This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
File:                     3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (raw, json)
Hash identifier:          1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=
Subject key identifier:   8B:4A:AA:02:05:85:41:21:51:A0:DC:B1:76:0E:81:4E:4E:D9:D3:BA
Certificate issuer:       /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Certificate serial:       559685C6EE11D8FC3222174DA5A678FE7A82701C
Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
Signing time:             Mon 17 Nov 2025 10:00:00 +0000
ROA not before:           Mon 17 Nov 2025 09:55:00 +0000
ROA not after:            Mon 16 Nov 2026 10:00:00 +0000
asID:                     150474
IP address blocks:        103.110.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
                          rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 09:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:96:85:c6:ee:11:d8:fc:32:22:17:4d:a5:a6:78:fe:7a:82:70:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
        Validity
            Not Before: Nov 17 09:55:00 2025 GMT
            Not After : Nov 16 10:00:00 2026 GMT
        Subject: CN=8B4AAA020585412151A0DCB1760E814E4ED9D3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:96:a3:71:88:fe:a1:e6:06:ab:18:8b:30:
                    23:bc:7e:8e:b0:f0:ff:c6:5e:9c:e9:90:c9:38:39:
                    d6:b8:4b:9a:f7:1d:eb:45:bb:e8:b9:b3:27:ec:45:
                    bf:db:b1:5b:7e:21:e9:97:6f:a7:ae:e3:35:ab:f7:
                    e5:66:e9:6d:a4:31:7f:6f:70:36:60:f6:40:76:39:
                    bd:f6:77:53:b6:1a:8d:bd:8b:85:cb:18:0f:2f:be:
                    ba:74:75:ea:96:40:f5:66:e2:48:f0:19:38:7f:88:
                    6a:e8:f1:8f:43:22:d8:94:a3:99:cf:19:e5:97:ad:
                    53:0f:b9:e1:c6:72:c9:97:77:bc:04:2d:df:37:da:
                    30:2a:d2:8a:75:0d:9b:ab:77:2b:2a:97:7e:00:91:
                    83:fc:c9:a6:10:84:ee:cb:8e:23:05:a4:2b:3b:af:
                    2d:5c:dc:b9:c0:44:ae:c0:be:68:f8:60:2b:ce:57:
                    a4:ed:c7:5b:0c:5b:0e:75:47:0d:56:20:1a:0d:b8:
                    a7:b8:20:a6:e4:da:59:34:7d:f2:20:3a:e3:d9:eb:
                    1b:db:0b:59:96:ea:d5:fc:68:4b:5f:3d:a0:59:07:
                    69:4b:7b:a4:7c:9d:ab:2f:69:e1:f5:ad:6a:d8:27:
                    36:eb:10:6b:90:88:3b:52:e2:8b:30:9a:d0:ba:86:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:AA:02:05:85:41:21:51:A0:DC:B1:76:0E:81:4E:4E:D9:D3:BA
            X509v3 Authority Key Identifier:
                keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1d:63:59:45:76:cc:69:6d:69:23:60:47:68:c9:e4:08:ab:
         fb:33:80:bf:35:e5:16:d7:38:ea:ed:63:e4:55:49:7d:9a:12:
         85:9c:3e:ec:8d:3e:8d:e2:5c:bf:e7:15:03:8c:70:6c:d0:ae:
         72:37:e3:de:23:c8:4b:99:e0:df:9b:33:59:38:6d:e9:23:ca:
         68:cf:e6:b6:98:f8:ae:b0:72:19:a5:97:b7:48:23:38:d6:3e:
         86:82:dd:0c:b7:03:d1:4c:b7:8c:1a:82:d0:0c:c1:ec:d9:f0:
         a0:7f:55:c3:a5:4a:46:d0:92:a7:e8:d9:ab:5b:92:7e:6b:50:
         d5:05:3a:84:c1:f6:3e:c7:c1:f2:99:58:b5:ce:b0:3e:45:d8:
         33:99:32:2f:c5:82:2c:08:08:cc:25:44:65:6d:5b:54:f7:74:
         05:ba:ca:5b:b5:5b:68:49:1d:59:e1:08:b4:32:a7:33:12:bb:
         71:ca:25:6a:ca:1a:69:66:a1:19:5b:fc:22:04:b6:36:44:aa:
         01:94:75:94:6a:44:d5:d2:f8:66:8c:5b:9f:4f:56:b4:ca:f0:
         9b:be:07:ed:c8:82:7d:c9:ab:24:22:ee:6c:92:af:df:05:f0:
         e8:55:81:9c:e0:f5:95:97:cb:3e:cb:86:79:13:67:f7:61:90:
         c2:b6:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:37 2025 by rpki-client