This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa
File:                     3130332e38372e3134382e302f32332d3234203d3e203435333035.roa (raw, json)
Hash identifier:          bYL3syFx6NGhqMU1M8OANCcKtX9aZc4njVRqY9dr5o8=
Subject key identifier:   5E:15:BB:A3:41:F3:E9:9E:FE:A5:3F:29:18:6A:90:C1:20:60:70:F4
Certificate issuer:       /CN=F5908629C575E46230F87489BF209EE6FBCF3860
Certificate serial:       55A9017626703C0A122F83AD6AC0DF0D983BF11B
Authority key identifier: F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa
Signing time:             Thu 18 Dec 2025 08:03:05 +0000
ROA not before:           Thu 18 Dec 2025 07:58:05 +0000
ROA not after:            Thu 17 Dec 2026 08:03:05 +0000
asID:                     45305
IP address blocks:        103.87.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl
                          rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 10:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:01:76:26:70:3c:0a:12:2f:83:ad:6a:c0:df:0d:98:3b:f1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5908629C575E46230F87489BF209EE6FBCF3860
        Validity
            Not Before: Dec 18 07:58:05 2025 GMT
            Not After : Dec 17 08:03:05 2026 GMT
        Subject: CN=5E15BBA341F3E99EFEA53F29186A90C1206070F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:7a:6f:d3:2f:a1:88:4b:02:d4:cb:b1:9d:
                    f9:05:6f:24:52:b9:b8:1c:45:63:e8:e9:2e:00:50:
                    bf:22:9c:c3:46:03:9c:c5:01:88:dd:97:f2:07:6b:
                    b8:ce:14:2e:a7:0c:44:06:8e:d7:6d:60:69:91:cb:
                    b8:d2:44:8b:f8:ef:e1:95:6b:31:f3:de:89:79:75:
                    f4:5a:8f:05:1b:9e:14:81:9d:a0:ed:49:40:60:75:
                    a8:d7:a2:3c:12:dd:c5:4b:7f:c8:cd:45:ba:8d:64:
                    f7:16:7d:a2:91:7d:8c:d8:9d:8e:d9:8a:79:65:0f:
                    2a:36:90:1d:c9:86:37:0c:32:fa:fb:70:c3:95:d9:
                    a0:93:87:33:32:97:f3:0c:87:b0:1d:8c:f3:67:7b:
                    28:67:c7:b2:3f:0d:91:ab:6f:3e:34:a2:aa:db:bc:
                    ad:0a:cf:94:f2:aa:28:3e:49:c9:09:55:69:9d:4b:
                    b1:6a:6f:80:fa:58:9d:06:0a:57:70:be:68:a2:3f:
                    e5:a9:b3:46:fa:2e:43:25:5f:62:a8:0b:c8:9a:a3:
                    93:4e:8c:8e:1a:20:90:ee:08:66:36:a2:11:52:c5:
                    47:d0:c6:ac:63:3a:3c:db:d8:b2:e9:cd:76:75:8e:
                    22:98:c9:94:ac:b3:0a:9e:90:b6:64:0f:68:a7:80:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:BB:A3:41:F3:E9:9E:FE:A5:3F:29:18:6A:90:C1:20:60:70:F4
            X509v3 Authority Key Identifier:
                keyid:F5:90:86:29:C5:75:E4:62:30:F8:74:89:BF:20:9E:E6:FB:CF:38:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/F5908629C575E46230F87489BF209EE6FBCF3860.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5908629C575E46230F87489BF209EE6FBCF3860.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ddb79f-2c37-47af-b95d-15311463b343/0/3130332e38372e3134382e302f32332d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:6d:dd:d8:8a:f8:48:6e:7b:af:97:d7:9f:04:8d:4f:d5:
         79:64:55:c3:4f:dc:76:a3:00:f3:68:c0:6b:f7:b9:e6:37:25:
         47:c1:79:8f:3c:a7:15:a5:b8:05:6d:fb:01:a5:29:aa:56:be:
         74:95:61:81:e7:70:22:12:a3:fe:c6:dd:da:9e:df:63:44:74:
         fb:6e:65:89:86:18:10:3a:5f:ce:a4:c0:58:fb:35:a8:b8:de:
         5f:1d:6d:47:14:16:c2:9c:bf:64:52:df:8d:a5:67:b9:5f:87:
         08:8a:11:c5:54:1e:99:b6:3e:a1:99:4e:8c:99:00:c2:08:12:
         d6:6d:14:68:56:9b:69:56:7e:8c:3f:bb:43:2a:fa:2d:bf:4b:
         5b:3e:07:67:30:53:14:3f:ce:a9:84:8e:27:7f:d4:af:24:16:
         4e:ba:5a:94:7c:78:64:1f:1b:65:87:d5:e2:08:48:3f:9e:d5:
         f3:c5:fc:00:56:15:2c:66:a4:66:f2:42:01:e3:91:2e:8d:ca:
         eb:80:3a:05:31:c4:4f:36:da:a0:36:30:01:d4:ba:9f:95:e9:
         bb:01:77:4e:6f:55:52:2a:78:0f:38:1b:b7:6a:45:c2:9d:fd:
         98:6a:50:4b:92:0e:5f:89:86:c1:aa:55:ba:c0:89:ca:cb:73:
         08:44:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 15:49:01 2025 by rpki-client