This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa
File:                     3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa (raw, json)
Hash identifier:          jZM60p+ihsOsnG/o5i9hHgFmzFPD3WS1aTcQqe2yPLg=
Subject key identifier:   0C:39:B9:E4:A8:E7:53:56:FC:38:82:C9:66:7E:19:03:AE:3F:AE:A5
Certificate issuer:       /CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
Certificate serial:       136F6E4ED3BABEF01811E202D7C4E5CC37404B34
Authority key identifier: 6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa
Signing time:             Fri 28 Nov 2025 15:00:00 +0000
ROA not before:           Fri 28 Nov 2025 14:55:00 +0000
ROA not after:            Fri 27 Nov 2026 15:00:00 +0000
asID:                     138821
IP address blocks:        103.136.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl
                          rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6f:6e:4e:d3:ba:be:f0:18:11:e2:02:d7:c4:e5:cc:37:40:4b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53
        Validity
            Not Before: Nov 28 14:55:00 2025 GMT
            Not After : Nov 27 15:00:00 2026 GMT
        Subject: CN=0C39B9E4A8E75356FC3882C9667E1903AE3FAEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3b:6d:47:78:ee:eb:a8:83:2f:cc:53:7f:be:
                    db:ef:d5:8a:2a:ac:2b:58:af:75:6e:84:38:6c:38:
                    70:04:f1:bf:a0:30:e6:fb:c3:91:90:9a:17:a9:38:
                    be:29:46:f7:e3:96:8a:76:ff:b9:c6:53:61:b0:05:
                    98:2c:7e:a4:3c:0b:51:43:07:15:d3:f6:fa:3f:d7:
                    9e:a9:37:ef:0d:38:20:e9:71:78:ec:3b:63:bc:54:
                    5d:67:52:27:54:b6:f1:9f:d2:8a:c7:03:63:ce:1b:
                    94:99:15:8f:bd:e5:2d:03:49:48:dc:51:0e:71:37:
                    fa:f0:d3:2b:8e:db:2e:ec:9a:99:c2:b4:da:64:9e:
                    d5:ce:16:92:0b:0d:bf:b1:a1:90:82:45:b9:61:d3:
                    8a:d9:bc:24:e5:8a:42:26:0a:0b:62:f8:28:3c:f3:
                    c3:3c:ae:a3:a9:4f:91:e0:01:6b:27:e2:02:74:ce:
                    f7:a5:f0:8b:3b:7e:00:4e:1f:f5:82:a9:47:e6:58:
                    d2:3b:55:a0:03:df:85:b6:a3:a7:b3:f6:1a:01:56:
                    1a:d5:d7:6c:5d:49:a9:d4:81:02:e5:ca:96:6f:bf:
                    09:43:64:c3:c7:74:ae:c5:22:45:26:75:c6:ac:5f:
                    21:a3:5c:85:46:ff:ae:16:6b:c3:bc:1a:0b:60:b2:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:B9:E4:A8:E7:53:56:FC:38:82:C9:66:7E:19:03:AE:3F:AE:A5
            X509v3 Authority Key Identifier:
                keyid:6A:69:EF:C5:C8:97:90:7C:74:C8:A1:EB:DD:9D:37:FC:BF:B3:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A69EFC5C897907C74C8A1EBDD9D37FCBFB37B53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401b1c1b-656c-489d-9ed3-ccc77c83018d/0/3130332e3133362e31342e302f32342d3234203d3e20313338383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:f0:60:00:2a:13:d4:9f:f6:1e:43:95:60:68:7b:0d:82:
         6c:cd:cb:d9:6c:e2:df:41:cc:e8:67:ce:e4:c7:3e:49:24:c1:
         b6:d2:f8:91:0c:89:99:fd:96:30:56:1b:af:f8:d6:06:df:bf:
         20:93:f0:ac:7e:9b:28:a5:d7:0d:cc:a5:52:f9:bf:ec:54:10:
         7b:ba:99:23:5f:e4:f8:4b:f0:f7:27:e1:68:18:a2:a5:07:9e:
         4e:8f:98:f9:43:f8:0e:ce:34:b6:a0:e0:60:ae:80:67:b4:19:
         2c:fe:17:dc:c9:4c:7a:81:43:dd:17:b6:5c:57:4c:5d:3f:c3:
         3f:6c:9a:35:5b:af:c5:7b:95:e5:b1:37:07:b3:38:5e:cb:23:
         d2:f4:3b:a5:b6:9b:4e:c1:a6:0b:03:29:48:dd:cd:97:9d:24:
         07:0c:a3:06:6d:3c:f0:a1:15:81:ed:3e:00:c0:2e:ff:1f:d7:
         9d:48:98:cf:45:9d:27:53:41:a2:62:a3:cb:cb:84:b3:04:06:
         96:36:c8:b8:ba:3f:c2:6f:7c:7a:4e:39:1c:05:a6:3e:61:d3:
         94:bd:b9:8c:61:4f:d5:3c:49:67:1d:a2:08:9c:4d:a4:10:18:
         68:c5:66:d7:9c:92:81:2a:aa:8f:e2:ab:c1:86:8b:b9:d9:f2:
         ee:42:cf:e0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUE29uTtO6vvAYEeIC18TlzDdASzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNC
RkIzN0I1MzAeFw0yNTExMjgxNDU1MDBaFw0yNjExMjcxNTAwMDBaMDMxMTAvBgNV
BAMTKDBDMzlCOUU0QThFNzUzNTZGQzM4ODJDOTY2N0UxOTAzQUUzRkFFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeO21HeO7rqIMvzFN/vtvv1Yoq
rCtYr3VuhDhsOHAE8b+gMOb7w5GQmhepOL4pRvfjlop2/7nGU2GwBZgsfqQ8C1FD
BxXT9vo/156pN+8NOCDpcXjsO2O8VF1nUidUtvGf0orHA2POG5SZFY+95S0DSUjc
UQ5xN/rw0yuO2y7smpnCtNpkntXOFpILDb+xoZCCRblh04rZvCTlikImCgti+Cg8
88M8rqOpT5HgAWsn4gJ0zvel8Is7fgBOH/WCqUfmWNI7VaAD34W2o6ez9hoBVhrV
12xdSanUgQLlypZvvwlDZMPHdK7FIkUmdcasXyGjXIVG/64Wa8O8GgtgshVdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUDDm55KjnU1b8OILJZn4ZA64/rqUwHwYDVR0j
BBgwFoAUamnvxciXkHx0yKHr3Z03/L+ze1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MDFiMWMxYi02NTZjLTQ4OWQtOWVkMy1jY2M3N2M4MzAxOGQvMC82QTY5RUZDNUM4
OTc5MDdDNzRDOEExRUJERDlEMzdGQ0JGQjM3QjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkE2OUVGQzVDODk3OTA3Qzc0QzhBMUVCREQ5RDM3RkNCRkIz
N0I1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWIxYzFiLTY1NmMtNDg5ZC05
ZWQzLWNjYzc3YzgzMDE4ZC8wLzMxMzAzMzJlMzEzMzM2MmUzMTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4gOMA0GCSqG
SIb3DQEBCwUAA4IBAQBqP/BgACoT1J/2HkOVYGh7DYJszcvZbOLfQczoZ87kxz5J
JMG20viRDImZ/ZYwVhuv+NYG378gk/CsfpsopdcNzKVS+b/sVBB7upkjX+T4S/D3
J+FoGKKlB55Oj5j5Q/gOzjS2oOBgroBntBks/hfcyUx6gUPdF7ZcV0xdP8M/bJo1
W6/Fe5XlsTcHszheyyPS9DultptOwaYLAylI3c2XnSQHDKMGbTzwoRWB7T4AwC7/
H9edSJjPRZ0nU0GiYqPLy4SzBAaWNsi4uj/Cb3x6TjkcBaY+YdOUvbmMYU/VPEln
HaIInE2kEBhoxWbXnJKBKqqP4qvBhou52fLuQs/g
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:02 2025 by rpki-client