This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          7T0qhCvx1xUQ0ejRAS+BE16gGRrpbPoO/i/qSb56WPY=
Subject key identifier:   67:3D:93:53:E0:31:16:A8:AA:2D:C5:46:1E:7F:24:AE:D1:6D:5E:10
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       3A5FE6902F1DAAEF84A15D5D9C487D0069892EAC
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 22 Dec 2025 10:00:01 +0000
ROA not before:           Mon 22 Dec 2025 09:55:01 +0000
ROA not after:            Mon 21 Dec 2026 10:00:01 +0000
asID:                     9341
IP address blocks:        103.180.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
                          rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Dec 2025 11:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:5f:e6:90:2f:1d:aa:ef:84:a1:5d:5d:9c:48:7d:00:69:89:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Dec 22 09:55:01 2025 GMT
            Not After : Dec 21 10:00:01 2026 GMT
        Subject: CN=673D9353E03116A8AA2DC5461E7F24AED16D5E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:f7:ca:5c:1a:bb:b0:a8:4c:26:0f:f4:2a:
                    97:30:18:23:c5:8c:3d:a2:79:0f:6d:37:23:14:e7:
                    17:dc:e0:2a:1a:28:77:a3:06:60:44:6f:34:bc:eb:
                    81:2b:3f:91:03:1f:ff:b0:fc:c9:ff:9a:3d:64:a6:
                    e7:51:2a:de:7f:2d:2a:62:4f:48:56:38:0d:df:cd:
                    aa:de:48:e0:aa:b8:e2:80:76:6e:3b:d5:96:74:46:
                    e6:31:c2:06:42:8e:fb:32:30:0e:7c:3a:5e:65:20:
                    41:91:c5:95:49:d9:40:c0:dd:85:34:d5:86:e3:96:
                    b4:81:bc:e4:95:f7:e2:49:2a:99:70:8a:a7:d1:d2:
                    62:3a:1e:d8:ad:30:aa:cc:c4:b6:b6:c7:b1:34:ee:
                    6b:3b:6f:2a:a9:b3:d5:3d:7d:5d:74:5f:98:49:d4:
                    0a:11:68:f1:df:b2:9a:ae:5c:1b:4a:dd:e1:56:f9:
                    7a:df:7a:a1:a6:8f:1c:67:5d:85:30:99:50:1d:2b:
                    0b:4b:62:fe:d9:87:60:df:9e:6a:e3:77:ac:ec:ee:
                    23:92:91:30:10:ff:37:c2:fc:7e:5a:62:06:05:e7:
                    a9:d1:54:b6:6f:37:be:b6:a6:cc:08:53:8e:0a:35:
                    a5:c5:9e:47:4b:c4:48:e6:b1:fb:0e:31:df:a0:76:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:93:53:E0:31:16:A8:AA:2D:C5:46:1E:7F:24:AE:D1:6D:5E:10
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:38:7c:1c:f9:82:6a:b7:48:29:63:73:ae:81:37:3a:a9:83:
         e4:6d:de:17:d9:55:14:04:c2:5f:ad:c4:34:53:eb:8e:9d:e0:
         09:fc:16:10:97:a3:e4:e0:2e:07:45:f7:28:3b:07:f7:11:d7:
         08:aa:b9:d9:99:f8:0e:08:5b:d5:21:10:31:b7:32:5d:66:14:
         3a:56:7c:a7:56:e0:83:9b:79:50:2d:ef:a2:24:f7:fd:2c:37:
         d4:25:fd:ab:9b:42:9a:b1:94:2e:c3:b5:65:ad:03:1a:03:ee:
         ca:20:f6:0b:30:89:72:66:b6:98:2e:c4:a2:1a:f4:6c:45:73:
         14:f1:d0:a1:1d:52:54:ab:3b:8f:d0:76:bf:e1:0b:a7:6d:6a:
         c7:1f:90:0a:9c:d8:4c:33:8b:3d:1d:3a:44:54:3a:22:6f:44:
         6d:3b:6f:a7:e6:86:d7:9c:dc:47:25:06:c4:71:f8:83:56:e6:
         9e:56:21:e5:08:0e:36:3c:92:b5:25:f2:6f:30:3e:90:77:ce:
         62:3a:e9:f1:21:37:dc:41:ca:48:f1:49:2d:8e:e7:f1:c2:b0:
         71:b3:fe:22:60:c9:77:84:05:7a:c0:b2:24:ed:21:c9:77:49:
         19:22:19:67:78:f9:f4:70:1b:b9:5e:f2:f6:6d:bd:01:1b:ce:
         6a:d9:2c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 06:26:32 2025 by rpki-client