This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
File:                     3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier:          +ops944FqHIo70IoitO0Q7IiJloCzjfrMIBWX+/mlVM=
Subject key identifier:   58:71:59:39:10:DB:37:0F:66:18:9F:76:F1:AE:F8:E0:EB:06:03:3A
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       0644F8860868F2A1F45E08D37455B3D5856BB18A
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
Signing time:             Tue 09 Dec 2025 04:00:00 +0000
ROA not before:           Tue 09 Dec 2025 03:55:00 +0000
ROA not after:            Tue 08 Dec 2026 04:00:00 +0000
asID:                     133798
IP address blocks:        103.44.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Dec 2025 15:37:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:44:f8:86:08:68:f2:a1:f4:5e:08:d3:74:55:b3:d5:85:6b:b1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Dec  9 03:55:00 2025 GMT
            Not After : Dec  8 04:00:00 2026 GMT
        Subject: CN=5871593910DB370F66189F76F1AEF8E0EB06033A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:32:4a:56:ac:30:bd:a5:d3:bd:5d:1f:5d:2a:
                    42:95:17:a7:fd:ac:2e:9d:ab:28:0f:3d:ac:54:e5:
                    98:6f:a7:e5:f2:c9:81:37:bb:96:18:f7:1d:08:dc:
                    4b:a2:cf:38:29:ad:64:13:22:83:a9:f8:8d:6e:5a:
                    99:d1:13:e1:03:6d:66:40:d4:eb:6b:8e:29:a4:9e:
                    f2:2e:b1:27:e9:89:62:a4:38:2e:6c:c4:3e:37:06:
                    70:bb:6c:7a:2c:28:6c:5e:c5:74:82:2d:71:af:cc:
                    9a:97:06:4d:5f:53:a4:c3:e3:1a:31:c3:c1:b9:a5:
                    df:18:e4:06:69:52:49:b7:8b:fc:f0:80:76:31:3f:
                    96:00:2f:28:75:6c:94:89:0e:87:ed:48:14:95:4e:
                    7d:78:07:97:13:3f:66:03:4b:9f:2d:ba:9a:e5:1a:
                    27:f5:6e:72:09:6c:98:d8:07:80:15:e1:85:1d:c3:
                    73:79:34:5c:7a:7c:71:fb:a0:48:33:3a:53:a1:7e:
                    a3:a3:b6:7f:a0:72:45:dd:8a:6a:1c:c6:2c:b0:31:
                    d2:ad:3e:1c:94:31:0e:9e:7d:db:74:88:11:e1:2c:
                    fc:92:00:dd:1a:99:81:bf:7c:82:9a:7a:4a:1f:83:
                    8d:6d:b4:7d:0f:a0:d3:b9:8c:87:27:ab:ec:eb:30:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:59:39:10:DB:37:0F:66:18:9F:76:F1:AE:F8:E0:EB:06:03:3A
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:71:67:4b:ce:e2:0e:62:bb:c9:fb:86:57:90:67:df:47:
         78:68:bd:cb:1b:25:73:71:48:58:56:68:8d:cb:d4:6f:bf:30:
         1c:9f:de:92:f8:b4:b4:2c:15:95:d3:39:01:63:3e:ab:e1:c9:
         8a:35:15:83:a5:d8:a7:d5:2e:56:b6:a6:b7:c6:30:19:a7:50:
         8c:d5:70:1d:ca:62:ab:ae:63:8b:a4:5e:1a:f3:09:5b:12:9f:
         2d:c4:e0:e5:68:9a:55:9b:be:02:df:d1:8b:59:1b:14:97:bb:
         6f:e9:47:bd:fe:ca:00:1b:87:46:95:41:1c:14:79:5d:f1:9b:
         24:13:9e:67:04:6c:24:52:54:77:94:23:00:34:e4:8a:52:04:
         70:e4:3f:2f:01:62:25:48:9d:49:ec:50:dc:d3:bd:c7:77:e6:
         d2:e8:07:4f:77:2f:bf:fb:ce:b1:bf:16:46:66:13:e4:10:9e:
         e1:19:68:51:dd:09:d3:4e:1b:5e:66:4a:23:b3:81:f8:42:58:
         7a:0a:35:6a:9e:b7:28:ed:b3:7c:74:6c:dd:b0:c2:4d:4c:0e:
         ff:62:dd:60:f5:80:29:b7:99:5f:33:54:31:44:f1:34:3d:36:
         63:1b:3b:51:0a:e3:1a:92:05:96:c0:bb:58:06:f5:ad:5c:a2:
         20:b7:b1:51
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBkT4hgho8qH0XgjTdFWz1YVrsYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNTEyMDkwMzU1MDBaFw0yNjEyMDgwNDAwMDBaMDMxMTAvBgNV
BAMTKDU4NzE1OTM5MTBEQjM3MEY2NjE4OUY3NkYxQUVGOEUwRUIwNjAzM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMkpWrDC9pdO9XR9dKkKVF6f9
rC6dqygPPaxU5Zhvp+XyyYE3u5YY9x0I3EuizzgprWQTIoOp+I1uWpnRE+EDbWZA
1OtrjimknvIusSfpiWKkOC5sxD43BnC7bHosKGxexXSCLXGvzJqXBk1fU6TD4xox
w8G5pd8Y5AZpUkm3i/zwgHYxP5YALyh1bJSJDoftSBSVTn14B5cTP2YDS58tuprl
Gif1bnIJbJjYB4AV4YUdw3N5NFx6fHH7oEgzOlOhfqOjtn+gckXdimocxiywMdKt
PhyUMQ6efdt0iBHhLPySAN0amYG/fIKaekofg41ttH0PoNO5jIcnq+zrMB6LAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWHFZORDbNw9mGJ928a744OsGAzowHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMxMzAzMzJlMzQzNDJlMzMzNjJlMzAyZjMyMzIy
ZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcsJDANBgkqhkiG
9w0BAQsFAAOCAQEARh9xZ0vO4g5iu8n7hleQZ99HeGi9yxslc3FIWFZojcvUb78w
HJ/ekvi0tCwVldM5AWM+q+HJijUVg6XYp9UuVramt8YwGadQjNVwHcpiq65ji6Re
GvMJWxKfLcTg5WiaVZu+At/Ri1kbFJe7b+lHvf7KABuHRpVBHBR5XfGbJBOeZwRs
JFJUd5QjADTkilIEcOQ/LwFiJUidSexQ3NO9x3fm0ugHT3cvv/vOsb8WRmYT5BCe
4RloUd0J004bXmZKI7OB+EJYego1ap63KO2zfHRs3bDCTUwO/2LdYPWAKbeZXzNU
MUTxND02Yxs7UQrjGpIFlsC7WAb1rVyiILexUQ==
-----END CERTIFICATE-----
Generated at Thu Dec 25 03:05:02 2025 by rpki-client