This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
File:                     3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          LR8y4yAScYMhQ4m7wxSbYb5lLzEmjan2C+WolbmUH2E=
Subject key identifier:   75:9D:5E:77:36:20:3D:38:E6:0C:76:68:4E:76:58:9C:0D:FD:1C:EE
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       066A3BC806659C7162858C6546501E2E8D016C8E
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa
Signing time:             Tue 23 Dec 2025 08:01:44 +0000
ROA not before:           Tue 23 Dec 2025 07:56:44 +0000
ROA not after:            Tue 22 Dec 2026 08:01:44 +0000
asID:                     38526
IP address blocks:        103.112.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Dec 2025 17:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6a:3b:c8:06:65:9c:71:62:85:8c:65:46:50:1e:2e:8d:01:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Dec 23 07:56:44 2025 GMT
            Not After : Dec 22 08:01:44 2026 GMT
        Subject: CN=759D5E7736203D38E60C76684E76589C0DFD1CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:62:9a:ba:52:0f:02:8b:fe:45:03:ef:5b:
                    aa:f7:8e:05:69:e9:19:09:78:88:21:ff:6c:ff:af:
                    73:d3:f1:18:80:4e:f6:bc:44:b3:bc:c4:9a:79:2f:
                    4b:74:76:fc:f0:05:e3:84:c9:44:3f:3d:be:79:56:
                    86:ef:73:1f:65:08:26:b5:00:55:5f:16:f5:ec:97:
                    b3:5f:26:ae:8c:6f:4b:67:3d:5b:46:00:25:5e:f9:
                    42:34:44:ef:53:16:14:d9:ab:96:a7:27:47:13:0b:
                    29:08:e3:3d:fb:ff:7d:8d:76:c4:73:51:25:cf:81:
                    c1:76:46:69:45:b6:ea:0c:6a:5b:fc:2e:f7:47:3e:
                    33:cd:16:33:ee:16:59:28:54:53:26:52:f7:7c:0c:
                    42:e5:a2:ac:52:5c:e4:c6:3a:59:60:73:a2:c6:af:
                    e5:41:28:a0:1a:08:d0:da:f5:3c:38:d2:35:78:78:
                    7a:74:47:21:8e:18:ad:0a:d2:6b:f2:a3:ef:ba:13:
                    b1:36:29:6a:03:cf:d8:53:26:45:b4:ef:bd:e7:8e:
                    b3:f5:6f:a2:60:04:4d:24:bb:8c:de:51:38:fe:8f:
                    b0:c7:01:48:86:42:4b:e9:b5:ef:ee:f8:72:f5:c5:
                    bf:ac:ea:7f:b2:ed:e1:2e:d9:df:eb:d9:53:e2:01:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9D:5E:77:36:20:3D:38:E6:0C:76:68:4E:76:58:9C:0D:FD:1C:EE
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139332e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:ce:81:42:83:80:7b:05:f0:5a:f0:45:44:b7:ff:03:53:6a:
         68:22:ac:10:15:56:7f:95:a6:52:fc:c3:91:6f:b8:ef:7b:a7:
         ab:f6:a0:01:9a:d6:c4:59:53:d4:92:e4:16:81:07:9d:ae:3b:
         73:c2:27:b3:e8:99:6e:c7:9d:14:8c:22:06:87:57:86:c2:13:
         c3:03:3b:c3:7b:5e:f5:d7:54:ac:7d:95:68:54:a8:80:68:da:
         71:ce:04:9c:c7:18:b8:0f:da:bf:bb:a8:bb:3b:23:1c:9e:de:
         b6:fd:ff:67:b7:82:2c:f3:90:9b:30:de:29:20:bf:d9:7c:a7:
         b7:bb:8a:5a:3b:cf:b1:4f:0a:ff:4b:e2:37:df:5f:57:44:56:
         58:59:19:ed:a8:99:9a:84:9f:5d:f3:78:04:a8:0e:03:85:0a:
         97:2d:99:55:b9:e8:b7:e9:f7:ff:5c:48:09:f5:3a:0a:7d:84:
         7a:53:e6:87:af:76:e8:50:b5:51:ed:28:ed:77:a6:ab:07:1e:
         26:04:c1:7b:62:8e:31:6f:65:e9:f9:f8:cb:ab:dd:2b:4f:f7:
         23:6d:cd:49:ab:2c:37:00:95:05:ef:e8:57:63:6b:b0:f7:ae:
         8c:d8:bb:9f:c9:59:db:e9:7d:c3:7d:f0:ae:77:ca:6b:7b:fe:
         6c:ad:c6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:00:57 2025 by rpki-client