This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa
File:                     3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa (raw, json)
Hash identifier:          jokIBMvTnzkYHW/XHAeX7hxaG3x1GkvBjnS33CW0bpg=
Subject key identifier:   F7:A6:D6:58:12:E5:89:0A:61:FB:A3:DB:F8:76:9B:FE:A8:87:BD:61
Certificate issuer:       /CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
Certificate serial:       0825E09731036F30B9BE7C5F9B3B68806CBFBEA7
Authority key identifier: B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa
Signing time:             Thu 18 Dec 2025 23:00:01 +0000
ROA not before:           Thu 18 Dec 2025 22:55:01 +0000
ROA not after:            Thu 17 Dec 2026 23:00:01 +0000
asID:                     149737
IP address blocks:        103.188.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl
                          rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 03:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:e0:97:31:03:6f:30:b9:be:7c:5f:9b:3b:68:80:6c:bf:be:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2
        Validity
            Not Before: Dec 18 22:55:01 2025 GMT
            Not After : Dec 17 23:00:01 2026 GMT
        Subject: CN=F7A6D65812E5890A61FBA3DBF8769BFEA887BD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:7d:bc:51:eb:32:dc:3c:93:d9:7b:3d:d9:
                    96:ad:6f:e3:15:7b:1d:3c:6c:31:97:1a:55:ab:f7:
                    07:b5:fc:1d:b2:5d:97:c6:24:06:09:2c:69:c1:10:
                    31:5b:41:dc:d0:39:36:e2:7e:93:a0:be:1c:53:f8:
                    88:42:4c:bd:61:78:f9:c6:be:42:e5:78:cb:81:fb:
                    e7:22:27:92:0e:88:7d:f3:69:73:f8:ac:7b:ac:8f:
                    63:70:b8:7f:0c:eb:b2:64:00:79:74:ad:46:92:1a:
                    5f:45:ae:12:f8:c2:03:b7:86:42:5d:4f:ca:00:68:
                    ce:22:d7:a7:45:2f:4b:c8:67:90:5d:70:43:01:fe:
                    e1:57:51:27:40:d2:7f:6c:53:34:87:ec:13:29:ea:
                    3b:9c:4d:f4:a6:4f:f2:a8:33:ed:eb:8f:d9:50:45:
                    90:01:6a:be:f7:bf:07:66:6e:6e:89:a3:4f:60:98:
                    f8:0a:b9:29:c0:d7:f2:fc:aa:48:76:49:a6:f0:55:
                    59:ef:6d:9e:1b:08:0a:4b:ce:27:5f:4e:0d:38:d2:
                    85:5e:21:34:84:5e:e9:7b:03:5c:73:ab:cc:8a:7a:
                    a2:fe:a3:e7:c7:f5:f1:82:ed:59:35:a4:a7:9c:1d:
                    81:ec:4b:3f:71:ab:db:70:be:da:6f:c2:9c:22:c7:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:D6:58:12:E5:89:0A:61:FB:A3:DB:F8:76:9B:FE:A8:87:BD:61
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7B:71:FA:FA:24:FF:8F:A2:B1:A3:35:58:D8:0A:98:25:4D:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5E97B71FAFA24FF8FA2B1A33558D80A98254DB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9aed098b-49b1-4f53-b75a-273e11c25149/0/3130332e3138382e3235322e302f32332d3233203d3e20313439373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:ff:e9:24:12:71:47:94:96:77:ca:d7:3c:99:4d:e6:89:
         0f:15:45:1d:d2:0c:c6:a2:fd:c6:f0:4f:46:a8:9d:9a:90:57:
         46:7d:e1:cd:cd:fc:11:1e:70:8d:1e:c0:95:d7:d2:fc:e4:b0:
         26:b0:59:96:7a:24:b7:db:41:f2:ce:4f:6a:62:8e:98:c7:92:
         52:fb:06:7e:b5:3b:aa:46:80:c7:0f:a5:7a:a5:72:6f:d0:66:
         15:c5:d2:bd:7e:4a:58:00:33:07:18:24:90:4f:3e:56:5f:6b:
         e2:f1:09:b1:2f:27:fd:2b:e1:1e:74:10:79:92:24:16:15:d7:
         65:fc:47:41:cd:30:3a:27:03:b0:52:4e:27:58:f0:ef:2b:cd:
         9e:1b:c9:8e:6a:d3:44:7f:7d:68:d4:3f:94:4c:41:6e:c6:12:
         6d:39:17:bc:25:b8:47:04:5e:ac:36:a8:02:11:7c:06:73:ca:
         d2:61:9a:7f:e0:2f:be:bb:46:af:81:ba:8a:43:c1:85:f7:45:
         9e:d1:b2:80:4d:6b:73:f9:96:81:75:9f:52:ae:9d:db:80:46:
         12:59:14:02:6b:71:47:d0:f8:01:2e:6c:dd:43:03:c9:fa:d9:
         58:03:b6:8b:31:06:ad:20:40:e9:c3:1b:73:56:3e:b9:05:a3:
         d8:a5:f6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:20:33 2025 by rpki-client