This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa
File:                     3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=
Subject key identifier:   D6:C5:86:46:A2:DB:3D:28:2D:69:06:F7:2F:D4:CF:B5:44:8F:A3:B2
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       52FA4A08260E1919D384C394CCFD935249E4612D
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa
Signing time:             Wed 10 Dec 2025 06:00:03 +0000
ROA not before:           Wed 10 Dec 2025 05:55:03 +0000
ROA not after:            Wed 09 Dec 2026 06:00:03 +0000
asID:                     58495
IP address blocks:        103.160.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 11:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:4a:08:26:0e:19:19:d3:84:c3:94:cc:fd:93:52:49:e4:61:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Dec 10 05:55:03 2025 GMT
            Not After : Dec  9 06:00:03 2026 GMT
        Subject: CN=D6C58646A2DB3D282D6906F72FD4CFB5448FA3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6d:5d:ce:92:f8:da:1b:3d:01:4e:ff:e0:71:
                    29:a4:cb:d7:22:4d:36:9c:a6:2a:d9:b8:78:b3:e1:
                    f9:fc:e1:28:e7:b8:89:20:5b:a9:c0:6f:e3:71:6d:
                    fd:ff:52:a1:b4:3a:2b:81:36:de:60:44:ef:aa:fc:
                    50:47:1c:52:68:72:d5:59:5e:3b:f6:57:31:28:8b:
                    96:30:ba:86:a7:54:1f:55:1b:be:c0:5a:f1:f0:48:
                    b9:de:a3:67:c8:a3:63:e1:eb:ae:6a:59:3b:38:89:
                    45:fb:d9:a1:55:c0:03:69:ae:7d:ea:0a:67:5f:f2:
                    2f:00:b9:e3:88:0b:b6:89:6e:23:05:10:b5:db:64:
                    fd:ea:eb:86:25:b6:9c:81:3c:cb:28:6d:f9:e8:3f:
                    45:23:fd:2c:61:a5:ee:41:c3:f0:f8:1d:28:58:8d:
                    67:e5:62:d7:cf:1d:57:c9:2e:8d:0b:25:f8:e4:93:
                    54:19:5d:76:80:73:e1:54:c5:ff:65:a0:f0:5f:4b:
                    f8:27:cc:7b:31:66:41:d6:f3:d2:c4:2b:44:17:6c:
                    cd:bf:b5:c9:8d:61:fe:19:f7:22:03:42:a9:54:9a:
                    5c:28:34:1b:32:7d:54:69:09:c0:ec:92:f3:35:fd:
                    88:b4:f9:d2:14:b3:88:06:09:f6:ad:ad:6b:33:cb:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C5:86:46:A2:DB:3D:28:2D:69:06:F7:2F:D4:CF:B5:44:8F:A3:B2
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:24:5d:cb:f3:2e:7c:68:b9:53:07:ba:49:31:17:3e:be:4f:
         29:13:a6:44:13:88:ef:33:a3:0e:07:aa:ef:f9:07:c6:64:6e:
         90:7c:81:05:4e:06:33:67:06:25:ed:23:a9:87:8a:7e:d6:b9:
         7f:28:36:40:73:61:60:e8:4a:25:95:fb:c6:c4:27:ff:37:7e:
         84:ad:06:c7:3d:c6:0e:a6:10:85:b9:13:64:70:a9:14:49:77:
         c4:53:4e:6b:4c:71:ae:04:f6:ad:8d:49:68:65:d5:3d:84:b6:
         3a:d4:60:3a:ce:9d:96:98:32:10:35:59:36:97:14:53:68:24:
         e3:08:e3:53:ef:31:22:25:0e:40:ac:da:2d:0f:3b:45:39:7d:
         ab:99:1d:32:9d:77:4a:74:e9:d6:ce:d5:33:4e:18:7e:09:b9:
         d2:ec:0d:37:e5:33:61:80:b9:81:18:21:88:b3:bd:19:d1:6e:
         c0:38:74:8f:c4:6c:40:28:bb:50:5a:98:2b:57:d4:40:be:d2:
         3c:6b:1e:b9:61:57:65:d3:0e:23:1c:79:e5:fb:ae:b1:fd:67:
         23:c8:a4:5f:ee:ba:b4:8e:1b:c5:24:d6:29:57:9d:22:7f:bf:
         56:a3:b2:76:97:58:d9:91:4d:5d:6b:47:17:78:a2:89:80:53:
         e7:05:2c:c3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUvpKCCYOGRnThMOUzP2TUknkYS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC
RjFFNjZFNTAeFw0yNTEyMTAwNTU1MDNaFw0yNjEyMDkwNjAwMDNaMDMxMTAvBgNV
BAMTKEQ2QzU4NjQ2QTJEQjNEMjgyRDY5MDZGNzJGRDRDRkI1NDQ4RkEzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbV3OkvjaGz0BTv/gcSmky9ci
TTacpirZuHiz4fn84SjnuIkgW6nAb+Nxbf3/UqG0OiuBNt5gRO+q/FBHHFJoctVZ
Xjv2VzEoi5YwuoanVB9VG77AWvHwSLneo2fIo2Ph665qWTs4iUX72aFVwANprn3q
Cmdf8i8AueOIC7aJbiMFELXbZP3q64YltpyBPMsobfnoP0Uj/Sxhpe5Bw/D4HShY
jWflYtfPHVfJLo0LJfjkk1QZXXaAc+FUxf9loPBfS/gnzHsxZkHW89LEK0QXbM2/
tcmNYf4Z9yIDQqlUmlwoNBsyfVRpCcDskvM1/Yi0+dIUs4gGCfatrWszy7QlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1sWGRqLbPSgtaQb3L9TPtUSPo7IwHwYDVR0j
BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5
QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF
NjZFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2NDdhNmEyLTFhZDAtNDZjNy05
Y2FkLTU4YmJkNzFmYjVhNC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM2MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ClMA0GCSqG
SIb3DQEBCwUAA4IBAQCDJF3L8y58aLlTB7pJMRc+vk8pE6ZEE4jvM6MOB6rv+QfG
ZG6QfIEFTgYzZwYl7SOph4p+1rl/KDZAc2Fg6EollfvGxCf/N36ErQbHPcYOphCF
uRNkcKkUSXfEU05rTHGuBPatjUloZdU9hLY61GA6zp2WmDIQNVk2lxRTaCTjCONT
7zEiJQ5ArNotDztFOX2rmR0ynXdKdOnWztUzThh+CbnS7A035TNhgLmBGCGIs70Z
0W7AOHSPxGxAKLtQWpgrV9RAvtI8ax65YVdl0w4jHHnl+66x/WcjyKRf7rq0jhvF
JNYpV50if79Wo7J2l1jZkU1da0cXeKKJgFPnBSzD
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:19:34 2025 by rpki-client