This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa
File:                     3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier:          uShV8vRhK/SDVf3Twj+hPuhHAzUhqQGJIQPtkavd13M=
Subject key identifier:   A2:D3:30:80:B3:BE:92:15:37:A1:9C:64:B0:8B:2B:AF:57:2F:FB:EC
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       7E421611A52F389353029B05DD1F83B00AB98758
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa
Signing time:             Tue 11 Nov 2025 17:00:12 +0000
ROA not before:           Tue 11 Nov 2025 16:55:12 +0000
ROA not after:            Tue 10 Nov 2026 17:00:12 +0000
asID:                     215727
IP address blocks:        103.175.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 03:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:42:16:11:a5:2f:38:93:53:02:9b:05:dd:1f:83:b0:0a:b9:87:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Nov 11 16:55:12 2025 GMT
            Not After : Nov 10 17:00:12 2026 GMT
        Subject: CN=A2D33080B3BE921537A19C64B08B2BAF572FFBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:89:c8:be:02:e4:a5:85:bf:6f:b5:db:5c:
                    77:60:6b:52:66:f1:40:51:3c:bb:2d:10:50:bf:d8:
                    fb:fd:b4:81:07:ca:42:c0:2b:62:f7:54:6a:0f:b2:
                    08:23:80:1d:4d:12:e7:2c:cf:b2:1d:c3:a9:b2:35:
                    69:af:72:3e:35:7a:69:c7:be:84:0d:44:48:16:f4:
                    05:cd:ba:20:48:96:8a:a0:9d:1a:26:9f:00:ca:29:
                    f7:2f:01:7e:f4:99:fe:71:0b:33:6f:73:6d:20:a7:
                    a6:bb:44:6e:70:9b:f1:ee:a7:ad:c1:97:2a:43:d4:
                    1d:1d:35:56:a9:13:cc:a7:cb:52:26:15:5d:1d:18:
                    30:4a:e7:80:ad:41:35:f4:a9:8d:a3:e5:4e:33:24:
                    45:63:97:bd:8f:e7:2e:46:a7:fe:55:e5:97:c6:3d:
                    c1:6f:5f:d7:4f:e4:c5:b2:aa:3f:42:ed:71:ac:b1:
                    16:ec:d8:b8:96:63:02:18:34:e4:67:af:bc:32:a5:
                    3c:93:5e:b1:44:99:a3:ce:d3:48:4f:9c:3a:58:be:
                    d4:c0:52:e2:44:a8:e6:19:cb:54:d6:3b:f4:04:c1:
                    35:4a:3d:4a:ba:f8:03:8e:ed:09:9e:62:45:36:04:
                    52:65:10:39:23:71:b7:c7:7d:1a:7b:84:b6:ae:45:
                    64:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:30:80:B3:BE:92:15:37:A1:9C:64:B0:8B:2B:AF:57:2F:FB:EC
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20323135373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:15:28:f0:d4:77:63:da:e7:53:bc:c1:b7:5e:f2:63:20:
         a8:72:34:20:1e:59:fc:02:1d:dc:8e:f0:8e:05:66:3d:2a:e0:
         89:a1:73:b0:e2:90:6f:e3:13:56:3b:99:d4:dd:8d:bc:23:97:
         89:70:47:01:52:e5:c7:7d:f9:ee:6e:a6:ae:f2:98:31:58:ce:
         37:00:21:39:d0:f7:27:fb:a2:51:31:7d:4e:b7:e0:cb:ee:26:
         79:65:25:c9:46:1d:da:85:17:7b:1f:12:9e:94:45:84:d4:a3:
         52:a8:d6:2d:46:64:7e:ee:b8:d8:6c:35:46:bf:cb:3e:05:20:
         6d:fc:df:fb:95:ec:bb:01:65:8d:92:ef:77:89:6f:6e:99:52:
         ac:f8:a5:af:e2:f8:fd:1d:e7:f3:72:cf:05:fe:9c:6e:ca:6e:
         b4:04:38:97:dc:43:74:fb:db:f5:4a:e1:15:27:72:e9:55:e7:
         58:bc:b1:db:1a:28:a7:ea:54:98:3e:a8:2f:f0:ed:fa:a6:1a:
         27:e3:24:68:1c:52:7f:fc:a8:62:98:1f:35:ae:ea:71:7b:a4:
         ac:cd:c2:9b:3e:f7:af:b9:38:7a:54:5a:b5:fe:fc:04:d3:86:
         7b:24:8d:e1:20:a5:9d:99:42:af:80:c0:dd:f7:c7:84:00:13:
         36:b1:08:c2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfkIWEaUvOJNTApsF3R+DsAq5h1gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4
QTA1MjVBMTAeFw0yNTExMTExNjU1MTJaFw0yNjExMTAxNzAwMTJaMDMxMTAvBgNV
BAMTKEEyRDMzMDgwQjNCRTkyMTUzN0ExOUM2NEIwOEIyQkFGNTcyRkZCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMInIvgLkpYW/b7XbXHdga1Jm
8UBRPLstEFC/2Pv9tIEHykLAK2L3VGoPsggjgB1NEucsz7Idw6myNWmvcj41emnH
voQNREgW9AXNuiBIloqgnRomnwDKKfcvAX70mf5xCzNvc20gp6a7RG5wm/Hup63B
lypD1B0dNVapE8yny1ImFV0dGDBK54CtQTX0qY2j5U4zJEVjl72P5y5Gp/5V5ZfG
PcFvX9dP5MWyqj9C7XGssRbs2LiWYwIYNORnr7wypTyTXrFEmaPO00hPnDpYvtTA
UuJEqOYZy1TWO/QEwTVKPUq6+AOO7QmeYkU2BFJlEDkjcbfHfRp7hLauRWQZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUotMwgLO+khU3oZxksIsrr1cv++wwHwYDVR0j
BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz
NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1
MjVBMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjI5Mzc4LTQ1ZjAtNDlkMy1h
NmFmLTU3M2JlN2RjYTZkMC8wLzMxMzAzMzJlMzEzNzM1MmUzMzM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68nMA0GCSqG
SIb3DQEBCwUAA4IBAQBf8RUo8NR3Y9rnU7zBt17yYyCocjQgHln8Ah3cjvCOBWY9
KuCJoXOw4pBv4xNWO5nU3Y28I5eJcEcBUuXHffnubqau8pgxWM43ACE50Pcn+6JR
MX1Ot+DL7iZ5ZSXJRh3ahRd7HxKelEWE1KNSqNYtRmR+7rjYbDVGv8s+BSBt/N/7
ley7AWWNku93iW9umVKs+KWv4vj9Hefzcs8F/pxuym60BDiX3EN0+9v1SuEVJ3Lp
VedYvLHbGiin6lSYPqgv8O36phon4yRoHFJ//KhimB81rupxe6SszcKbPvevuTh6
VFq1/vwE04Z7JI3hIKWdmUKvgMDd98eEABM2sQjC
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:39:35 2025 by rpki-client