This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          ovmFPVguepwh1KZwLVmisbEmSv3ixrZq0Db1FT9lUSk=
Subject key identifier:   53:29:31:85:B4:8C:08:FC:A0:AF:A1:BE:97:1B:60:69:B9:19:78:FB
Certificate issuer:       /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial:       068BA7D22C9C760773DCDDF3173C22A15406E31C
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa
Signing time:             Thu 18 Dec 2025 09:00:02 +0000
ROA not before:           Thu 18 Dec 2025 08:55:02 +0000
ROA not after:            Thu 17 Dec 2026 09:00:02 +0000
asID:                     131769
IP address blocks:        103.102.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
                          rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 19:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8b:a7:d2:2c:9c:76:07:73:dc:dd:f3:17:3c:22:a1:54:06:e3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
        Validity
            Not Before: Dec 18 08:55:02 2025 GMT
            Not After : Dec 17 09:00:02 2026 GMT
        Subject: CN=53293185B48C08FCA0AFA1BE971B6069B91978FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:ef:7c:25:05:91:1d:fd:aa:4b:8f:a1:3a:
                    79:3b:67:cf:7a:e7:36:37:81:e5:ce:cd:c3:ce:4b:
                    5b:d7:ec:a2:f4:fe:06:20:35:78:d0:b1:5b:41:63:
                    2c:b7:87:2d:6b:3a:12:9b:3e:45:6d:87:c4:c3:03:
                    91:07:af:f4:02:72:dd:09:1d:32:a3:8f:17:b5:75:
                    f6:ff:ed:fd:fe:45:cc:17:9a:29:4b:b6:a4:26:fe:
                    4d:cd:9a:c7:b4:ce:4b:2f:e1:48:f7:29:22:14:9f:
                    66:d3:37:48:c7:85:63:81:fc:21:16:c9:25:51:1c:
                    2f:db:e2:e7:15:2b:b8:17:60:2e:8a:74:93:d4:79:
                    37:f2:c1:17:61:48:10:88:65:e5:46:66:bf:e1:b7:
                    bd:3d:e3:0b:b8:48:11:4a:ec:80:4d:5d:89:56:e0:
                    d9:71:43:84:96:f1:b1:c7:84:f5:63:b6:ed:5f:a2:
                    2e:99:1f:05:43:83:91:7d:5d:eb:d8:02:20:d9:ed:
                    30:78:fc:10:e1:38:e6:83:68:5a:a2:55:a5:82:42:
                    6f:c0:e5:68:2b:a0:77:c0:36:c5:dc:de:74:2e:33:
                    d7:d1:84:ed:ab:26:cf:95:b7:ef:6b:c0:c8:41:a2:
                    58:27:53:c8:8d:d9:ec:1a:02:f6:28:3d:85:31:ee:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:31:85:B4:8C:08:FC:A0:AF:A1:BE:97:1B:60:69:B9:19:78:FB
            X509v3 Authority Key Identifier:
                keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234392e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9b:7f:e7:71:8a:20:aa:13:dd:5c:7c:96:6a:66:e3:9e:09:
         c1:5f:47:12:85:7c:c6:4e:e8:be:91:4f:7f:af:ef:d3:8b:39:
         95:65:a9:0c:70:a7:c1:59:ae:b1:b8:44:98:8d:f7:e7:e2:54:
         64:7e:ac:bf:f3:5d:22:1e:44:eb:56:ea:00:e5:26:ff:98:e1:
         88:d6:1d:d5:f1:92:ed:08:28:e5:06:c1:ad:d9:19:5c:b4:25:
         c1:d8:c3:99:92:80:78:2a:e7:18:68:80:03:9c:06:8b:62:cf:
         ae:e9:f6:4a:a1:0a:56:d5:b1:ae:47:aa:a4:b4:be:cc:b4:d4:
         44:ed:85:f0:4e:e9:80:9e:2e:00:d6:e7:ff:12:68:c7:32:2a:
         75:ed:e8:d2:73:89:b2:cb:0c:21:65:08:fa:fb:bd:48:7f:b5:
         7e:1b:e4:32:1e:a7:f6:bb:04:0d:e4:79:6a:2e:af:60:3f:27:
         e2:ba:de:5f:96:2e:d9:04:53:c3:c1:73:88:bc:d3:21:ad:2c:
         6d:98:31:33:96:b6:7a:83:b0:d5:cd:ee:06:f2:5e:e5:50:48:
         5c:18:53:91:31:74:5e:9a:7a:1f:8b:d9:dc:58:59:05:67:74:
         89:5c:ff:ad:70:2e:72:d4:ea:71:bb:69:59:40:0e:ff:7b:be:
         d0:74:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:19:51 2025 by rpki-client