This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa
File:                     3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (raw, json)
Hash identifier:          HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=
Subject key identifier:   DB:B8:1E:B2:37:9C:2D:A5:D0:36:94:A3:1E:3A:8E:7F:AE:D6:F9:F2
Certificate issuer:       /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20
Certificate serial:       610C504AC5AC5D7211601A63DA7B5A8577908953
Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa
Signing time:             Thu 20 Nov 2025 02:00:02 +0000
ROA not before:           Thu 20 Nov 2025 01:55:02 +0000
ROA not after:            Thu 19 Nov 2026 02:00:02 +0000
asID:                     141965
IP address blocks:        103.165.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl
                          rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:50:4a:c5:ac:5d:72:11:60:1a:63:da:7b:5a:85:77:90:89:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20
        Validity
            Not Before: Nov 20 01:55:02 2025 GMT
            Not After : Nov 19 02:00:02 2026 GMT
        Subject: CN=DBB81EB2379C2DA5D03694A31E3A8E7FAED6F9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:1e:4c:22:db:a1:e3:0f:fe:af:92:1b:79:
                    89:51:75:18:bf:85:90:22:00:6b:cd:ac:0a:e1:54:
                    30:e7:74:f6:8a:57:f7:f4:8a:94:f7:e5:9f:8c:6e:
                    4c:5c:b4:b3:94:9c:ba:a9:52:4e:1b:21:6b:36:82:
                    ed:b8:fb:4a:17:02:23:4d:31:1c:fb:a3:f7:31:82:
                    24:8d:38:9a:e0:f8:46:80:62:99:17:af:52:65:61:
                    c9:e9:8a:09:b9:4f:c6:c9:39:10:65:1e:5c:2c:2e:
                    c8:8a:9e:79:d8:c3:0a:70:6f:3f:d6:80:c7:68:e1:
                    2a:40:32:75:b1:21:5a:ee:a1:8a:c6:d7:5e:f7:da:
                    50:f0:f1:f1:15:79:cb:ac:7e:5e:db:e1:9a:88:5b:
                    69:7b:0e:a4:9e:33:7b:04:10:eb:02:8b:f7:69:78:
                    a6:88:67:c7:aa:cb:14:a0:45:98:df:08:bd:7d:2e:
                    bb:7e:11:15:69:86:3d:43:3a:be:3f:ca:1a:79:fc:
                    c1:a1:59:cb:49:5b:32:69:23:30:ea:d1:9d:92:ff:
                    24:2f:c7:0b:ea:d6:c7:12:15:47:6c:29:c0:88:b5:
                    8d:d1:c3:16:54:3c:1e:ac:92:b5:1f:16:6c:c1:26:
                    26:0d:ac:10:d9:3c:73:b2:24:c1:cb:cc:f7:b7:34:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B8:1E:B2:37:9C:2D:A5:D0:36:94:A3:1E:3A:8E:7F:AE:D6:F9:F2
            X509v3 Authority Key Identifier:
                keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:6f:7f:75:57:23:1e:94:e1:31:cd:3c:f0:fd:58:7f:c7:
         48:29:6a:6d:4b:2d:b0:64:0f:bb:1f:97:a6:3f:97:a2:09:58:
         00:44:cd:c6:17:6a:f2:60:14:11:61:22:20:09:69:fe:54:2c:
         28:d9:f0:fc:23:56:e7:93:96:7f:5e:e9:d4:74:75:94:28:51:
         6c:db:18:4f:fd:f8:5a:0c:1e:ff:b3:6c:25:60:38:1d:99:26:
         77:ef:7c:e0:c5:42:25:41:49:1f:fc:0e:75:93:4a:14:b2:0c:
         2b:af:d1:50:a6:eb:bc:a3:62:11:fd:12:22:84:1d:3f:01:18:
         5a:e2:33:9e:96:79:72:5a:41:b0:33:28:3f:0a:a4:d9:9e:6d:
         a8:02:33:c0:e1:04:1e:43:3c:be:6f:02:b4:52:3e:b9:f8:73:
         bd:2d:b2:2c:d5:8d:2d:60:e0:7b:bd:21:0c:7d:e3:98:1d:9c:
         40:a4:17:e7:a4:06:72:75:aa:7c:29:1c:80:8d:3e:f0:82:d1:
         dc:46:98:c4:71:22:3e:9d:80:00:61:28:d4:d6:c5:40:28:93:
         80:c6:99:a0:fd:11:ee:7d:ce:6f:f9:9a:77:49:ac:34:3d:1f:
         3a:cf:71:e4:00:97:06:b2:75:f8:76:a3:88:d1:0f:dc:d1:63:
         6a:ba:e3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:29:06 2025 by rpki-client