This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
File:                     3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=
Subject key identifier:   84:FE:5B:FE:E9:7C:18:63:AF:EE:60:A5:BB:A0:E0:6C:69:B9:51:C1
Certificate issuer:       /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial:       020F14A44AA820A9C1BA32AE27C274B2F59B4B31
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
Signing time:             Tue 09 Dec 2025 11:34:02 +0000
ROA not before:           Tue 09 Dec 2025 11:29:02 +0000
ROA not after:            Tue 08 Dec 2026 11:34:02 +0000
asID:                     55664
IP address blocks:        103.236.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
                          rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 08:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0f:14:a4:4a:a8:20:a9:c1:ba:32:ae:27:c2:74:b2:f5:9b:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
        Validity
            Not Before: Dec  9 11:29:02 2025 GMT
            Not After : Dec  8 11:34:02 2026 GMT
        Subject: CN=84FE5BFEE97C1863AFEE60A5BBA0E06C69B951C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:b6:aa:ea:78:08:dc:29:8b:e3:40:8e:b4:
                    a3:3d:94:2f:82:b5:5f:7a:89:8c:0d:3b:34:6d:95:
                    28:93:30:78:cc:c0:f9:3f:9d:51:1a:30:b5:de:81:
                    08:7a:41:4a:d2:f4:34:e1:6e:31:70:87:90:f8:56:
                    6b:0b:a0:e3:7f:7f:38:e0:fa:fd:1f:f9:9f:b6:05:
                    1c:16:08:7f:05:aa:d6:94:27:58:fd:f1:8f:22:72:
                    05:f1:8b:32:9c:26:15:71:57:d8:c0:29:81:44:93:
                    c3:3d:7a:3c:b6:df:51:de:79:2e:0b:73:68:27:e4:
                    ef:59:41:d1:a6:8d:6e:9e:13:65:58:ae:cf:4e:4a:
                    62:de:fb:7a:86:91:61:b7:b3:b0:74:af:3d:dc:5f:
                    96:b9:ab:51:0d:73:c0:9b:5c:6b:62:d6:23:92:ea:
                    5f:8c:5c:be:bf:e3:05:f3:77:fe:8b:26:78:ee:9b:
                    95:a3:ae:5e:7d:74:cc:e6:7f:37:5b:ae:24:ae:d8:
                    da:1d:9b:e0:ec:13:df:23:90:09:4e:7b:46:ea:1c:
                    ea:7b:4f:3b:ed:88:48:02:16:4e:32:80:d4:39:20:
                    b9:c9:71:35:3f:e0:58:30:a3:96:85:1e:ec:f0:e0:
                    04:80:13:af:6c:b0:fd:5a:bc:95:f5:87:d6:3d:fe:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FE:5B:FE:E9:7C:18:63:AF:EE:60:A5:BB:A0:E0:6C:69:B9:51:C1
            X509v3 Authority Key Identifier:
                keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:4a:27:05:a3:6e:51:c7:31:86:2d:e1:e8:29:18:ef:53:
         47:9b:e9:26:0d:9c:9d:35:50:7b:d7:ff:a5:00:6c:42:e7:71:
         f5:19:1d:06:a4:4d:d1:33:3a:34:65:be:c0:3f:5e:8a:50:fc:
         bf:f4:4b:36:17:58:56:9f:d0:45:9e:cb:be:44:48:5a:92:db:
         b5:b9:7a:2b:89:42:2f:23:41:63:b6:cb:a5:93:a4:4a:bb:d6:
         91:8c:e0:f6:89:87:52:7f:f5:6a:b8:29:f8:52:27:6c:c1:1e:
         ed:a7:6a:f2:84:94:b0:6c:79:8f:dc:b0:b9:b1:a8:a9:e7:22:
         b8:6b:6b:5d:7b:51:10:fa:01:4b:4d:02:f9:68:d2:b5:0f:27:
         4f:5d:61:44:4e:c2:9d:ea:de:8b:14:ce:6c:8a:da:db:71:31:
         3c:96:36:81:a0:06:23:a2:10:69:f8:69:08:8e:df:51:44:c1:
         99:a4:8b:42:d8:2d:f3:16:0b:1b:7d:c5:fb:3d:ce:fc:d6:b8:
         18:1c:15:dd:b4:01:45:5b:dc:4e:53:0e:76:4c:59:4d:b5:3b:
         d8:4e:ae:07:d9:eb:94:c9:29:ad:29:c9:a4:6c:70:08:9a:0f:
         87:e9:1f:18:09:f3:76:57:66:d2:15:d0:04:af:9b:d3:71:46:
         96:f8:ec:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:39:54 2025 by rpki-client