This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa
File:                     3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (raw, json)
Hash identifier:          uL3SdGViVTN4twtj5fvseawDw7MHu5q6qt8dKfGSkqk=
Subject key identifier:   8E:7D:C1:67:F7:20:93:26:9F:73:67:0F:24:E7:AE:49:63:2E:D4:53
Certificate issuer:       /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
Certificate serial:       44A9806D379701DA7AA889E337393E8CF4A1BE65
Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa
Signing time:             Fri 12 Dec 2025 11:02:28 +0000
ROA not before:           Fri 12 Dec 2025 10:57:28 +0000
ROA not after:            Fri 11 Dec 2026 11:02:28 +0000
asID:                     150185
IP address blocks:        103.193.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl
                          rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 00:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a9:80:6d:37:97:01:da:7a:a8:89:e3:37:39:3e:8c:f4:a1:be:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
        Validity
            Not Before: Dec 12 10:57:28 2025 GMT
            Not After : Dec 11 11:02:28 2026 GMT
        Subject: CN=8E7DC167F72093269F73670F24E7AE49632ED453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:ad:74:8b:0b:78:f6:2b:20:06:c9:46:f1:
                    3b:1e:2a:82:b9:ec:8c:72:f5:85:b1:b2:20:a0:4f:
                    13:9f:f2:2d:12:82:2a:9b:65:d2:a1:5f:b0:0a:6f:
                    55:ab:4f:22:04:33:47:69:e2:74:07:96:50:e3:46:
                    9d:29:31:e0:22:f8:bc:d1:76:b7:a9:5c:00:9a:c6:
                    da:e7:1e:a0:0a:d4:ff:79:a6:8e:07:83:df:fa:7f:
                    ce:bc:27:9c:ab:f8:0d:02:80:97:0a:fb:5b:79:42:
                    0d:e8:b5:6f:ff:e5:eb:57:b0:9f:87:b3:87:97:dc:
                    45:b4:a8:84:76:a2:09:37:12:11:26:f8:2b:db:f4:
                    7c:df:97:f4:3d:ee:90:e1:22:d7:31:9a:2d:44:4d:
                    a1:3b:19:e2:83:49:d5:ec:31:78:bb:f5:ce:33:3e:
                    61:33:39:2f:84:af:02:1a:56:31:95:9b:4f:ee:b9:
                    ed:19:a0:c1:85:bb:50:2b:12:b7:2f:57:d5:57:cd:
                    77:f4:fb:d9:1d:3c:5c:e0:dd:ea:c4:52:20:d4:8d:
                    8b:6a:be:ed:9c:0c:60:e9:ce:86:02:7c:47:6b:ef:
                    3d:21:d9:d9:28:86:95:dd:d0:7f:73:e8:ba:86:a2:
                    e6:d8:1d:23:b6:9f:fc:d0:db:cb:1c:34:8e:5b:d8:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7D:C1:67:F7:20:93:26:9F:73:67:0F:24:E7:AE:49:63:2E:D4:53
            X509v3 Authority Key Identifier:
                keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:3c:c2:68:d2:90:f3:84:40:67:cd:03:e4:89:66:59:3f:
         7b:3c:4c:ee:bc:8b:0a:7d:9d:7c:cc:a1:19:01:da:2f:ab:aa:
         97:cc:41:fc:97:fb:f2:ea:c9:62:2b:7f:1b:83:5c:ee:58:bc:
         2d:5a:21:5c:68:a5:71:29:ce:1a:b6:53:0c:87:e2:f0:cc:15:
         a0:c7:70:09:70:e5:9f:e5:31:4d:3d:fc:2f:6b:68:4b:8b:fe:
         7b:dd:40:da:fd:f9:17:01:01:65:ab:42:a0:a0:3e:78:9c:b3:
         05:4e:44:c6:1d:6b:07:b6:e1:10:41:48:ef:f6:f2:b0:da:ce:
         2a:c3:bd:b7:da:25:cd:5a:d4:ad:5e:c9:14:70:17:a8:38:6e:
         1e:d0:e1:e5:49:4a:f2:92:96:4c:7d:75:36:c4:ac:11:1d:9b:
         6a:c4:29:07:53:b0:47:f6:ec:b7:00:c2:b5:ec:05:bc:d7:7a:
         cf:18:90:6a:19:84:68:35:80:7c:31:6f:f5:9a:4c:e3:c7:df:
         fa:6d:08:a2:c0:75:1f:ef:18:dc:d3:4d:90:a1:d3:ad:b2:d5:
         f1:5f:b3:7c:a9:3a:31:07:35:95:f9:ad:c3:68:20:9f:fb:4c:
         30:a9:41:d3:30:ff:ce:5b:48:ac:eb:b9:af:4b:11:30:4e:17:
         f5:4c:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:54:42 2025 by rpki-client