This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa
File:                     3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (raw, json)
Hash identifier:          qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=
Subject key identifier:   69:F5:0C:78:68:88:00:E0:70:FE:2E:22:BF:AC:26:07:7C:77:78:EC
Certificate issuer:       /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Certificate serial:       7D83DCA7C1C68B0D6CCE72E85D9C19E3F055039D
Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa
Signing time:             Sat 22 Nov 2025 15:00:00 +0000
ROA not before:           Sat 22 Nov 2025 14:55:00 +0000
ROA not after:            Sat 21 Nov 2026 15:00:00 +0000
asID:                     151589
IP address blocks:        103.76.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
                          rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:83:dc:a7:c1:c6:8b:0d:6c:ce:72:e8:5d:9c:19:e3:f0:55:03:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
        Validity
            Not Before: Nov 22 14:55:00 2025 GMT
            Not After : Nov 21 15:00:00 2026 GMT
        Subject: CN=69F50C78688800E070FE2E22BFAC26077C7778EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:09:43:e3:bf:2c:d4:16:78:c0:8d:2a:bb:
                    e9:85:b7:11:85:8e:73:26:40:b4:1d:3a:35:89:5c:
                    e2:e3:02:6b:91:83:6a:39:1c:39:c4:b4:40:6d:7d:
                    70:a5:af:9c:0d:a9:c7:ac:3b:96:8d:a0:e5:b0:a1:
                    3a:a2:f9:bc:7d:81:64:10:b5:82:be:fc:6a:a5:3d:
                    3f:70:9f:3e:a5:03:40:9f:75:76:5c:7f:bb:69:19:
                    03:f6:67:ec:06:12:06:57:73:2e:cf:4d:33:4b:ab:
                    ff:41:7d:62:a7:f1:04:dc:48:38:5e:2b:3a:f3:cd:
                    dc:79:8d:38:d4:94:a7:21:fe:c7:5d:cb:5d:ce:f9:
                    68:38:92:06:67:40:be:9f:2f:01:2e:64:fc:35:15:
                    b5:22:fc:e6:d6:49:f6:85:a7:06:8a:01:c0:70:18:
                    8c:bb:57:13:9a:83:ca:d8:51:9b:0b:c5:38:ae:6f:
                    1b:9b:c7:d1:ce:85:a9:84:6b:99:8e:69:a4:d2:71:
                    29:1a:57:ba:47:2f:e2:64:b7:ad:39:7d:24:b6:e5:
                    4f:02:5c:aa:c0:31:05:f9:c6:10:f7:ff:79:70:69:
                    d0:cc:1c:a1:70:ad:7b:c0:84:5a:08:5e:4c:71:75:
                    35:46:68:93:b1:d1:24:0e:1d:67:12:c9:a0:83:4b:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F5:0C:78:68:88:00:E0:70:FE:2E:22:BF:AC:26:07:7C:77:78:EC
            X509v3 Authority Key Identifier:
                keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:69:e6:87:72:9b:90:e5:5e:59:2f:9f:7f:eb:1a:ed:9b:51:
         21:d4:65:67:27:1e:21:e2:04:36:40:27:74:c9:57:bb:5d:6f:
         97:ae:dc:2b:54:81:ab:3f:b6:9d:61:11:42:86:d0:c1:ed:db:
         47:46:e4:62:2a:47:38:42:fa:1f:9d:ad:fb:a2:00:9f:9b:7d:
         48:c7:a6:b8:46:de:b5:df:85:73:f3:02:84:34:37:68:0c:37:
         3c:d3:d1:46:4b:d8:a6:e2:41:8c:c6:c6:22:87:7f:92:26:66:
         ea:01:2e:b2:21:5a:ac:d2:49:4a:61:a3:24:a6:6c:21:d5:6b:
         4c:0b:61:21:78:ad:a9:d3:e1:fe:5a:bc:64:20:9b:d3:ef:5f:
         ce:79:73:1a:20:ce:dc:91:dc:47:7f:75:7e:9f:fd:ee:e4:c1:
         7d:45:d6:7d:de:87:09:91:34:ab:cd:58:d2:2d:2e:5a:cb:5c:
         36:a4:87:b9:81:30:75:4e:2a:84:a9:53:35:a9:92:fe:52:40:
         d3:c5:00:ff:79:80:4c:e1:d6:87:00:79:7a:ba:08:04:d1:e0:
         90:1a:1b:60:39:e4:a6:76:8a:e1:4a:81:68:82:38:76:76:2b:
         50:70:17:bd:8d:1d:30:58:e0:12:36:8c:c2:47:af:17:5e:37:
         52:9d:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:39 2025 by rpki-client