This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          qUEFUeyx6PFKDpLj8lLr44AqFpnGjzqjL8vcRbAqP5U=
Subject key identifier:   49:DE:A7:12:DA:68:9F:38:6E:21:4B:62:90:C1:D6:87:46:E3:D8:88
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       5BD3F6AF054DE61804E8F5156BFD29520C09A1F4
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
Signing time:             Mon 22 Dec 2025 09:00:01 +0000
ROA not before:           Mon 22 Dec 2025 08:55:01 +0000
ROA not after:            Mon 21 Dec 2026 09:00:01 +0000
asID:                     9341
IP address blocks:        103.180.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
                          rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 21:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d3:f6:af:05:4d:e6:18:04:e8:f5:15:6b:fd:29:52:0c:09:a1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Dec 22 08:55:01 2025 GMT
            Not After : Dec 21 09:00:01 2026 GMT
        Subject: CN=49DEA712DA689F386E214B6290C1D68746E3D888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:d0:aa:11:0e:df:f0:f6:f4:0e:3a:82:3e:
                    50:4b:d8:39:f9:9a:05:42:86:09:c8:94:ed:d4:83:
                    a7:f8:8a:3a:a8:65:74:ab:3e:29:ca:f2:7b:d3:54:
                    3b:68:28:6d:31:30:67:2c:8e:46:fe:78:d8:89:6a:
                    59:38:80:44:ec:bc:b2:9a:8b:46:74:90:45:c4:8a:
                    91:88:79:7f:b7:73:44:eb:33:10:f3:7b:11:76:08:
                    33:8a:10:43:34:e9:d9:48:9f:07:3a:ac:19:2a:53:
                    80:6c:47:f9:f4:be:b2:7c:7a:5d:e7:ee:95:62:2f:
                    56:63:08:97:9e:06:1a:c4:31:02:a5:a4:cf:7c:d2:
                    ad:1f:d3:1e:08:ef:05:45:2c:bc:08:0d:d0:54:53:
                    fc:b9:03:50:51:14:dc:bd:1a:63:b2:59:39:7d:0c:
                    69:32:1d:5e:a4:4b:63:8b:0b:56:7e:cf:01:2f:4c:
                    34:98:61:fb:a3:58:9a:5c:0d:de:4b:ac:dc:4e:69:
                    ee:a5:b3:64:df:89:52:27:4f:12:28:cc:00:c6:97:
                    a7:9d:74:2d:60:d8:aa:56:87:3f:06:a4:87:89:17:
                    b4:77:d0:f1:95:70:7f:d2:32:62:24:dc:0b:72:81:
                    aa:01:b8:25:06:01:5f:2d:40:ab:5b:99:45:11:d6:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:A7:12:DA:68:9F:38:6E:21:4B:62:90:C1:D6:87:46:E3:D8:88
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:e5:7c:e3:5f:e7:42:34:ee:c6:39:49:ed:41:fd:78:e6:c2:
         fb:55:8c:1d:35:67:1e:43:51:70:d0:8d:3f:e1:ec:22:6f:7a:
         af:50:2b:ff:20:5f:3e:f4:9c:bc:e6:41:8f:86:89:17:3d:4f:
         97:24:a8:4d:af:86:c9:58:4c:6d:e0:7f:25:3c:27:06:95:7f:
         5a:02:d5:1e:b1:e6:77:9c:0c:93:a2:40:52:a3:07:3a:3b:8d:
         ca:01:42:e2:dc:52:8a:f5:4e:a8:60:b6:3d:9c:8c:14:74:8d:
         c8:b4:3b:ab:5c:c3:e1:ac:50:e5:d7:eb:85:39:27:03:c4:34:
         57:b6:47:b1:12:8e:f0:f9:a9:c3:d1:bb:ab:c8:4d:e8:70:e0:
         71:99:37:b4:b3:c3:9a:58:0c:98:ae:41:27:0a:67:bc:ed:bf:
         68:16:af:ad:7e:b2:f3:96:bd:24:c0:83:a1:54:b5:ea:7b:ca:
         86:af:0e:a4:58:34:4c:96:14:ec:10:c4:38:50:0d:62:ee:d7:
         3c:d7:ba:de:db:69:ed:49:bb:cc:71:77:bf:f1:28:0e:2c:03:
         ff:45:4e:dd:d8:cc:c9:1f:fa:6c:84:de:2a:0c:7f:2d:c2:f2:
         6e:69:85:06:de:98:a5:37:c5:57:5b:8e:29:54:b2:57:3f:cd:
         0a:91:ab:10
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUW9P2rwVN5hgE6PUVa/0pUgwJofQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMz
NjYzMkM4OTAeFw0yNTEyMjIwODU1MDFaFw0yNjEyMjEwOTAwMDFaMDMxMTAvBgNV
BAMTKDQ5REVBNzEyREE2ODlGMzg2RTIxNEI2MjkwQzFENjg3NDZFM0Q4ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQNCqEQ7f8Pb0DjqCPlBL2Dn5
mgVChgnIlO3Ug6f4ijqoZXSrPinK8nvTVDtoKG0xMGcsjkb+eNiJalk4gETsvLKa
i0Z0kEXEipGIeX+3c0TrMxDzexF2CDOKEEM06dlInwc6rBkqU4BsR/n0vrJ8el3n
7pViL1ZjCJeeBhrEMQKlpM980q0f0x4I7wVFLLwIDdBUU/y5A1BRFNy9GmOyWTl9
DGkyHV6kS2OLC1Z+zwEvTDSYYfujWJpcDd5LrNxOae6ls2TfiVInTxIozADGl6ed
dC1g2KpWhz8GpIeJF7R30PGVcH/SMmIk3AtygaoBuCUGAV8tQKtbmUUR1pAHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUSd6nEtponzhuIUtikMHWh0bj2IgwHwYDVR0j
BBgwFoAU/tSavNocnQl/Uq0m2AAcDDZjLIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2Y3NTA4OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9GRUQ0OUFCQ0RB
MUM5RDA5N0Y1MkFEMjZEODAwMUMwQzM2NjMyQzg5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMzNjYz
MkM4OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczZjc1MDg4LTA4OGUtNDFjMC1i
ZmNlLWVkYzY5YmVhZmQ0YS8wLzMxMzAzMzJlMzEzODMwMmUzMTM5MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe0wjANBgkqhkiG
9w0BAQsFAAOCAQEAb+V841/nQjTuxjlJ7UH9eObC+1WMHTVnHkNRcNCNP+HsIm96
r1Ar/yBfPvScvOZBj4aJFz1PlySoTa+GyVhMbeB/JTwnBpV/WgLVHrHmd5wMk6JA
UqMHOjuNygFC4txSivVOqGC2PZyMFHSNyLQ7q1zD4axQ5dfrhTknA8Q0V7ZHsRKO
8Pmpw9G7q8hN6HDgcZk3tLPDmlgMmK5BJwpnvO2/aBavrX6y85a9JMCDoVS16nvK
hq8OpFg0TJYU7BDEOFANYu7XPNe63ttp7Um7zHF3v/EoDiwD/0VO3djMyR/6bITe
Kgx/LcLybmmFBt6YpTfFV1uOKVSyVz/NCpGrEA==
-----END CERTIFICATE-----
Generated at Thu Dec 25 02:44:08 2025 by rpki-client