This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa
File:                     3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (raw, json)
Hash identifier:          2zfFRFwk/C19Fo4LWjVGEDAydcqPi8NpYbWAmcFYAik=
Subject key identifier:   D3:8B:D9:3E:BF:1F:A9:6F:38:03:3C:51:21:0A:E3:42:49:AB:A1:39
Certificate issuer:       /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial:       53883D42686076588AC73F403EFEE97071BCAB76
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa
Signing time:             Thu 18 Dec 2025 07:00:00 +0000
ROA not before:           Thu 18 Dec 2025 06:55:00 +0000
ROA not after:            Thu 17 Dec 2026 07:00:00 +0000
asID:                     142347
IP address blocks:        103.101.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
                          rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 07:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:88:3d:42:68:60:76:58:8a:c7:3f:40:3e:fe:e9:70:71:bc:ab:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
        Validity
            Not Before: Dec 18 06:55:00 2025 GMT
            Not After : Dec 17 07:00:00 2026 GMT
        Subject: CN=D38BD93EBF1FA96F38033C51210AE34249ABA139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:c5:7a:1f:6f:fb:5c:31:70:24:15:43:1e:
                    07:b6:36:30:8b:c7:67:50:05:4c:72:c5:4f:60:2f:
                    83:7b:18:a4:92:f0:2d:27:6f:79:73:db:98:8c:8f:
                    4b:2d:02:0a:ff:f1:a7:59:2e:3a:9b:43:67:13:a0:
                    9e:c5:5d:f8:d0:5d:5c:d5:13:ea:0d:0d:77:dd:c9:
                    14:67:11:bd:1c:32:b9:de:7d:13:a0:b9:21:69:67:
                    c5:5f:82:6f:e7:59:d1:6f:36:2d:ab:53:7d:60:33:
                    91:e3:3d:12:90:94:23:75:38:34:b3:98:2a:16:fb:
                    85:c9:e6:2a:a4:36:33:1d:8f:58:b7:2e:4c:29:a1:
                    ba:c7:00:26:33:b8:10:a2:6d:3d:82:d2:ab:1a:fc:
                    d5:0d:77:ea:86:68:61:d0:b6:6b:6d:22:0f:0b:d4:
                    3d:42:18:27:a0:75:fe:c3:1d:a6:4f:93:b7:f2:64:
                    e6:9c:04:96:41:db:39:5a:0f:62:a9:c8:be:2d:42:
                    9c:bf:b2:ee:09:97:14:63:ec:40:3c:ab:bf:5a:b7:
                    45:74:58:1f:ca:83:e7:6e:ce:97:06:41:48:e0:02:
                    93:b6:5b:52:2a:39:85:b3:77:56:29:d7:93:99:88:
                    07:7d:0f:60:b8:02:4b:f0:0d:70:ff:20:dc:13:f4:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8B:D9:3E:BF:1F:A9:6F:38:03:3C:51:21:0A:E3:42:49:AB:A1:39
            X509v3 Authority Key Identifier:
                keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:4b:93:c3:68:9d:96:3b:b5:48:21:9b:17:7d:11:ec:f5:
         45:33:41:46:cc:a1:67:dc:cf:f7:e2:88:15:54:c3:27:f0:1b:
         dc:c9:13:d7:2b:74:98:d4:04:4e:0a:74:6e:3f:9b:d0:75:ef:
         e8:da:b4:2e:90:58:6d:f9:c4:13:49:1d:f6:95:eb:2b:dd:81:
         e0:c4:f6:a5:22:5e:f9:c3:96:d4:5c:14:92:bd:fe:02:60:6c:
         19:f9:bb:95:96:f3:d1:0f:7b:0d:e7:89:72:4c:b1:af:e1:9a:
         48:44:f8:5f:bb:2c:d2:39:42:f8:ae:c6:e5:17:50:27:cd:70:
         7a:0d:b0:53:e8:f5:46:b4:74:e9:5a:e7:0a:29:24:c9:9c:a2:
         9a:01:63:fc:d1:36:d2:14:af:85:41:aa:35:0a:9e:3d:10:2b:
         dc:5a:43:26:24:72:da:85:20:76:62:3a:51:44:49:88:e0:6a:
         11:1e:49:06:46:61:85:37:0f:eb:6b:83:7d:b3:3e:7f:01:59:
         42:38:fa:07:c1:98:a0:df:59:4d:df:bc:b7:f8:a3:c6:78:ea:
         20:ad:19:1b:94:ee:8b:1d:49:66:31:97:0e:d1:70:dc:5d:26:
         59:76:bd:89:05:8a:90:ec:90:23:67:93:11:f8:50:39:98:2a:
         6b:5e:b9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:58:24 2025 by rpki-client