This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa
File:                     3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa (raw, json)
Hash identifier:          VFgDZjjg61vRpBVfhYU5xtxK3HYEvLDpevoAQqYhxWQ=
Subject key identifier:   EC:E0:A4:2D:8B:83:96:F0:76:FD:CB:D3:A4:80:A0:C0:60:2D:2B:58
Certificate issuer:       /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial:       64A11F375C454A6AB4BF28AB902785A49C1E9DDE
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa
Signing time:             Fri 12 Dec 2025 05:00:01 +0000
ROA not before:           Fri 12 Dec 2025 04:55:01 +0000
ROA not after:            Fri 11 Dec 2026 05:00:01 +0000
asID:                     149682
IP address blocks:        103.184.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
                          rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 07:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a1:1f:37:5c:45:4a:6a:b4:bf:28:ab:90:27:85:a4:9c:1e:9d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
        Validity
            Not Before: Dec 12 04:55:01 2025 GMT
            Not After : Dec 11 05:00:01 2026 GMT
        Subject: CN=ECE0A42D8B8396F076FDCBD3A480A0C0602D2B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:52:a2:8b:39:9f:06:b4:c3:e4:09:cb:e5:
                    23:70:4a:6b:41:c7:ac:76:2f:c0:7b:95:1d:cf:72:
                    b6:1a:03:61:ac:9a:34:bd:c9:5a:d2:fd:20:91:39:
                    6f:ca:12:16:83:d3:02:37:e9:82:a8:33:6d:86:41:
                    07:cc:0b:0d:7b:5f:68:f6:c7:9c:90:f5:47:ed:31:
                    40:4f:3a:c2:11:e0:d4:6a:da:0e:49:4e:eb:92:c2:
                    3b:06:60:54:78:9e:49:dd:30:53:3a:fb:83:5a:ef:
                    d9:82:11:31:44:db:3c:5e:ed:27:f2:f3:7e:4e:64:
                    68:3e:b2:12:7b:07:70:ff:7e:be:64:f5:3d:d1:40:
                    df:72:67:c5:89:93:08:d6:df:1b:6f:55:00:6f:70:
                    9f:4f:34:e9:be:62:38:cd:54:7c:6b:02:91:a0:14:
                    98:bf:05:42:38:9c:0c:b8:17:d9:44:bc:c3:5c:84:
                    3c:ca:72:4d:eb:8a:05:7f:22:17:b6:e7:ca:38:7d:
                    e7:55:7b:f5:f9:c1:cb:97:d5:eb:4f:f5:9a:00:bc:
                    09:c5:98:78:ab:a4:78:35:99:76:75:96:1a:60:2f:
                    b5:ed:8e:99:8c:70:5a:80:c1:f5:47:b0:1b:ff:64:
                    8c:f8:d0:5e:32:a8:79:46:05:df:49:ed:e9:64:34:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E0:A4:2D:8B:83:96:F0:76:FD:CB:D3:A4:80:A0:C0:60:2D:2B:58
            X509v3 Authority Key Identifier:
                keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e20313439363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:65:64:e0:bf:b7:4c:85:3c:fd:1b:92:c3:c6:9e:f3:01:
         72:ee:a2:43:25:fd:a3:34:44:53:ae:01:17:bc:36:b4:52:db:
         4a:4d:0f:d0:f3:07:e7:55:8e:f9:13:23:4e:d3:0e:d8:43:15:
         02:0f:e7:c0:07:e7:f9:35:eb:ce:2f:bc:b6:41:e7:87:77:f4:
         81:b4:ac:72:0e:34:fa:2a:94:cb:f7:d7:f3:ea:7d:38:c5:5a:
         72:4e:a3:b5:89:40:34:df:0b:7e:fc:2b:f7:99:7a:85:99:ed:
         fc:a8:a9:c9:bc:a6:ed:4a:d0:99:de:80:2c:34:bb:d2:87:a6:
         e6:09:31:e7:0b:81:12:24:41:d6:37:6a:f7:0d:97:84:66:84:
         16:cf:21:7d:d9:0e:96:1a:1c:f5:24:78:f8:98:67:89:27:90:
         f7:02:5d:26:d9:b8:f5:b3:0c:31:a3:43:23:a9:29:b1:be:e9:
         cc:c0:24:17:3b:00:e4:0e:49:b7:b8:b8:6f:af:67:15:3e:90:
         26:c5:fd:b8:5c:5c:e9:12:8a:7f:dc:65:32:f2:5e:9d:78:0f:
         70:54:fa:b6:6b:d4:d4:b0:47:db:b7:6e:79:55:36:1e:01:e2:
         0c:49:8f:3f:8e:7a:e9:a5:37:8a:ad:9f:0e:7f:8b:bc:43:c2:
         44:22:3a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:51:31 2025 by rpki-client