This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          0B/Z8RQPoiVOhRHwE1cqN2QWbyPN7hLbYCLPIcC7ksQ=
Subject key identifier:   88:BA:E5:43:E6:B3:FE:AC:C1:73:17:BB:9E:E3:8E:7D:00:2C:FA:E5
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       4371CCB2A69130D2ABB546D52A0E2B173FA26D7C
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 22 Dec 2025 10:00:01 +0000
ROA not before:           Mon 22 Dec 2025 09:55:01 +0000
ROA not after:            Mon 21 Dec 2026 10:00:01 +0000
asID:                     9341
IP address blocks:        103.180.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
                          rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:71:cc:b2:a6:91:30:d2:ab:b5:46:d5:2a:0e:2b:17:3f:a2:6d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Dec 22 09:55:01 2025 GMT
            Not After : Dec 21 10:00:01 2026 GMT
        Subject: CN=88BAE543E6B3FEACC17317BB9EE38E7D002CFAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:df:46:f6:1a:11:08:92:05:cd:06:38:0f:
                    d8:de:91:5c:e2:fd:87:64:86:d5:60:f3:b8:e7:ac:
                    8e:96:64:db:6f:e5:0d:dd:a0:36:b3:45:0c:6d:3c:
                    63:6d:82:b0:af:0e:72:fa:e8:35:61:29:77:4d:29:
                    8b:c8:38:15:26:cf:cb:29:8a:c8:8a:a6:bc:e1:32:
                    1f:a0:37:19:e0:15:9c:0a:df:5d:7b:00:30:d8:af:
                    52:e8:41:21:cf:e5:7b:ea:1c:18:e4:2b:9e:34:19:
                    99:9b:f7:7f:d0:cd:30:df:13:7e:f5:6a:a8:34:bc:
                    7e:a1:a8:32:af:01:ed:8c:2a:f8:9d:d3:92:c6:fe:
                    b3:49:5c:6c:a7:21:bf:b7:e7:c1:21:9a:cd:a5:51:
                    d3:9e:18:43:58:ee:22:2a:7f:08:43:0c:a9:0c:b0:
                    cb:13:f2:3d:c3:9f:f1:3a:b8:50:59:af:b0:d0:cc:
                    d5:ca:f8:be:d7:2f:47:e1:ab:63:80:55:42:ce:c3:
                    e4:cc:37:8b:b8:fc:d3:c9:2f:e7:68:c0:57:ea:c7:
                    28:21:3c:a5:2e:3a:ed:42:95:2b:84:d7:9b:62:cf:
                    57:10:8f:67:5d:03:bf:8a:5c:28:6d:d7:85:43:e3:
                    d1:ae:22:bb:4e:28:a4:15:68:02:60:42:34:2a:49:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BA:E5:43:E6:B3:FE:AC:C1:73:17:BB:9E:E3:8E:7D:00:2C:FA:E5
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:4c:6c:7d:a6:eb:69:8b:ca:9f:fa:a1:2f:17:ae:44:85:
         3f:07:3d:88:10:ab:23:a5:0d:62:55:eb:f6:56:51:54:7a:f0:
         c7:69:43:d5:ef:14:2c:3b:ed:bb:f3:09:cb:3e:9f:21:1b:ad:
         77:ff:be:ae:29:52:b5:ca:09:54:50:45:89:cb:51:df:5d:44:
         2a:26:d9:92:ea:08:38:bd:ab:df:22:ef:7e:e2:3d:64:1c:5f:
         cf:2c:e0:1b:6b:41:1f:14:6b:d6:ee:21:cb:19:22:f0:73:b9:
         e0:b4:86:cd:67:20:13:f5:8e:cc:f7:d1:e3:27:3f:8c:5c:cf:
         ab:7c:82:8e:98:e4:28:0d:05:bb:4e:45:0a:c8:fa:a4:53:cb:
         3e:73:89:f2:c5:74:d2:fc:13:cc:01:9e:a5:bb:15:eb:aa:c0:
         bc:d2:17:10:42:89:46:90:d1:3a:e2:4c:5b:36:4d:d2:7f:a7:
         9f:ea:a7:cd:cd:82:65:ac:1e:0a:3e:71:20:1b:cb:91:45:28:
         9c:85:75:17:1e:02:1e:36:35:f8:73:b4:13:05:6f:c6:bc:2f:
         a9:39:0a:48:89:19:d0:41:c4:ad:67:03:54:35:e5:6c:8e:5b:
         fc:a5:fe:d5:bb:b6:46:6a:a1:5f:46:56:b0:a8:d1:7e:e1:93:
         73:7e:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 05:44:40 2025 by rpki-client