This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
File:                     3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa (raw, json)
Hash identifier:          f4iHew1dZNv84eW+oh9C3D40aUATYbFGM7HVyTuKYWQ=
Subject key identifier:   14:A4:0B:73:F9:8A:A0:98:E4:68:43:FF:8F:DE:6F:D6:7C:8F:DE:79
Certificate issuer:       /CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
Certificate serial:       18CBCF83ECC4D6829F581B6AD8DE9BED2C458F24
Authority key identifier: 28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa
Signing time:             Sat 15 Nov 2025 05:55:18 +0000
ROA not before:           Sat 15 Nov 2025 05:50:18 +0000
ROA not after:            Sat 14 Nov 2026 05:55:18 +0000
asID:                     149966
IP address blocks:        103.191.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl
                          rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 04:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:cf:83:ec:c4:d6:82:9f:58:1b:6a:d8:de:9b:ed:2c:45:8f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28ABF8522A43CF7CC7257905A5BA3E50431F0F47
        Validity
            Not Before: Nov 15 05:50:18 2025 GMT
            Not After : Nov 14 05:55:18 2026 GMT
        Subject: CN=14A40B73F98AA098E46843FF8FDE6FD67C8FDE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:0c:e7:75:4f:97:b5:ff:12:95:a9:13:74:
                    be:9c:f0:ff:0b:f7:02:b4:ff:02:ef:d1:6f:ca:c8:
                    97:29:e9:3c:a0:d2:49:8a:f0:9c:bd:f7:40:16:a1:
                    7c:e8:d1:7c:d5:39:4a:2d:a6:07:3b:de:24:48:10:
                    56:11:48:32:e0:af:b0:bd:5f:61:4d:0c:8f:d7:67:
                    b4:d7:6a:ff:46:3d:0c:dd:8f:7d:ac:77:d0:ed:f1:
                    d0:89:7e:c2:cf:68:e3:3b:79:ba:78:3f:bf:5f:cb:
                    6f:2d:ad:e0:4e:c8:ab:97:99:e8:dd:8a:99:38:89:
                    52:16:8e:e4:81:a6:26:37:c4:58:5b:1a:db:86:35:
                    b2:82:f4:6f:ad:85:2c:02:09:3b:c2:71:f8:3c:03:
                    6d:65:fb:69:0a:df:af:4a:2d:37:03:60:68:9c:1f:
                    07:58:22:f0:a6:68:75:be:53:56:f5:09:00:e7:ea:
                    c2:14:1f:dd:86:af:85:bf:51:a5:fa:6d:3d:0e:ed:
                    ab:a0:32:b6:fd:6a:03:7e:4d:00:4c:d7:9c:aa:97:
                    66:5e:d2:24:f1:bf:c9:9e:e7:50:bb:dc:01:2b:8c:
                    72:00:e1:b6:8c:5a:09:bc:e7:e5:e9:d8:a3:e1:6f:
                    b5:00:f0:6b:e9:b1:76:c4:f6:75:2d:fa:78:1a:88:
                    50:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:0B:73:F9:8A:A0:98:E4:68:43:FF:8F:DE:6F:D6:7C:8F:DE:79
            X509v3 Authority Key Identifier:
                keyid:28:AB:F8:52:2A:43:CF:7C:C7:25:79:05:A5:BA:3E:50:43:1F:0F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28ABF8522A43CF7CC7257905A5BA3E50431F0F47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26a6ca12-b287-4ac7-87b8-6cd73353e67f/0/3130332e3139312e3135332e302f32342d3234203d3e20313439393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:aa:87:db:a2:33:2d:34:aa:5f:d0:db:28:9d:17:36:d2:62:
         ff:4d:9f:3c:3f:70:32:03:f8:68:bf:6f:62:7e:ed:5d:da:e6:
         45:eb:0d:6b:94:d5:75:7d:52:d8:b4:29:94:26:35:4b:e6:83:
         be:e9:57:95:2a:ee:b0:b9:43:f6:54:1d:dd:89:9a:bc:14:47:
         58:6d:b2:46:39:eb:0e:4e:1b:bf:90:2f:57:a5:9d:e4:df:a8:
         41:91:c1:a3:99:f8:33:0d:91:8d:85:3f:27:18:f6:c8:e5:96:
         56:4e:60:98:05:b2:fb:09:a0:bb:52:fb:e7:93:ee:6c:08:7a:
         91:6d:62:13:b6:c6:c7:db:e0:8a:3f:00:cd:58:1d:ca:a7:47:
         3a:0a:9a:99:6d:9d:a4:ce:fe:36:99:ad:71:0a:d4:ec:59:64:
         fe:70:f4:e9:67:c3:41:99:be:ab:6f:26:8f:29:fb:af:c1:c3:
         61:92:08:0d:31:d6:81:09:cb:b0:45:ec:82:c8:4d:d8:8e:67:
         ff:a1:ed:39:f0:63:ba:e2:4e:d8:cf:4d:72:99:0b:7d:b7:d7:
         4b:46:c7:02:0d:42:08:9b:52:cc:b9:e6:b8:c9:33:c5:09:71:
         31:88:27:15:7f:2a:58:da:5e:d5:f5:42:c0:5a:1e:bb:1e:eb:
         8f:f1:2e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:26:55 2025 by rpki-client