This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa
File:                     3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (raw, json)
Hash identifier:          DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=
Subject key identifier:   22:78:D6:3A:59:96:9D:F2:37:7D:2B:9A:CD:54:36:FD:98:FF:8A:5F
Certificate issuer:       /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
Certificate serial:       174592C6DF74DA45995EDB233154B1A3D9AA8466
Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa
Signing time:             Mon 08 Dec 2025 15:00:02 +0000
ROA not before:           Mon 08 Dec 2025 14:55:02 +0000
ROA not after:            Mon 07 Dec 2026 15:00:02 +0000
asID:                     151599
IP address blocks:        103.7.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl
                          rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Dec 2025 05:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:92:c6:df:74:da:45:99:5e:db:23:31:54:b1:a3:d9:aa:84:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
        Validity
            Not Before: Dec  8 14:55:02 2025 GMT
            Not After : Dec  7 15:00:02 2026 GMT
        Subject: CN=2278D63A59969DF2377D2B9ACD5436FD98FF8A5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:6d:ca:98:39:d9:40:22:20:3e:ba:64:44:
                    45:e7:75:fc:5f:01:9e:ee:dc:8b:e1:79:73:07:99:
                    68:47:91:43:5a:98:f8:fb:93:62:d9:8d:4d:16:f4:
                    0e:59:4c:22:2a:32:c9:a8:7d:ad:5c:e3:19:c3:08:
                    3e:75:eb:b7:af:31:45:22:70:b6:11:d6:e3:7c:98:
                    dc:6c:cf:a4:43:c7:60:18:2c:d6:ab:97:54:ca:9e:
                    f7:ad:65:8d:78:e1:a5:e4:dd:cd:91:68:cf:6c:44:
                    4b:56:e4:b4:fd:17:95:84:91:54:6d:70:8a:0c:42:
                    f8:a1:4c:27:b4:c6:6c:89:55:ee:f1:08:d7:36:6e:
                    f5:b2:62:86:69:85:95:7e:eb:99:f4:a7:be:51:e7:
                    36:ac:af:ca:91:8f:6e:a2:67:6e:53:56:d2:b3:e4:
                    41:aa:a9:7f:20:c5:85:e9:32:16:5b:20:bf:09:b2:
                    2c:d8:4b:d9:6e:1e:7e:46:7f:7b:df:05:7c:d6:6f:
                    48:78:58:0e:8f:f8:fe:f1:bb:87:ab:da:d2:d9:e4:
                    fd:23:28:55:aa:7b:a9:65:03:2d:a0:b3:25:04:8d:
                    28:22:f2:a6:03:8f:0a:79:5a:97:fd:af:90:a2:cf:
                    07:9e:6e:e5:8d:b1:91:09:47:76:96:00:f7:43:20:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:D6:3A:59:96:9D:F2:37:7D:2B:9A:CD:54:36:FD:98:FF:8A:5F
            X509v3 Authority Key Identifier:
                keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32342d3234203d3e20313531353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:93:92:71:f8:73:df:6e:2e:61:d3:d6:e8:28:3a:fc:7c:
         72:7d:32:06:ab:78:0c:1c:ff:cd:b3:20:a5:b0:4d:52:92:34:
         23:da:4c:d2:97:86:73:ab:b3:a9:81:9e:a1:c3:cf:f4:f9:79:
         0b:04:f9:84:12:36:4f:37:e1:12:62:07:14:62:c8:4f:c8:74:
         fd:a4:2a:40:70:a0:42:b1:26:9a:7f:64:27:44:2f:57:9e:c8:
         3a:5d:2e:1f:a5:22:9c:f4:df:00:be:d3:92:f2:b5:a0:a4:d0:
         79:4d:11:81:38:0c:81:eb:2e:4e:0f:b7:23:e5:41:ed:7f:d0:
         85:e2:c1:59:5a:69:c6:29:c3:3f:0a:ea:72:b2:84:e2:a6:f6:
         2c:d5:f0:6a:f9:58:38:12:7b:1e:4a:56:97:2e:be:75:17:38:
         1e:0c:24:0a:61:de:57:ca:19:ce:20:14:cc:c2:38:3a:b1:ec:
         14:f6:b3:b6:a1:7b:3c:8c:24:5d:a2:23:00:0e:86:85:ff:f1:
         c3:89:9d:89:53:73:0c:35:9e:8c:84:0e:a3:ec:5e:d6:32:04:
         d4:cb:e2:bc:9a:1d:68:16:f8:af:f8:14:16:d7:91:32:03:09:
         fa:6d:97:ca:cc:3c:65:24:c9:cb:df:e2:ad:2b:d4:d9:74:a2:
         4c:4a:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:08:11 2025 by rpki-client