This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa
File:                     3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU=
Subject key identifier:   2B:12:47:1D:DE:D9:F5:A9:DB:BF:13:BA:D2:05:3B:19:05:2F:9B:27
Certificate issuer:       /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial:       32CA4E26B78887506F7B530FA2A4EA612161B87A
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa
Signing time:             Tue 09 Dec 2025 11:33:43 +0000
ROA not before:           Tue 09 Dec 2025 11:28:43 +0000
ROA not after:            Tue 08 Dec 2026 11:33:43 +0000
asID:                     55664
IP address blocks:        103.236.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
                          rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 08:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ca:4e:26:b7:88:87:50:6f:7b:53:0f:a2:a4:ea:61:21:61:b8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
        Validity
            Not Before: Dec  9 11:28:43 2025 GMT
            Not After : Dec  8 11:33:43 2026 GMT
        Subject: CN=2B12471DDED9F5A9DBBF13BAD2053B19052F9B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:43:51:a1:1a:4c:36:24:d4:b8:42:55:30:
                    20:ae:c5:f2:4f:0c:c8:85:a9:05:39:6e:eb:6a:b5:
                    52:67:7d:cb:6e:f0:d5:14:39:fc:3a:cf:17:08:e1:
                    e4:69:a0:f0:c8:74:92:25:64:ee:cf:fa:c4:41:f7:
                    11:a7:78:2f:52:2f:15:3e:c2:5b:4c:73:54:6e:7d:
                    4a:f6:82:f2:31:02:ae:48:95:8b:c0:7a:88:64:d8:
                    75:e0:a0:62:81:8d:db:a3:bf:6f:64:9b:c7:bd:fa:
                    fb:a2:d1:64:e4:7d:3b:34:58:6a:cf:aa:0f:41:6b:
                    75:d6:38:15:0d:8b:4a:8b:47:43:a8:1f:73:1c:20:
                    a5:43:77:2b:83:72:e9:02:30:62:75:92:72:46:d4:
                    4b:b7:ca:d6:03:c6:8f:78:41:bc:b5:c1:ff:7c:55:
                    1c:da:3b:d0:53:f5:d0:aa:73:ac:6d:35:8c:88:ad:
                    d6:09:04:d2:0f:c3:6b:2f:b6:e7:0e:ea:83:73:a2:
                    ca:98:71:3e:7e:86:9f:31:1d:9a:7e:af:38:14:0c:
                    1a:e4:c5:53:63:29:66:70:59:a7:8c:00:bc:9e:b9:
                    6c:66:bf:6e:4c:a3:0b:1a:56:d6:8f:3f:26:10:23:
                    f8:be:aa:f7:83:c3:f6:fb:05:08:64:d3:30:0f:c2:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:12:47:1D:DE:D9:F5:A9:DB:BF:13:BA:D2:05:3B:19:05:2F:9B:27
            X509v3 Authority Key Identifier:
                keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:28:44:c4:9e:9a:31:07:8b:97:19:d7:5b:50:e3:96:01:59:
         72:f7:a5:eb:ed:df:6a:2a:d3:e8:27:f0:bc:83:95:c9:e3:b6:
         a5:05:2e:06:34:29:e8:97:5e:40:45:b9:4f:a7:a1:e5:55:e7:
         30:e8:53:c4:aa:fd:ff:cd:b0:16:c7:5c:18:ec:46:0e:68:d4:
         73:9e:84:49:66:f1:01:37:c2:fd:59:00:b6:8b:fa:77:bb:37:
         fe:1c:6a:8c:8e:c5:9f:f1:14:34:38:38:87:33:b8:33:22:d5:
         a8:46:bb:95:05:3c:96:2f:a3:65:b4:00:6f:77:85:45:e9:c9:
         e0:9c:63:7e:81:e8:c5:a7:5a:a6:cd:42:34:5b:72:d1:1d:12:
         28:da:65:c2:b1:23:9a:54:cf:6b:02:87:3f:93:d3:c8:2d:b5:
         18:de:72:80:71:bc:5d:18:d6:61:57:f1:78:5a:22:0d:f4:04:
         67:ca:f9:d0:81:20:00:e9:41:a3:b2:9f:9a:28:b8:19:de:cb:
         57:72:dc:32:77:11:a0:9c:d6:e9:a4:89:9b:9f:95:74:8d:73:
         ba:d3:4a:0e:ff:e5:b2:39:c9:d6:69:a4:b3:77:2a:9d:25:c6:
         f6:24:97:4e:2a:9d:6a:90:94:9e:30:04:0d:b8:0d:78:f8:dd:
         cc:47:bf:e3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMspOJreIh1Bve1MPoqTqYSFhuHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1
QUQwNzRENTAeFw0yNTEyMDkxMTI4NDNaFw0yNjEyMDgxMTMzNDNaMDMxMTAvBgNV
BAMTKDJCMTI0NzFEREVEOUY1QTlEQkJGMTNCQUQyMDUzQjE5MDUyRjlCMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTA0NRoRpMNiTUuEJVMCCuxfJP
DMiFqQU5butqtVJnfctu8NUUOfw6zxcI4eRpoPDIdJIlZO7P+sRB9xGneC9SLxU+
wltMc1RufUr2gvIxAq5IlYvAeohk2HXgoGKBjdujv29km8e9+vui0WTkfTs0WGrP
qg9Ba3XWOBUNi0qLR0OoH3McIKVDdyuDcukCMGJ1knJG1Eu3ytYDxo94Qby1wf98
VRzaO9BT9dCqc6xtNYyIrdYJBNIPw2svtucO6oNzosqYcT5+hp8xHZp+rzgUDBrk
xVNjKWZwWaeMALyeuWxmv25MowsaVtaPPyYQI/i+qveDw/b7BQhk0zAPwv4rAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKxJHHd7Z9anbvxO60gU7GQUvmycwHwYDVR0j
BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC
NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw
NzRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4YTc5NzU1LTIzOGEtNDZkMi1i
MDUyLTMwNTg3YmY5ZWZmNy8wLzMxMzAzMzJlMzIzMzM2MmUzMTM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+yWMA0GCSqG
SIb3DQEBCwUAA4IBAQAKKETEnpoxB4uXGddbUOOWAVly96Xr7d9qKtPoJ/C8g5XJ
47alBS4GNCnol15ARblPp6HlVecw6FPEqv3/zbAWx1wY7EYOaNRznoRJZvEBN8L9
WQC2i/p3uzf+HGqMjsWf8RQ0ODiHM7gzItWoRruVBTyWL6NltABvd4VF6cngnGN+
gejFp1qmzUI0W3LRHRIo2mXCsSOaVM9rAoc/k9PILbUY3nKAcbxdGNZhV/F4WiIN
9ARnyvnQgSAA6UGjsp+aKLgZ3stXctwydxGgnNbppImbn5V0jXO600oO/+WyOcnW
aaSzdyqdJcb2JJdOKp1qkJSeMAQNuA14+N3MR7/j
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:39:53 2025 by rpki-client