This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa
File:                     3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (raw, json)
Hash identifier:          XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=
Subject key identifier:   69:E1:8C:93:EB:3A:1A:CE:15:3D:8E:1B:62:29:EF:BE:DE:F7:53:02
Certificate issuer:       /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial:       540E23F0D6121D1122A1D82427AA37BC90492745
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa
Signing time:             Wed 24 Dec 2025 11:00:00 +0000
ROA not before:           Wed 24 Dec 2025 10:55:00 +0000
ROA not after:            Wed 23 Dec 2026 11:00:00 +0000
asID:                     149340
IP address blocks:        103.178.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
                          rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0e:23:f0:d6:12:1d:11:22:a1:d8:24:27:aa:37:bc:90:49:27:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
        Validity
            Not Before: Dec 24 10:55:00 2025 GMT
            Not After : Dec 23 11:00:00 2026 GMT
        Subject: CN=69E18C93EB3A1ACE153D8E1B6229EFBEDEF75302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8b:e5:6d:f6:23:25:e1:83:4c:7d:d7:6a:6f:
                    97:8d:3d:d8:d3:08:70:93:9f:47:36:d0:3e:5c:46:
                    79:67:6b:76:23:12:1e:23:b4:f3:b6:8e:34:ea:44:
                    fb:a0:ba:4c:7f:e0:34:17:40:f8:60:6e:4e:cf:0f:
                    c3:6a:0f:ab:f3:32:ad:b7:69:ac:70:b4:1d:0d:22:
                    72:01:dc:e4:4e:b6:2c:ef:5f:dc:68:b3:a5:e1:0d:
                    11:d2:7e:ce:98:d9:5d:ae:d3:1d:9d:7c:f1:f2:83:
                    b8:9f:8f:04:13:7e:3b:74:49:7f:7d:74:70:80:f5:
                    43:43:30:71:fd:38:ef:51:3f:f8:0b:63:d0:14:38:
                    2f:cb:9a:7f:67:9a:32:33:64:77:ec:7b:2b:cc:3a:
                    ac:06:5b:f4:59:4b:0c:74:bc:3a:d2:98:f4:35:c1:
                    8c:b8:1c:bb:9e:e4:ff:07:a6:99:b4:93:1c:40:d4:
                    c7:41:e1:47:ca:b1:67:0d:f1:d9:cc:f4:61:dc:e6:
                    77:ce:a5:19:9f:d9:fa:4f:c6:e9:f4:60:a9:86:29:
                    0e:7b:70:73:a2:33:72:2e:ca:e4:fe:dd:64:15:03:
                    32:8c:dd:3a:6b:f6:4f:78:6c:1a:37:ee:16:37:fc:
                    bf:1b:63:be:82:da:8c:b8:5b:20:74:61:01:c6:71:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:8C:93:EB:3A:1A:CE:15:3D:8E:1B:62:29:EF:BE:DE:F7:53:02
            X509v3 Authority Key Identifier:
                keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ba:c3:3a:62:fe:03:b1:09:b9:0a:b5:74:ce:4b:87:b6:64:
         c8:43:12:76:f8:c0:b1:c5:10:27:20:01:ff:1d:41:25:e0:34:
         13:46:b9:d8:8f:3c:1d:80:3a:cb:f0:15:b9:7e:94:6a:9c:54:
         d9:ba:13:a0:30:70:96:bf:fe:09:2f:65:36:5b:69:ef:c7:07:
         3e:2e:cb:eb:5c:ab:00:4e:c9:a1:1c:68:90:9e:e3:ee:00:9c:
         c3:f6:dd:7d:33:34:5f:81:ff:db:0c:f1:a6:ee:a9:c1:6a:8e:
         d6:19:6c:88:27:e8:6b:1b:2f:d3:6a:a8:13:65:7d:29:fc:bd:
         0a:74:3f:80:24:7d:87:62:0b:f0:31:ec:14:ed:bf:36:fb:5a:
         9f:70:53:07:14:2e:b2:62:8a:10:e8:c9:fb:07:9f:58:5e:8a:
         23:1f:af:21:17:1a:d8:9a:73:36:eb:c3:ee:be:52:23:5b:f3:
         41:9d:a6:58:c5:b9:7a:0e:73:66:e9:48:06:ee:97:81:36:aa:
         fa:14:6e:b0:18:4d:4d:4e:a3:cd:60:71:91:2e:0e:8b:c2:84:
         57:33:4f:cd:8b:f1:f3:57:48:86:60:87:78:d5:46:98:c9:b3:
         73:53:55:b2:df:42:06:9c:5d:6a:9b:1e:21:9f:08:2e:29:95:
         6b:ed:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:09:39 2025 by rpki-client