This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
File:                     3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa (raw, json)
Hash identifier:          SZaaGTU7Ml8jWCbKrNjqIW0C9KF2w5O7LOyZWxmWFS0=
Subject key identifier:   87:EE:C5:74:7F:1E:AB:68:97:E0:98:58:24:1D:E1:DE:4F:EE:5A:14
Certificate issuer:       /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial:       420986D0E0859B6D1043D9A8526449D2536D7E71
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa
Signing time:             Sat 15 Nov 2025 05:54:26 +0000
ROA not before:           Sat 15 Nov 2025 05:49:26 +0000
ROA not after:            Sat 14 Nov 2026 05:54:26 +0000
asID:                     149966
IP address blocks:        103.191.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
                          rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 04:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:86:d0:e0:85:9b:6d:10:43:d9:a8:52:64:49:d2:53:6d:7e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
        Validity
            Not Before: Nov 15 05:49:26 2025 GMT
            Not After : Nov 14 05:54:26 2026 GMT
        Subject: CN=87EEC5747F1EAB6897E09858241DE1DE4FEE5A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:1a:3e:4d:00:67:ae:9f:31:45:d9:1a:ec:
                    42:51:29:d1:29:ea:7e:91:5a:b4:c1:03:5e:1f:b9:
                    f5:89:55:dc:4a:ed:c6:7d:12:23:45:db:2f:7c:2f:
                    06:e6:54:a9:17:e5:97:3a:41:2b:74:7d:dc:42:e5:
                    ff:a0:42:f5:54:26:4c:d9:0f:2f:52:7c:7c:77:39:
                    b1:0f:74:cd:f4:a6:c3:22:71:db:bb:b8:fa:b0:77:
                    38:1e:19:8a:d5:9a:32:c5:19:02:0e:85:6f:25:42:
                    c9:6c:81:cf:42:99:bd:92:f1:d5:d5:60:79:31:be:
                    69:e4:fc:53:6c:a4:b6:dd:07:7f:fa:58:91:58:36:
                    b1:2b:7f:6a:8e:70:2e:3b:3c:2d:98:ad:94:f1:0d:
                    b1:ac:d2:a6:53:9a:46:8e:aa:cf:dc:a0:ac:40:f6:
                    64:5d:ec:91:fa:47:f6:d8:17:70:f9:c1:ad:bc:c1:
                    d7:c1:13:df:e8:d7:1f:e7:f2:01:82:31:a7:b8:fd:
                    06:22:a5:13:62:c1:c4:b0:6d:01:b5:70:3c:3e:fc:
                    20:cf:14:40:91:cf:b8:d1:7c:24:97:f2:7a:7d:1a:
                    94:24:8a:37:43:59:5b:b9:24:0d:17:f9:b3:e5:11:
                    f0:50:5c:fe:c2:dc:2a:da:ad:8e:17:e8:f9:00:0b:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EE:C5:74:7F:1E:AB:68:97:E0:98:58:24:1D:E1:DE:4F:EE:5A:14
            X509v3 Authority Key Identifier:
                keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135322e302f32332d3233203d3e20313439393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:80:bd:06:b6:3b:a6:ef:a6:0e:be:5e:83:c6:cf:52:44:8b:
         2a:05:61:ff:e6:91:71:36:7d:17:56:20:34:4d:d4:53:73:70:
         b3:e2:b7:7d:09:4b:1e:2b:33:c3:ed:d6:d3:81:bb:87:48:af:
         f1:ed:44:6f:c5:27:08:1d:21:aa:f8:bb:a0:4b:b7:13:f6:89:
         af:07:10:cd:29:dc:20:73:96:28:15:a1:69:32:e6:3f:38:d5:
         af:1e:7e:e7:33:d4:e4:60:b9:35:9a:46:79:2a:71:02:47:d1:
         2a:f0:53:e4:40:78:e9:9e:e4:c1:bc:52:27:1d:bc:7c:33:71:
         28:a8:36:35:13:73:f6:02:d8:9c:56:3a:98:82:d4:ba:45:12:
         af:31:b5:39:74:10:d3:4f:c1:1f:66:9a:10:bb:75:a5:5e:ce:
         d0:14:46:a4:e3:9f:58:86:f6:97:dd:d9:f2:45:a0:d6:1c:de:
         df:e0:f7:33:48:dc:a3:a6:a6:52:08:fd:d4:40:a1:c8:34:ae:
         bf:0f:72:5a:56:a4:c1:7e:d8:5a:63:51:52:13:97:f6:75:e4:
         eb:11:5b:c0:a5:ac:03:78:f9:58:3d:da:6e:9e:f8:e0:3d:16:
         3d:01:bd:f9:02:14:0a:ba:bb:a7:3a:a9:0a:2a:e8:a6:2f:69:
         9e:70:c7:4c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQgmG0OCFm20QQ9moUmRJ0lNtfnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0
MzFGMEY0NzAeFw0yNTExMTUwNTQ5MjZaFw0yNjExMTQwNTU0MjZaMDMxMTAvBgNV
BAMTKDg3RUVDNTc0N0YxRUFCNjg5N0UwOTg1ODI0MURFMURFNEZFRTVBMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArRo+TQBnrp8xRdka7EJRKdEp
6n6RWrTBA14fufWJVdxK7cZ9EiNF2y98LwbmVKkX5Zc6QSt0fdxC5f+gQvVUJkzZ
Dy9SfHx3ObEPdM30psMicdu7uPqwdzgeGYrVmjLFGQIOhW8lQslsgc9Cmb2S8dXV
YHkxvmnk/FNspLbdB3/6WJFYNrErf2qOcC47PC2YrZTxDbGs0qZTmkaOqs/coKxA
9mRd7JH6R/bYF3D5wa28wdfBE9/o1x/n8gGCMae4/QYipRNiwcSwbQG1cDw+/CDP
FECRz7jRfCSX8np9GpQkijdDWVu5JA0X+bPlEfBQXP7C3CrarY4X6PkAC6dTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUh+7FdH8eq2iX4JhYJB3h3k/uWhQwHwYDVR0j
BBgwFoAUKKv4UipDz3zHJXkFpbo+UEMfD0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmE2Y2ExMi1iMjg3LTRhYzctODdiOC02Y2Q3MzM1M2U2N2YvMC8yOEFCRjg1MjJB
NDNDRjdDQzcyNTc5MDVBNUJBM0U1MDQzMUYwRjQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjhBQkY4NTIyQTQzQ0Y3Q0M3MjU3OTA1QTVCQTNFNTA0MzFG
MEY0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2YTZjYTEyLWIyODctNGFjNy04
N2I4LTZjZDczMzUzZTY3Zi8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnv5gwDQYJ
KoZIhvcNAQELBQADggEBAIOAvQa2O6bvpg6+XoPGz1JEiyoFYf/mkXE2fRdWIDRN
1FNzcLPit30JSx4rM8Pt1tOBu4dIr/HtRG/FJwgdIar4u6BLtxP2ia8HEM0p3CBz
ligVoWky5j841a8efucz1ORguTWaRnkqcQJH0SrwU+RAeOme5MG8UicdvHwzcSio
NjUTc/YC2JxWOpiC1LpFEq8xtTl0ENNPwR9mmhC7daVeztAURqTjn1iG9pfd2fJF
oNYc3t/g9zNI3KOmplII/dRAocg0rr8PclpWpMF+2FpjUVITl/Z15OsRW8ClrAN4
+Vg92m6e+OA9Fj0BvfkCFAq6u6c6qQoq6KYvaZ5wx0w=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:56 2025 by rpki-client