This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
File:                     3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (raw, json)
Hash identifier:          HNI0ArO+KsvaMgGqtyRRpqs1evvFTKgd+Siy8K2ur7A=
Subject key identifier:   5D:CE:7D:40:61:E3:E8:E7:C3:04:43:D9:DC:F6:2E:DD:53:7E:5C:62
Certificate issuer:       /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Certificate serial:       7565827EB261C47EBDBDE58BF701119B309B3B70
Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
Signing time:             Sun 07 Dec 2025 16:00:01 +0000
ROA not before:           Sun 07 Dec 2025 15:55:01 +0000
ROA not after:            Sun 06 Dec 2026 16:00:01 +0000
asID:                     149407
IP address blocks:        103.183.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl
                          rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 05:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:65:82:7e:b2:61:c4:7e:bd:bd:e5:8b:f7:01:11:9b:30:9b:3b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
        Validity
            Not Before: Dec  7 15:55:01 2025 GMT
            Not After : Dec  6 16:00:01 2026 GMT
        Subject: CN=5DCE7D4061E3E8E7C30443D9DCF62EDD537E5C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:5c:39:ed:ed:76:50:f2:65:19:50:41:e0:
                    3a:5c:f5:09:7a:17:8e:60:a8:e9:4f:62:70:0a:3f:
                    13:5c:80:4e:d7:15:b2:30:e5:d9:4f:ee:44:29:eb:
                    3c:ff:13:93:19:5e:ba:a4:4f:6d:df:fc:7e:a1:c1:
                    3c:c9:14:fe:4f:fa:d0:a5:9a:3a:8e:46:50:20:15:
                    28:8f:a0:a7:a9:a5:b2:aa:16:e9:4d:00:a6:0d:f1:
                    bd:f4:a9:af:97:24:88:1a:fc:66:ce:2e:6a:18:05:
                    d8:f1:71:10:ce:a4:e7:2d:8d:7f:e9:48:2f:d8:bf:
                    d0:1c:dc:d3:1e:f2:f8:10:30:b4:d7:2b:66:31:d4:
                    59:82:b1:9f:01:5f:bd:ee:39:47:46:37:eb:ea:2a:
                    73:42:de:61:e9:6d:aa:a9:2e:9f:10:2c:ae:65:ee:
                    f2:70:d0:11:a3:fc:51:af:16:4f:6e:7e:11:15:59:
                    5f:4c:ac:61:7e:d5:dd:1c:b9:8b:ca:43:bf:f7:40:
                    74:99:8a:15:f4:87:34:2a:9a:af:ac:46:57:61:44:
                    1c:55:0b:22:1f:8f:35:88:39:fc:d0:4b:0f:2d:4e:
                    11:1d:17:92:7f:de:01:ae:5d:e9:2b:30:4a:bc:e6:
                    46:39:c3:5e:14:e8:d2:2b:8e:35:9b:53:cd:da:4b:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CE:7D:40:61:E3:E8:E7:C3:04:43:D9:DC:F6:2E:DD:53:7E:5C:62
            X509v3 Authority Key Identifier:
                keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:28:1d:e4:fd:4d:77:bb:bf:cd:65:e2:ce:4c:4f:48:6d:
         5e:43:25:93:a5:e9:db:50:fc:1a:49:6e:07:df:cd:63:11:f3:
         2c:85:2b:12:de:ce:02:42:97:ba:3c:e3:64:46:09:1d:f3:6f:
         a5:6a:6b:03:e1:2e:22:22:ce:d8:e1:07:62:8a:d0:39:ad:96:
         87:79:cc:f5:e1:26:b0:8a:00:24:cc:76:88:45:04:be:98:12:
         2f:ea:99:39:9c:40:40:b3:b2:4c:da:a2:b1:83:63:21:cb:08:
         ca:8f:f2:c3:6d:34:f8:2a:db:d7:5d:e9:f7:e1:ef:74:f5:77:
         65:13:2a:24:2d:02:87:a0:83:02:33:29:10:80:4e:73:b5:2e:
         f0:7b:cf:c0:98:e6:38:32:3c:f7:b0:d2:9c:c2:17:0b:6f:48:
         bb:25:5b:35:e7:4a:72:7b:14:72:be:99:f1:d6:2c:7d:86:3f:
         e0:bd:a6:97:a4:08:e7:d6:cc:fd:7f:29:5d:73:eb:eb:b5:53:
         c1:ab:ec:83:af:45:64:e4:a4:f0:f5:a7:31:7d:a9:7e:fc:75:
         c2:62:4f:40:97:c7:c3:73:3c:d7:43:b6:1c:e3:63:88:2c:81:
         59:38:c8:6a:1b:b0:1a:bc:b3:a5:c7:d3:50:d9:a6:cd:e1:89:
         0c:90:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:09:38 2025 by rpki-client