This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa
File:                     3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa (raw, json)
Hash identifier:          hUygR1F36BFXE6jZfKUn6z9xWtDxXwKMMrnfrGbDbrA=
Subject key identifier:   6B:93:B5:81:62:EC:7E:D0:3A:23:83:98:9B:63:9F:09:6A:5B:B8:E8
Certificate issuer:       /CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
Certificate serial:       18E7486AC977EF104C81895AC4A21A6EAB4FCB04
Authority key identifier: 16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa
Signing time:             Wed 19 Nov 2025 15:00:02 +0000
ROA not before:           Wed 19 Nov 2025 14:55:02 +0000
ROA not after:            Wed 18 Nov 2026 15:00:02 +0000
asID:                     149373
IP address blocks:        103.180.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl
                          rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 00:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e7:48:6a:c9:77:ef:10:4c:81:89:5a:c4:a2:1a:6e:ab:4f:cb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697127AE288F4C03503ED0ED8F09BD7A10A1E20
        Validity
            Not Before: Nov 19 14:55:02 2025 GMT
            Not After : Nov 18 15:00:02 2026 GMT
        Subject: CN=6B93B58162EC7ED03A2383989B639F096A5BB8E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:80:d8:b9:ed:10:2f:c7:6e:3c:06:c1:a2:
                    d2:dc:0a:e9:2a:46:d1:e5:b9:09:3f:b6:e7:a8:81:
                    6f:da:0f:89:57:be:53:05:c8:22:f4:79:a3:32:cd:
                    48:28:ef:27:d5:e4:eb:ae:52:2a:df:bb:0a:c0:f0:
                    15:bc:48:1d:62:2e:70:f7:6b:55:92:bf:7b:cc:96:
                    8f:85:d7:9d:58:54:b6:a6:b8:05:77:a9:93:05:e5:
                    10:c3:96:92:81:91:51:76:d4:eb:6f:6d:fe:1a:53:
                    68:d0:c0:60:81:0d:d0:02:f0:43:44:77:f7:df:77:
                    69:58:6c:bf:43:4f:bb:04:59:28:16:49:7d:eb:e4:
                    8f:a6:ce:83:a2:85:18:42:ef:1e:19:e2:b0:9a:71:
                    be:09:33:c0:0f:1f:ad:19:69:f6:18:f5:49:80:fc:
                    65:31:ea:6c:f2:36:cb:00:91:5b:f5:10:a5:5a:61:
                    22:20:4e:fa:f8:73:33:38:ba:f6:b4:7d:5b:25:b1:
                    f2:c7:97:2d:f9:62:5c:df:86:cb:b0:0e:5c:d5:b1:
                    09:f2:28:77:0f:f7:5a:c1:5e:69:84:71:9d:b2:3b:
                    fb:b8:c1:35:d4:f0:76:89:2c:95:75:c9:f1:65:27:
                    97:af:f0:45:e5:86:dd:1f:3e:6a:3d:7a:de:16:d3:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:93:B5:81:62:EC:7E:D0:3A:23:83:98:9B:63:9F:09:6A:5B:B8:E8
            X509v3 Authority Key Identifier:
                keyid:16:97:12:7A:E2:88:F4:C0:35:03:ED:0E:D8:F0:9B:D7:A1:0A:1E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1697127AE288F4C03503ED0ED8F09BD7A10A1E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1249d387-70cf-40e9-8759-9b86e0c65128/0/3130332e3138302e3235312e302f32342d3234203d3e20313439333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:40:2e:0f:64:81:58:e7:db:d4:eb:f5:3f:6c:dc:d2:af:c8:
         0f:13:c9:b9:75:10:57:ac:3d:30:4d:d7:de:7c:3a:18:57:da:
         fc:a9:29:7a:f0:ce:0b:df:03:29:17:eb:54:b3:eb:19:f5:c3:
         d2:3d:35:c3:00:e9:7d:94:08:d4:a4:00:75:10:c2:27:7d:2c:
         4d:56:0a:c5:10:0e:1d:84:08:dc:5d:e9:ad:d1:95:1c:f6:c8:
         ed:f4:d5:8e:db:a0:d0:6f:4f:47:30:f9:3a:b0:3f:8a:68:b7:
         13:bb:d2:74:cb:15:ef:aa:19:6c:f5:43:b1:aa:df:a7:71:91:
         ca:11:5b:15:c9:97:6b:ab:1e:58:54:b9:e7:79:c0:41:48:6e:
         bb:1b:3e:35:a9:36:92:1d:f4:60:91:92:e8:1b:25:f8:22:a4:
         c8:17:3b:1a:ab:64:40:34:1f:84:f9:e1:f7:84:e9:34:38:00:
         60:f7:66:73:9f:da:4f:3c:3c:85:61:2b:80:4b:e6:93:1d:7e:
         4f:b7:6c:89:5a:ff:9c:e8:3f:7e:a9:1f:17:9a:c0:23:d7:1b:
         e2:89:69:f6:3c:ba:de:4b:56:ec:85:46:02:ac:4b:9f:32:1a:
         a9:c9:ad:8f:94:4c:76:6d:56:19:76:bc:ae:3b:28:6f:06:43:
         a7:72:14:2c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGOdIasl37xBMgYlaxKIabqtPywQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdB
MTBBMUUyMDAeFw0yNTExMTkxNDU1MDJaFw0yNjExMTgxNTAwMDJaMDMxMTAvBgNV
BAMTKDZCOTNCNTgxNjJFQzdFRDAzQTIzODM5ODlCNjM5RjA5NkE1QkI4RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAx4DYue0QL8duPAbBotLcCukq
RtHluQk/tueogW/aD4lXvlMFyCL0eaMyzUgo7yfV5OuuUirfuwrA8BW8SB1iLnD3
a1WSv3vMlo+F151YVLamuAV3qZMF5RDDlpKBkVF21Otvbf4aU2jQwGCBDdAC8ENE
d/ffd2lYbL9DT7sEWSgWSX3r5I+mzoOihRhC7x4Z4rCacb4JM8APH60ZafYY9UmA
/GUx6mzyNssAkVv1EKVaYSIgTvr4czM4uva0fVslsfLHly35YlzfhsuwDlzVsQny
KHcP91rBXmmEcZ2yO/u4wTXU8HaJLJV1yfFlJ5ev8EXlht0fPmo9et4W08MLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUa5O1gWLsftA6I4OYm2OfCWpbuOgwHwYDVR0j
BBgwFoAUFpcSeuKI9MA1A+0O2PCb16EKHiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MjQ5ZDM4Ny03MGNmLTQwZTktODc1OS05Yjg2ZTBjNjUxMjgvMC8xNjk3MTI3QUUy
ODhGNEMwMzUwM0VEMEVEOEYwOUJEN0ExMEExRTIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY5NzEyN0FFMjg4RjRDMDM1MDNFRDBFRDhGMDlCRDdBMTBB
MUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyNDlkMzg3LTcwY2YtNDBlOS04
NzU5LTliODZlMGM2NTEyOC8wLzMxMzAzMzJlMzEzODMwMmUzMjM1MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntPswDQYJ
KoZIhvcNAQELBQADggEBAGNALg9kgVjn29Tr9T9s3NKvyA8Tybl1EFesPTBN1958
OhhX2vypKXrwzgvfAykX61Sz6xn1w9I9NcMA6X2UCNSkAHUQwid9LE1WCsUQDh2E
CNxd6a3RlRz2yO301Y7boNBvT0cw+TqwP4potxO70nTLFe+qGWz1Q7Gq36dxkcoR
WxXJl2urHlhUued5wEFIbrsbPjWpNpId9GCRkugbJfgipMgXOxqrZEA0H4T54feE
6TQ4AGD3ZnOf2k88PIVhK4BL5pMdfk+3bIla/5zoP36pHxeawCPXG+KJafY8ut5L
VuyFRgKsS58yGqnJrY+UTHZtVhl2vK47KG8GQ6dyFCw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:30 2025 by rpki-client