This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa
File:                     3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          MZSp8BNqe8zJ+1B8Y+uVUUB7aRgdsoqlbK7HkPjCz8s=
Subject key identifier:   74:F1:95:5E:B1:C6:1D:13:4C:1D:AB:EF:FC:91:9C:7E:19:D5:D6:F1
Certificate issuer:       /CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
Certificate serial:       6BB3B815A4B7C5F277E7817B70AE58898D095B3E
Authority key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa
Signing time:             Fri 12 Dec 2025 08:23:02 +0000
ROA not before:           Fri 12 Dec 2025 08:18:02 +0000
ROA not after:            Fri 11 Dec 2026 08:23:02 +0000
asID:                     132647
IP address blocks:        103.19.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl
                          rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 02:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b3:b8:15:a4:b7:c5:f2:77:e7:81:7b:70:ae:58:89:8d:09:5b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6
        Validity
            Not Before: Dec 12 08:18:02 2025 GMT
            Not After : Dec 11 08:23:02 2026 GMT
        Subject: CN=74F1955EB1C61D134C1DABEFFC919C7E19D5D6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:94:4c:43:72:1b:92:9b:9b:f4:74:8b:49:
                    86:ee:a7:b4:27:a3:dd:05:ea:1b:e5:5e:36:7a:07:
                    7b:03:f1:42:59:a7:40:2e:3f:d3:2f:4f:b4:85:ef:
                    a5:fb:1c:2f:f0:1c:ec:13:a6:7a:e3:95:ff:01:1f:
                    37:89:44:f5:dc:14:1e:07:05:9d:61:17:38:b8:a8:
                    f4:8a:db:b5:03:b5:35:fc:03:b8:75:94:7f:f5:8b:
                    f7:49:fd:25:c4:2a:36:20:35:dd:c1:26:fc:2a:1a:
                    c2:11:01:3b:71:63:c9:c6:3f:f9:84:de:2f:3f:5f:
                    e7:40:60:09:66:11:32:10:83:0b:94:6b:fb:f0:fa:
                    d7:f1:06:ca:32:f3:1c:53:a8:d2:5c:6b:a2:87:fe:
                    77:52:d7:09:61:6b:cd:7e:5a:90:12:bb:5f:2a:7c:
                    51:ae:5b:a5:35:b7:71:bf:0b:84:9a:87:a5:ce:63:
                    db:25:94:d1:87:13:32:1e:58:df:96:86:a5:3e:25:
                    db:a4:90:89:81:b2:37:9f:e3:50:ad:8f:4d:ac:42:
                    ff:c9:bb:f0:5b:c7:3a:2c:14:d1:64:78:3b:33:0a:
                    95:f4:63:43:6e:a1:d7:ce:f9:61:72:28:be:ed:89:
                    be:20:a1:19:11:96:f6:39:82:9b:d7:6d:ff:de:ef:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:95:5E:B1:C6:1D:13:4C:1D:AB:EF:FC:91:9C:7E:19:D5:D6:F1
            X509v3 Authority Key Identifier:
                keyid:EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137362e302f32332d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:57:e1:84:eb:e7:46:9b:ca:d2:98:86:09:8f:9a:f0:08:
         be:bf:9b:21:78:a0:cf:ea:ec:4d:7c:8d:37:e9:33:cd:e8:93:
         96:49:d4:27:db:a3:89:ad:85:db:d8:d5:b1:d0:bb:34:22:a0:
         b5:50:50:b1:16:10:1f:ce:a1:a6:a6:d9:d2:16:d4:39:d6:b9:
         0e:ea:11:db:22:48:54:46:16:1c:f1:f9:99:30:4f:54:f0:f5:
         16:e5:55:31:76:1d:59:d8:df:59:af:f8:c8:b0:1f:a8:3c:c8:
         a8:62:47:ac:0d:10:54:ff:50:e6:60:1a:3c:d5:9d:f6:bb:c2:
         6e:09:8e:97:d9:7b:03:ae:63:84:39:aa:a4:c8:74:1f:e3:df:
         d8:57:fb:d4:c7:98:b9:90:1f:4d:fb:4e:28:43:b6:2b:f3:38:
         12:51:7d:8d:d5:08:ef:2d:6d:8d:93:01:5a:0d:30:e4:50:89:
         38:31:6f:ac:dd:b2:29:38:97:ae:0b:5c:68:f5:af:fd:7c:9f:
         50:2e:27:50:d8:69:e4:55:91:f6:20:48:92:53:41:3d:6c:f1:
         29:29:e6:2a:34:39:f7:b8:fc:ad:68:a4:94:f9:a6:e2:5a:80:
         8a:b4:33:44:7a:c5:91:fc:d6:d6:a5:e1:9f:2b:f0:c4:58:0f:
         1f:55:7b:8b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUa7O4FaS3xfJ354F7cK5YiY0JWz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JE
RjdEQzFENjAeFw0yNTEyMTIwODE4MDJaFw0yNjEyMTEwODIzMDJaMDMxMTAvBgNV
BAMTKDc0RjE5NTVFQjFDNjFEMTM0QzFEQUJFRkZDOTE5QzdFMTlENUQ2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/ZRMQ3Ibkpub9HSLSYbup7Qn
o90F6hvlXjZ6B3sD8UJZp0AuP9MvT7SF76X7HC/wHOwTpnrjlf8BHzeJRPXcFB4H
BZ1hFzi4qPSK27UDtTX8A7h1lH/1i/dJ/SXEKjYgNd3BJvwqGsIRATtxY8nGP/mE
3i8/X+dAYAlmETIQgwuUa/vw+tfxBsoy8xxTqNJca6KH/ndS1wlha81+WpASu18q
fFGuW6U1t3G/C4Sah6XOY9sllNGHEzIeWN+WhqU+JdukkImBsjef41Ctj02sQv/J
u/BbxzosFNFkeDszCpX0Y0NuodfO+WFyKL7tib4goRkRlvY5gpvXbf/e7zfNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdPGVXrHGHRNMHavv/JGcfhnV1vEwHwYDVR0j
BBgwFoAU7J2YcqcQ/nE9xiJB1YdwO999wdYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMC9FQzlEOTg3MkE3
MTBGRTcxM0RDNjIyNDFENTg3NzAzQkRGN0RDMUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUM5RDk4NzJBNzEwRkU3MTNEQzYyMjQxRDU4NzcwM0JERjdE
QzFENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhjLWQxNTQtNDYxZS1i
Y2NhLWI2NmQyNjdjZmZjNy8wLzMxMzAzMzJlMzEzOTJlMzEzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxOwMA0GCSqG
SIb3DQEBCwUAA4IBAQB58FfhhOvnRpvK0piGCY+a8Ai+v5sheKDP6uxNfI036TPN
6JOWSdQn26OJrYXb2NWx0Ls0IqC1UFCxFhAfzqGmptnSFtQ51rkO6hHbIkhURhYc
8fmZME9U8PUW5VUxdh1Z2N9Zr/jIsB+oPMioYkesDRBU/1DmYBo81Z32u8JuCY6X
2XsDrmOEOaqkyHQf49/YV/vUx5i5kB9N+04oQ7Yr8zgSUX2N1QjvLW2NkwFaDTDk
UIk4MW+s3bIpOJeuC1xo9a/9fJ9QLidQ2GnkVZH2IEiSU0E9bPEpKeYqNDn3uPyt
aKSU+abiWoCKtDNEesWR/NbWpeGfK/DEWA8fVXuL
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:46:40 2025 by rpki-client