This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa
File:                     3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (raw, json)
Hash identifier:          vGWib/ZMzGPAxY4ZeXyIPjhvX8AUDKQVTzcT6lw1mtE=
Subject key identifier:   E8:27:A1:31:81:04:61:93:F3:CB:CA:48:65:CE:55:BC:E3:32:52:BC
Certificate issuer:       /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
Certificate serial:       15072B5C77302EF55E5FC4C882BE60CEC4BAC78F
Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa
Signing time:             Mon 22 Dec 2025 09:01:52 +0000
ROA not before:           Mon 22 Dec 2025 08:56:52 +0000
ROA not after:            Mon 21 Dec 2026 09:01:52 +0000
asID:                     150513
IP address blocks:        103.139.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl
                          rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 17:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:2b:5c:77:30:2e:f5:5e:5f:c4:c8:82:be:60:ce:c4:ba:c7:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5
        Validity
            Not Before: Dec 22 08:56:52 2025 GMT
            Not After : Dec 21 09:01:52 2026 GMT
        Subject: CN=E827A13181046193F3CBCA4865CE55BCE33252BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:ac:e2:7d:7e:b4:3f:aa:4c:74:6d:c6:c4:
                    a0:e1:ab:e6:d3:b9:3b:3a:2b:02:33:14:61:99:62:
                    d9:4a:44:d8:d4:ce:55:9d:5b:fe:f3:02:b1:d9:88:
                    e9:b3:5f:f7:a6:09:90:9f:f9:f0:f6:e1:0c:68:b0:
                    a7:3b:c8:0e:8c:28:69:07:91:6a:8f:10:95:c1:92:
                    4c:06:7b:62:ac:e9:23:fe:fe:bf:94:e9:36:4e:de:
                    ef:a0:90:aa:e7:01:f2:53:0c:7d:04:3f:9a:16:84:
                    01:4a:7c:00:15:34:e0:90:48:79:98:35:7c:4f:d3:
                    f0:9b:97:68:1e:c5:31:49:2e:e3:35:ad:19:35:e7:
                    02:3f:7f:1f:aa:b0:84:f4:1b:0a:ef:49:f0:d9:e3:
                    6a:ba:ae:f1:2b:59:d8:d5:e7:84:10:ed:1a:25:9e:
                    f6:dc:e1:b5:75:15:43:99:ae:29:1f:fc:df:c0:3b:
                    08:15:4d:0b:18:5d:df:4d:e3:f4:9b:6d:ff:c4:36:
                    22:b1:22:1e:5c:fa:2e:06:a1:41:7b:a0:57:69:f3:
                    e2:b9:fb:20:5a:81:5f:d4:b9:0a:c9:28:69:82:0a:
                    f2:62:00:81:db:3a:6d:8e:8d:f6:8d:a7:b3:cb:bf:
                    3f:b7:3e:b9:2d:1d:3d:75:8d:4a:94:3b:01:bd:0d:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:27:A1:31:81:04:61:93:F3:CB:CA:48:65:CE:55:BC:E3:32:52:BC
            X509v3 Authority Key Identifier:
                keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:5b:4e:a5:63:90:03:6e:82:c6:71:5e:77:de:bb:49:e9:c1:
         67:4a:eb:c9:a1:5f:ba:5b:05:2f:12:f9:d6:2c:97:f3:a4:0b:
         55:b8:95:a4:19:14:3b:e5:40:9f:8b:dc:96:05:6a:3c:7c:6c:
         50:47:3e:67:b0:11:b7:8b:fe:69:dd:8c:91:77:fd:50:d0:3f:
         ae:39:02:77:34:07:0c:c6:09:c2:41:15:45:b8:1b:73:fd:99:
         79:04:08:16:bf:e4:1b:4b:0c:27:b1:3a:35:82:e7:09:94:0f:
         2c:80:aa:fc:98:ce:e7:88:84:37:ec:87:91:1e:cd:8f:0d:b7:
         36:2a:2a:77:60:21:b1:ce:ff:e7:50:de:81:f1:b4:be:4f:5a:
         cf:bd:fd:1b:3b:bd:b2:4f:30:f1:75:5f:f4:bc:64:bd:5c:15:
         92:c7:bc:35:40:ed:6c:c7:2b:e2:5f:77:e6:f3:40:c5:6f:6e:
         bb:ae:99:96:d9:51:31:aa:91:d3:e3:f5:1b:f9:14:96:1c:bc:
         9d:e0:d0:18:ef:89:21:7b:61:9e:fe:58:1e:18:32:dd:03:2c:
         4d:f8:aa:f3:41:07:6e:7e:a8:6e:0e:52:61:5f:96:55:9c:e1:
         38:6f:b7:df:9f:70:d3:dc:15:ef:38:64:a7:6e:9d:1b:87:c2:
         e4:24:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:06:58 2025 by rpki-client