This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa
File:                     3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (raw, json)
Hash identifier:          r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=
Subject key identifier:   3B:91:27:C2:7F:59:75:EB:61:F1:78:CA:71:DD:DB:A3:4F:65:42:94
Certificate issuer:       /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial:       5AEF40BF997E2F5A3A8895E85BF51DA1FDEFB2B7
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa
Signing time:             Tue 16 Dec 2025 07:00:03 +0000
ROA not before:           Tue 16 Dec 2025 06:55:03 +0000
ROA not after:            Tue 15 Dec 2026 07:00:03 +0000
asID:                     24529
IP address blocks:        103.217.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
                          rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Dec 2025 07:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ef:40:bf:99:7e:2f:5a:3a:88:95:e8:5b:f5:1d:a1:fd:ef:b2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
        Validity
            Not Before: Dec 16 06:55:03 2025 GMT
            Not After : Dec 15 07:00:03 2026 GMT
        Subject: CN=3B9127C27F5975EB61F178CA71DDDBA34F654294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:34:ff:31:e6:42:10:00:6b:d3:34:ea:31:
                    41:fa:03:17:d9:c9:d1:40:92:cb:a0:06:40:eb:92:
                    03:04:24:1f:4b:9b:5c:a8:ee:d2:17:9e:60:14:35:
                    04:0a:75:ac:8d:da:50:a5:cf:63:6e:55:58:fe:3e:
                    1b:ff:66:f9:f0:31:bd:80:ff:2a:d6:82:4a:b3:ec:
                    96:90:ec:08:5c:41:2c:68:6a:fb:40:cc:e7:3c:39:
                    af:49:1c:ef:15:45:a1:7d:cf:38:3c:35:f4:68:5e:
                    53:25:ab:a3:f6:eb:a8:37:8e:ea:2d:a4:05:84:78:
                    c4:e4:7f:e2:20:7f:13:a6:4b:3e:3c:3d:a3:4d:6e:
                    d8:39:eb:4b:aa:b6:81:56:0c:d3:7d:40:27:48:89:
                    ee:3b:a3:98:c7:af:02:07:e1:54:26:29:60:52:6c:
                    8f:91:59:ac:43:47:26:32:52:4f:04:b9:6a:f5:aa:
                    f7:84:f0:39:95:1c:b9:e5:fb:3c:86:38:26:e1:2d:
                    51:c2:c4:39:1d:09:68:1d:97:69:3e:5e:aa:f7:e5:
                    bf:05:78:ff:a0:45:38:84:57:be:1c:a8:5d:44:76:
                    4e:7b:21:28:3f:bf:93:70:0b:71:ca:61:31:23:dc:
                    ea:dd:fb:a9:36:55:d1:6a:52:19:d2:27:0b:32:f8:
                    94:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:27:C2:7F:59:75:EB:61:F1:78:CA:71:DD:DB:A3:4F:65:42:94
            X509v3 Authority Key Identifier:
                keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:98:82:e4:24:93:88:67:8d:e3:ba:00:24:fb:ec:b3:ab:61:
         93:eb:10:ec:60:af:98:12:84:82:9e:d0:c3:27:ed:dc:27:47:
         22:7a:6a:1f:e7:f2:d0:d4:f6:6f:67:52:99:2c:89:82:3d:2c:
         df:af:62:55:9f:0f:88:10:b3:e5:e0:db:4d:d9:0c:6e:45:c6:
         54:55:d4:69:63:6c:f2:6e:fa:38:88:5b:65:e0:2d:e1:04:97:
         53:98:21:aa:14:4f:00:a4:4e:67:1c:5a:9d:8e:82:6d:bb:c9:
         37:03:69:66:43:12:d6:2e:6b:84:1c:46:06:88:83:1b:27:92:
         96:05:98:0c:2d:44:94:45:63:a9:79:5d:74:6f:5c:62:5d:9e:
         d1:a2:78:26:98:3f:f5:eb:5b:23:86:31:19:e7:fd:13:ca:99:
         8a:43:0c:3c:8b:0d:6d:3c:db:7a:58:de:c5:a3:f7:03:df:b8:
         d6:eb:18:45:94:a2:ac:7d:89:fc:f2:49:fb:57:3f:af:70:89:
         52:7e:f4:34:a1:91:52:af:87:fd:11:2b:4d:ad:ca:d9:fa:4a:
         02:3f:d3:06:67:83:eb:14:d1:5e:ec:51:88:7c:a6:c6:94:e6:
         1a:84:16:97:7e:59:04:db:7a:3b:82:8f:83:42:f0:5d:aa:d9:
         80:3b:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:58:13 2025 by rpki-client