This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa
File:                     3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier:          UUOaSFdZB1gNgfcBiLfpj8+sysFmMb8lGgAOYylAanI=
Subject key identifier:   FD:2E:6A:52:ED:DD:8D:F8:87:2B:62:36:B4:C7:F6:AC:32:EF:02:B2
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       4F0D418E563C8A89689ABE92EA221AC93A08D092
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa
Signing time:             Tue 11 Nov 2025 16:59:58 +0000
ROA not before:           Tue 11 Nov 2025 16:54:58 +0000
ROA not after:            Tue 10 Nov 2026 16:59:58 +0000
asID:                     215727
IP address blocks:        103.175.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 03:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0d:41:8e:56:3c:8a:89:68:9a:be:92:ea:22:1a:c9:3a:08:d0:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Nov 11 16:54:58 2025 GMT
            Not After : Nov 10 16:59:58 2026 GMT
        Subject: CN=FD2E6A52EDDD8DF8872B6236B4C7F6AC32EF02B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:78:95:0c:90:65:f2:9a:95:16:39:8f:33:
                    95:73:19:fd:be:0e:d0:1a:90:54:95:a4:34:40:7e:
                    67:ae:6c:6b:98:84:43:ed:b7:32:80:ba:ca:16:91:
                    f9:d1:c3:e3:b4:c5:f3:75:94:86:a8:b1:5c:09:37:
                    50:3c:69:2f:50:fd:14:44:bb:43:33:f9:b8:43:ae:
                    43:8d:54:4c:a4:a8:76:eb:02:58:e1:54:13:a4:49:
                    3d:46:ca:21:5f:09:dc:e2:6f:67:49:86:5f:93:d1:
                    db:1f:2c:2d:a1:e4:52:a9:5b:d1:7a:ec:6d:80:47:
                    a9:a7:5c:26:b8:9a:16:6b:af:83:9b:7e:e5:e5:1a:
                    86:93:03:46:c4:3f:c3:40:a2:96:b1:43:74:2e:d4:
                    9e:52:58:6d:0e:65:e4:3e:88:cc:c7:4b:54:00:a1:
                    30:e3:38:22:22:47:95:a3:9b:2c:e4:ff:7c:b8:f6:
                    d9:1b:a1:da:79:06:68:6c:c3:7e:69:0c:80:30:19:
                    64:53:a0:4c:a5:6a:c8:84:92:87:a6:54:69:b1:e2:
                    7d:8f:14:18:0a:5b:c0:3e:3d:44:a5:3c:1a:94:4e:
                    89:e8:8e:aa:14:af:05:b2:3b:ec:74:ec:d2:36:6d:
                    91:68:c3:94:66:98:0f:a1:7d:3f:f1:c7:d6:0a:75:
                    e8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2E:6A:52:ED:DD:8D:F8:87:2B:62:36:B4:C7:F6:AC:32:EF:02:B2
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20323135373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:2f:e8:a0:69:1f:3c:31:de:95:f1:6f:bd:45:5b:2f:6d:
         59:f9:5a:6d:62:0a:a0:4c:1a:9e:c1:48:a9:a3:e9:a0:d7:7f:
         9d:6b:0f:89:fe:32:0f:fd:78:b5:ed:ac:a4:8a:25:1f:cf:c7:
         ca:da:72:61:7d:28:7e:09:29:15:45:2b:36:81:95:f3:5d:ca:
         d3:73:d1:31:6d:4e:f3:43:b1:6e:5d:87:64:3e:b3:3a:d8:e4:
         aa:06:2c:f5:94:1d:03:68:c0:77:46:75:ae:a3:32:23:9c:55:
         83:ce:a3:92:13:37:cc:c3:cc:c9:42:fd:de:d4:bd:ff:ab:6f:
         13:eb:1c:07:8d:bf:9f:0b:c8:df:e1:fb:f1:e1:b0:f4:86:b5:
         19:36:c4:ae:9e:4a:17:cd:5e:4a:9e:b7:ec:95:fb:51:7e:8f:
         25:74:25:48:07:95:61:68:71:e9:52:2e:c9:97:00:e4:50:eb:
         98:7b:ea:7f:8f:34:35:5c:fb:66:6b:54:ee:72:b7:cc:20:96:
         f2:a2:a2:48:8e:77:94:9d:50:2a:cb:6c:c8:0d:a7:b4:37:0b:
         18:c0:e0:9e:93:d9:fc:5d:c4:52:ba:ce:99:98:1a:8c:f4:0b:
         c0:10:7e:a4:7e:5c:c8:ee:0e:fd:08:65:e8:64:1e:da:ae:8b:
         4e:1a:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:35 2025 by rpki-client