This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa
File:                     3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (raw, json)
Hash identifier:          mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=
Subject key identifier:   5F:34:C6:54:B1:02:3E:1B:95:5B:0F:16:A6:02:58:C9:F9:78:79:75
Certificate issuer:       /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
Certificate serial:       20FA02A34A59DD94F652221745B3C075D9B80E8E
Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa
Signing time:             Mon 15 Dec 2025 01:02:40 +0000
ROA not before:           Mon 15 Dec 2025 00:57:40 +0000
ROA not after:            Mon 14 Dec 2026 01:02:40 +0000
asID:                     141134
IP address blocks:        103.158.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl
                          rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 13:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:02:a3:4a:59:dd:94:f6:52:22:17:45:b3:c0:75:d9:b8:0e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF
        Validity
            Not Before: Dec 15 00:57:40 2025 GMT
            Not After : Dec 14 01:02:40 2026 GMT
        Subject: CN=5F34C654B1023E1B955B0F16A60258C9F9787975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:56:43:14:e4:f9:22:d5:8b:15:4e:88:ad:
                    94:a3:95:a4:69:fb:56:95:ae:cd:85:cd:6e:00:ac:
                    4e:e8:fa:60:ae:59:f7:b3:9d:8c:42:e3:2c:c3:15:
                    68:ff:f8:a9:17:57:c0:51:35:e1:4c:4e:ed:5f:27:
                    80:bb:5a:34:64:66:d5:51:62:5f:e8:23:59:17:e3:
                    e2:85:4d:86:79:9e:25:fd:0a:6f:67:22:96:d1:72:
                    b3:72:16:d4:78:ef:43:af:31:04:c7:f4:be:a6:47:
                    7b:a5:49:d3:af:a1:78:65:cf:89:82:59:03:34:a8:
                    b8:45:a6:b7:a4:55:50:f8:1f:4a:b4:d1:1b:72:5e:
                    54:b5:a8:0a:57:6b:bd:e1:cd:7c:c1:a6:b1:5e:7c:
                    fa:9c:fa:0a:53:75:4c:3c:17:49:ad:40:33:74:1a:
                    f9:4c:38:8f:8e:d3:15:4c:15:15:75:38:a1:3f:b4:
                    10:4a:14:f9:43:62:54:2a:6e:ba:51:b2:93:f5:86:
                    bd:dd:6b:77:d2:36:f3:f9:09:d9:55:83:5c:e3:48:
                    27:29:0b:fa:37:5f:23:63:a2:3e:8e:b2:52:b0:86:
                    51:d3:aa:8f:3a:0d:f5:d4:5a:3e:6f:8b:d8:7b:42:
                    fa:b2:30:19:6c:ac:b1:14:e6:71:b2:b4:b8:c7:55:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:34:C6:54:B1:02:3E:1B:95:5B:0F:16:A6:02:58:C9:F9:78:79:75
            X509v3 Authority Key Identifier:
                keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:0a:1c:74:d7:c7:fb:8e:52:a0:21:67:fa:87:32:c0:bc:0d:
         9f:5a:75:53:53:ed:9f:d9:f6:32:65:bc:c3:c2:69:fd:ee:48:
         0f:0a:f6:c3:05:aa:fe:53:23:a3:21:b9:6c:32:16:75:63:5d:
         fc:5a:f4:f0:59:94:5c:8a:f7:e8:30:0f:9b:a0:34:4f:e8:ed:
         75:15:2e:a2:07:fb:5f:aa:13:fc:ce:ab:63:ae:9f:12:7c:18:
         60:4d:0c:f4:7d:ef:89:3c:1d:c4:db:dd:72:ee:2c:22:f3:cd:
         05:c5:dd:d8:f1:ec:74:6a:57:3f:ee:63:e6:ba:e1:8d:92:53:
         96:4e:f1:70:9f:2a:68:70:21:6e:81:4d:31:6a:c4:a9:c4:9c:
         cd:0c:a5:01:35:f1:4b:85:1a:1b:76:2f:eb:e4:d6:e9:2b:7b:
         7b:31:ed:ec:6c:1b:70:c2:69:46:da:44:7e:cb:86:4b:f3:13:
         95:53:4e:23:47:cb:ab:6b:3f:36:34:b6:f4:0d:8e:97:77:14:
         52:fa:92:60:b5:31:65:a6:74:33:15:d5:e4:0e:41:cf:29:da:
         56:70:57:b2:bb:a3:bc:d9:e2:0a:35:5f:d9:18:08:64:fd:20:
         ad:82:c8:0c:bc:6c:bd:64:4b:0d:be:74:0d:53:31:85:ff:36:
         8c:8f:9a:93
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIPoCo0pZ3ZT2UiIXRbPAddm4Do4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz
MEJGRjVERjAeFw0yNTEyMTUwMDU3NDBaFw0yNjEyMTQwMTAyNDBaMDMxMTAvBgNV
BAMTKDVGMzRDNjU0QjEwMjNFMUI5NTVCMEYxNkE2MDI1OEM5Rjk3ODc5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZyFZDFOT5ItWLFU6IrZSjlaRp
+1aVrs2FzW4ArE7o+mCuWfeznYxC4yzDFWj/+KkXV8BRNeFMTu1fJ4C7WjRkZtVR
Yl/oI1kX4+KFTYZ5niX9Cm9nIpbRcrNyFtR470OvMQTH9L6mR3ulSdOvoXhlz4mC
WQM0qLhFprekVVD4H0q00RtyXlS1qApXa73hzXzBprFefPqc+gpTdUw8F0mtQDN0
GvlMOI+O0xVMFRV1OKE/tBBKFPlDYlQqbrpRspP1hr3da3fSNvP5CdlVg1zjSCcp
C/o3XyNjoj6OslKwhlHTqo86DfXUWj5vi9h7QvqyMBlsrLEU5nGytLjHVW8rAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXzTGVLECPhuVWw8WpgJYyfl4eXUwHwYDVR0j
BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1
ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG
RjVERi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NkN2M3YWMyLTVhOWItNDkyYS1h
NGM1LTFmMTM1OTBkYWUwNi8wLzMxMzAzMzJlMzEzNTM4MmUzMjM1MzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnvowDQYJ
KoZIhvcNAQELBQADggEBAIQKHHTXx/uOUqAhZ/qHMsC8DZ9adVNT7Z/Z9jJlvMPC
af3uSA8K9sMFqv5TI6MhuWwyFnVjXfxa9PBZlFyK9+gwD5ugNE/o7XUVLqIH+1+q
E/zOq2OunxJ8GGBNDPR974k8HcTb3XLuLCLzzQXF3djx7HRqVz/uY+a64Y2SU5ZO
8XCfKmhwIW6BTTFqxKnEnM0MpQE18UuFGht2L+vk1ukre3sx7exsG3DCaUbaRH7L
hkvzE5VTTiNHy6trPzY0tvQNjpd3FFL6kmC1MWWmdDMV1eQOQc8p2lZwV7K7o7zZ
4go1X9kYCGT9IK2CyAy8bL1kSw2+dA1TMYX/NoyPmpM=
-----END CERTIFICATE-----
Generated at Fri Dec 19 14:35:19 2025 by rpki-client