This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/3130332e3138362e31302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3138362e31302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          zNJv1QUhUzOTOEHHZCRJRlOjmSzt57PuZJkeSUFwNrA=
Subject key identifier:   0A:C6:09:D1:7C:AB:6A:0C:DA:A1:2C:BB:D6:06:A3:FE:85:E0:8C:FB
Certificate issuer:       /CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E
Certificate serial:       2AD03A5A5D2A0DFF9CD9A8D953063AC33AD084D3
Authority key identifier: 5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/3130332e3138362e31302e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 15 Dec 2025 07:00:02 +0000
ROA not before:           Mon 15 Dec 2025 06:55:02 +0000
ROA not after:            Mon 14 Dec 2026 07:00:02 +0000
asID:                     4800
IP address blocks:        103.186.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl
                          rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 15:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:3a:5a:5d:2a:0d:ff:9c:d9:a8:d9:53:06:3a:c3:3a:d0:84:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A6B1428A87238DC9DA9B92890E1C9BF60CC094E
        Validity
            Not Before: Dec 15 06:55:02 2025 GMT
            Not After : Dec 14 07:00:02 2026 GMT
        Subject: CN=0AC609D17CAB6A0CDAA12CBBD606A3FE85E08CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:ba:26:74:74:1a:34:dd:5a:b2:91:af:0f:
                    e2:80:93:58:1f:03:6c:5a:c3:bc:3b:13:30:d0:0f:
                    18:5a:f7:0e:4d:4f:ed:3a:ec:54:c2:92:df:33:f7:
                    35:7c:72:fc:95:59:51:5c:2d:e0:26:63:46:63:07:
                    e3:17:43:96:bc:ac:dc:2f:a5:d1:c0:6a:22:a2:ac:
                    fa:80:85:27:0e:3e:bd:8f:1c:2a:ad:1f:51:b7:54:
                    71:54:0b:0d:3d:7c:c3:c3:88:23:ce:48:03:57:43:
                    b2:3c:a2:b7:20:66:8f:9c:51:49:9e:d4:19:a0:15:
                    9b:a3:9d:1d:1b:ea:dd:39:75:df:45:37:f3:20:76:
                    28:3b:9a:19:ec:8b:a0:55:cb:bf:9d:99:2b:93:1d:
                    90:3c:97:cc:a0:2c:0a:73:a7:96:6f:56:cc:cf:91:
                    b6:19:04:b9:73:0a:45:2c:77:03:df:65:d2:59:91:
                    56:6d:a7:78:4c:d4:94:1c:1a:9d:90:f9:61:6c:5b:
                    41:81:5b:8b:1a:c3:81:a8:26:d6:8b:58:f3:d0:6b:
                    75:7d:83:de:9e:02:72:7c:3a:34:88:db:cd:b9:69:
                    41:ac:41:f0:11:f0:57:43:3f:9d:c9:87:77:38:3f:
                    e3:11:00:92:70:09:55:a6:28:18:a6:12:c8:1c:89:
                    52:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:09:D1:7C:AB:6A:0C:DA:A1:2C:BB:D6:06:A3:FE:85:E0:8C:FB
            X509v3 Authority Key Identifier:
                keyid:5A:6B:14:28:A8:72:38:DC:9D:A9:B9:28:90:E1:C9:BF:60:CC:09:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A6B1428A87238DC9DA9B92890E1C9BF60CC094E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/886df791-0079-45f6-aa93-4c3a24305d85/0/3130332e3138362e31302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:46:c4:20:93:c5:9c:fc:82:ab:a7:db:a5:c2:ae:b1:3f:
         1b:27:d4:c4:06:6d:05:f1:16:0c:db:37:73:45:16:c3:83:5d:
         f6:52:1b:53:36:a2:d4:09:a0:6f:04:74:75:f3:fb:ee:f9:67:
         31:3e:8c:46:52:f9:36:bf:4e:8a:59:26:55:86:e9:5b:74:36:
         e8:c9:ae:c4:54:38:da:6f:4d:f5:0c:b9:50:0f:0d:a9:1f:53:
         b6:f6:a2:24:47:6c:9a:0f:58:b7:88:c8:c2:e1:f8:b3:fe:6e:
         5a:b8:29:7e:47:d8:c9:b1:93:62:86:02:13:d1:52:d3:09:fa:
         e4:43:92:5d:94:cf:6e:1e:89:e1:64:5d:c2:0c:d9:5c:3d:bc:
         b4:82:ad:f3:e0:ae:19:70:c3:9c:37:e1:25:ce:5f:56:04:51:
         32:b9:3d:37:3f:49:67:6b:91:5d:84:a3:8b:c9:ae:d0:73:61:
         01:b9:ad:a5:08:bd:4e:61:1e:7f:4b:bc:d0:bb:11:cc:bf:73:
         88:eb:39:96:21:7b:dc:a2:58:33:3a:b6:11:38:3f:fc:9c:a3:
         8f:55:76:92:d9:f7:77:c9:3a:fa:f6:fd:39:b1:18:e3:27:9e:
         f2:33:14:36:10:66:01:3b:2c:fe:aa:d8:04:ee:68:2f:c9:39:
         fa:6c:a4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:24:40 2025 by rpki-client