8f:1c:ce:5f:c5:63:8d:cb:3a:20:99:e9:a6:fe:1e:
                    74:6c:b3:04:30:62:f2:1a:0b:c5:a1:91:0e:6e:5b:
                    56:12:68:0b:87:2d:4b:4a:1a:94:03:8b:67:c4:ed:
                    49:0c:0d:0e:43:06:82:9b:23:2b:9d:e5:c3:ef:03:
                    21:94:49:08:4f:f3:6a:61:46:74:72:bb:ad:43:07:
                    91:20:77:c7:a2:b2:c1:be:4f:57:dc:97:8d:70:bc:
                    7b:66:87:c6:26:a4:12:f0:22:d7:2a:18:1d:34:0b:
                    e6:02:5a:c4:9c:bd:9d:2c:42:3e:d0:60:b1:33:07:
                    41:c6:a6:28:84:5b:6c:2b:47:3d:d5:1f:5b:d3:80:
                    70:cd:5c:6a:0f:a4:33:c1:b7:dd:3e:e4:b8:cb:37:
                    e6:40:1a:3e:f1:ab:50:53:30:d8:b3:a5:c6:89:13:
                    fa:16:c0:e6:8a:87:8a:6f:51:6f:b7:da:76:63:ed:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:DE:4A:68:F3:C3:1D:C7:A2:2F:91:1F:70:37:B6:EE:4A:1A:B2
            X509v3 Authority Key Identifier:
                keyid:EF:C0:FE:32:8F:7B:86:F9:C6:82:F4:FE:37:36:0C:4E:3A:D9:94:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC0FE328F7B86F9C682F4FE37360C4E3AD9942C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/383ed7ab-1ac9-4f42-acdd-53557ac7b3f3/0/3130332e3135332e3132372e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c2:f0:92:9a:1d:4f:85:2c:6d:f7:22:0f:83:7e:1a:01:f8:
         cd:53:60:2d:5c:c5:4a:47:5f:ff:ea:27:9f:39:c3:60:99:91:
         fd:84:f3:21:4d:65:fc:e9:f0:23:af:55:44:d2:8d:32:21:06:
         75:89:62:57:5f:2b:7b:84:1e:7d:5c:67:57:be:c3:59:62:fd:
         64:b1:6d:f1:c0:f3:84:48:cd:33:5b:18:6d:5c:b5:03:44:2e:
         31:96:e3:b5:75:54:00:01:f6:9c:94:d4:03:39:8f:01:b2:2f:
         11:3e:95:50:7c:1d:6a:e3:5d:d5:68:00:79:ff:4d:06:09:a8:
         3a:3e:f4:34:c5:f2:32:8f:e5:24:01:71:24:7f:1f:c6:b5:03:
         3f:65:27:f2:06:9a:df:58:8a:d8:54:85:e8:e4:2c:a4:be:ee:
         b5:08:11:e8:d0:14:65:c1:05:06:10:15:6c:95:7c:b9:be:1b:
         bb:82:05:88:e2:13:a1:f7:b0:c6:08:35:d9:f8:bc:bd:bf:81:
         7b:e2:10:b1:02:ce:24:22:7f:c8:ef:24:27:7b:ad:1e:df:4c:
         71:2c:da:d7:99:c5:2f:14:c7:3c:79:ed:21:38:cf:3f:b1:fa:
         4f:a3:da:e7:6f:96:d1:72:19:22:c3:5b:8a:db:4f:f2:60:70:
         86:bc:0a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:56:12 2025 by rpki-client