This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
File:                     3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier:          D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=
Subject key identifier:   96:E9:4F:DA:03:F7:D8:09:19:F7:E6:85:76:12:9D:60:5C:FF:0B:89
Certificate issuer:       /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
Certificate serial:       1C254B79C072D4C51F4300DC64BF1E6044A3A742
Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa
Signing time:             Fri 14 Nov 2025 03:04:08 +0000
ROA not before:           Fri 14 Nov 2025 02:59:08 +0000
ROA not after:            Fri 13 Nov 2026 03:04:08 +0000
asID:                     151503
IP address blocks:        103.215.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl
                          rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 16:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:4b:79:c0:72:d4:c5:1f:43:00:dc:64:bf:1e:60:44:a3:a7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30
        Validity
            Not Before: Nov 14 02:59:08 2025 GMT
            Not After : Nov 13 03:04:08 2026 GMT
        Subject: CN=96E94FDA03F7D80919F7E68576129D605CFF0B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:39:30:eb:3c:e4:6f:53:2c:e4:94:9d:24:
                    c1:a4:20:27:22:80:47:06:09:b0:6f:ba:26:cb:4f:
                    dc:f8:a0:94:44:7d:1a:31:9d:12:2b:cb:02:5d:73:
                    c5:b6:19:85:77:9b:e7:93:ae:60:81:47:ac:f8:09:
                    2d:57:95:1b:58:5d:13:e7:12:0b:a7:b8:18:f2:11:
                    02:a5:e4:a2:13:2d:63:46:9e:fb:b1:5f:58:ad:7c:
                    1b:62:01:26:34:ea:d7:cb:63:c1:52:b9:e2:76:34:
                    7b:5f:af:3d:c4:20:4e:66:74:6a:ec:b0:8a:d9:c0:
                    d3:5f:15:4c:28:cc:25:b2:d3:bc:9a:d7:b7:a6:2a:
                    c3:f9:8a:6e:36:1b:b8:bd:d0:60:44:ab:7e:08:db:
                    c0:0d:8c:4f:a1:4f:80:6a:4e:71:ae:ea:e1:cb:71:
                    3c:ac:6c:e7:33:13:5a:68:92:7c:86:0e:bc:96:ac:
                    a0:e5:e3:26:dc:c6:ee:82:db:d0:b6:64:1d:1e:51:
                    05:63:33:d2:18:0c:d0:c7:df:69:3b:b6:89:cc:61:
                    d8:42:2f:68:8a:5d:24:32:b2:27:f2:45:75:47:7a:
                    d7:ff:89:6f:04:4e:d4:30:51:d1:0c:a5:25:a5:89:
                    51:29:14:6f:97:b9:21:79:57:b6:45:0d:30:1d:47:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E9:4F:DA:03:F7:D8:09:19:F7:E6:85:76:12:9D:60:5C:FF:0B:89
            X509v3 Authority Key Identifier:
                keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:0a:30:ed:12:f5:20:71:0c:f0:3d:76:75:9c:25:9f:4d:05:
         c6:58:95:56:b1:64:96:58:4c:41:5e:ba:00:51:79:41:e2:15:
         db:ad:a4:9d:95:83:bb:7c:ab:73:a4:17:2f:42:7e:4f:00:c9:
         0c:ab:33:84:2c:e6:9b:f4:f2:9a:3d:bd:36:e4:cd:ba:e6:9d:
         77:49:d4:5d:33:dc:37:9e:df:35:3f:4e:96:bf:fa:43:a8:aa:
         9f:d6:6d:b0:b4:0b:66:6e:c8:8d:3b:80:b5:65:5c:16:be:b1:
         88:73:99:1a:71:8c:43:73:54:b2:d0:55:3d:c0:d6:bd:0d:a2:
         3e:7d:6e:78:36:c2:c6:0c:f6:e5:37:5f:6c:45:88:54:24:b3:
         2f:72:5d:9c:92:e8:d1:22:fa:a0:51:68:c2:82:5a:9b:c0:ff:
         45:c9:30:df:49:46:4f:ac:99:c5:ea:05:00:ab:a5:cf:5f:5c:
         69:bf:9d:30:e8:e5:bc:25:bb:ca:80:c5:fd:72:9f:fb:e7:79:
         9f:56:fb:3e:06:78:9b:4c:c0:be:98:51:09:61:cd:6c:be:35:
         d7:4b:1c:ee:00:fd:fa:e8:ba:7b:50:57:f2:92:ac:b5:8a:5a:
         d4:c6:22:02:b7:42:54:23:da:6d:80:8b:36:4d:f6:87:9e:db:
         4c:32:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:56 2025 by rpki-client