This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa
File:                     3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (raw, json)
Hash identifier:          +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=
Subject key identifier:   70:65:3A:52:CA:84:D1:19:13:0B:A3:DB:3D:88:14:53:80:7B:85:16
Certificate issuer:       /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14
Certificate serial:       3FDD4BA7D654E9B1FABAEF19B5087598CC9186FE
Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa
Signing time:             Thu 06 Nov 2025 09:02:50 +0000
ROA not before:           Thu 06 Nov 2025 08:57:50 +0000
ROA not after:            Thu 05 Nov 2026 09:02:50 +0000
asID:                     149388
IP address blocks:        103.181.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl
                          rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 15:30:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dd:4b:a7:d6:54:e9:b1:fa:ba:ef:19:b5:08:75:98:cc:91:86:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14
        Validity
            Not Before: Nov  6 08:57:50 2025 GMT
            Not After : Nov  5 09:02:50 2026 GMT
        Subject: CN=70653A52CA84D119130BA3DB3D881453807B8516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:87:cd:07:e8:8b:9d:45:87:a9:8e:4c:54:
                    24:c0:9d:ce:71:e8:a4:6e:46:cf:fd:42:07:6b:fd:
                    d8:fb:21:88:5b:d3:04:35:bf:50:7e:d9:74:e3:34:
                    85:13:5c:f6:17:0d:22:a4:8d:6c:91:f2:43:c7:01:
                    42:09:99:26:2a:ce:88:41:ac:93:dc:4f:6b:b2:03:
                    d7:a2:12:29:89:f6:02:2e:38:46:c5:3e:f4:79:f4:
                    cb:e9:89:be:b5:a8:85:07:7b:45:b3:2e:3c:bd:1f:
                    c6:6f:7c:27:38:f3:f7:2f:34:84:33:19:df:b7:3c:
                    6e:94:33:44:6d:b4:e9:65:4b:df:6f:50:18:aa:33:
                    7b:17:9e:24:20:ca:a7:a5:7c:71:51:4d:20:60:9d:
                    92:41:d1:7e:a2:80:71:f9:83:ac:dd:55:8f:c2:8b:
                    9c:73:ad:ee:b6:f0:c0:d5:e6:73:ca:b1:c3:c9:59:
                    51:23:9f:11:f7:16:6e:2f:e1:f3:8d:2d:e0:c1:50:
                    f6:0d:4f:44:c9:e0:c0:32:1f:75:93:35:fc:7c:69:
                    9e:b4:f7:87:e1:0c:12:ca:58:c5:3d:80:55:d9:72:
                    dd:d8:4c:21:57:90:dc:6d:1d:aa:d7:8c:46:fa:06:
                    42:7a:39:e3:6d:f0:9c:5d:9e:63:8a:db:5a:7a:c4:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:3A:52:CA:84:D1:19:13:0B:A3:DB:3D:88:14:53:80:7B:85:16
            X509v3 Authority Key Identifier:
                keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:63:5c:c8:6e:bd:68:15:83:32:f7:89:7a:44:e1:b3:4a:84:
         71:32:cf:e1:90:72:81:95:ed:4e:bd:3b:e9:6b:8f:77:3e:4b:
         80:5b:88:e6:ed:b3:5a:8b:05:e0:88:a4:1f:ed:40:f4:29:4b:
         12:b7:89:4a:7e:e2:98:e2:b9:4a:55:47:be:7b:6a:f8:a2:59:
         02:fc:30:e8:d6:85:4b:db:6b:9b:7f:bc:95:aa:3e:32:f3:64:
         44:89:b4:fc:82:ea:4d:4f:86:b4:5c:a1:52:b9:d8:a6:68:46:
         df:04:66:06:5d:a7:99:c3:65:4f:3e:b4:23:dd:d2:20:77:80:
         1a:63:e1:b7:04:6b:25:81:35:63:63:0a:f5:09:6f:49:2b:fd:
         aa:42:5e:4f:ee:c2:1b:94:14:50:19:cc:6a:44:89:64:a9:98:
         c0:f5:b4:7e:55:47:9b:89:9b:c5:6d:63:14:3d:62:a3:4b:86:
         c5:d9:25:5d:41:ca:f7:91:01:92:11:e7:22:15:64:fd:6e:e0:
         43:86:74:e1:ae:ab:2e:13:73:8a:2c:c0:60:94:c5:6d:ca:2f:
         f3:ca:db:f7:41:6d:05:d8:6d:b6:e2:3c:a6:46:64:e8:a5:b1:
         aa:85:22:d7:e6:db:1d:7c:fa:d0:4e:f1:c4:a8:2c:59:c2:e0:
         2e:10:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:13:55 2025 by rpki-client