This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa
File:                     3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (raw, json)
Hash identifier:          NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=
Subject key identifier:   96:C8:BA:8A:78:A6:D8:FA:66:65:0D:3C:C0:E8:52:04:F1:E1:E2:74
Certificate issuer:       /CN=28E2707085C2950AF9267465A3801841D8077215
Certificate serial:       729658BE509CC447A1A019D4EDD856E31702DE8B
Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa
Signing time:             Tue 18 Nov 2025 04:02:39 +0000
ROA not before:           Tue 18 Nov 2025 03:57:39 +0000
ROA not after:            Tue 17 Nov 2026 04:02:39 +0000
asID:                     149670
IP address blocks:        103.184.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl
                          rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 23:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:58:be:50:9c:c4:47:a1:a0:19:d4:ed:d8:56:e3:17:02:de:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E2707085C2950AF9267465A3801841D8077215
        Validity
            Not Before: Nov 18 03:57:39 2025 GMT
            Not After : Nov 17 04:02:39 2026 GMT
        Subject: CN=96C8BA8A78A6D8FA66650D3CC0E85204F1E1E274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:d4:09:c4:f3:6d:bb:e5:8c:21:7b:a9:b5:
                    1a:33:96:a5:e9:4f:8a:a1:5f:d4:e3:b1:9a:67:a4:
                    01:f3:49:b4:8e:c9:36:72:d5:04:06:4b:93:63:ff:
                    34:12:7f:9e:7e:0e:c4:be:85:d0:dd:99:07:d9:13:
                    35:56:8a:33:81:6b:1b:cc:35:5b:90:5d:3a:b4:25:
                    93:04:58:83:e5:da:9a:de:2b:e8:27:0c:cf:3d:63:
                    ca:ee:ca:9c:5a:c6:8d:f6:3b:de:c6:7f:8f:a7:a1:
                    6e:36:64:eb:b4:d9:06:dc:22:5a:e4:8f:39:7b:c4:
                    e8:3c:04:3c:cf:c6:5f:9b:61:ad:09:e8:2a:a8:d9:
                    24:f2:4b:8d:87:f0:d8:52:e0:3b:2b:08:89:ae:6b:
                    b9:62:07:e7:f2:5d:06:8c:94:27:dd:04:0a:04:87:
                    b9:78:ad:cf:00:16:b8:c3:a2:e6:de:52:27:64:55:
                    8e:6f:ab:8d:70:9a:81:b6:d5:17:aa:45:d2:34:07:
                    79:a9:8c:80:b0:7c:78:5f:68:c9:58:36:aa:a1:fe:
                    3a:1b:6f:1f:ff:50:af:13:7c:a0:8a:3b:b0:c3:78:
                    43:18:00:38:f4:3d:e0:46:43:ba:a8:9e:6d:77:c9:
                    b5:d2:4c:46:04:02:32:92:5a:b1:56:86:a8:cb:83:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C8:BA:8A:78:A6:D8:FA:66:65:0D:3C:C0:E8:52:04:F1:E1:E2:74
            X509v3 Authority Key Identifier:
                keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:3d:75:aa:5f:c3:48:af:da:b3:20:1f:2b:a7:42:da:85:fd:
         d0:52:08:da:e7:1c:d6:56:fd:d6:a0:8c:de:24:11:e4:dd:b6:
         6f:65:ac:11:19:ee:68:49:1b:06:c1:da:1d:fb:e4:73:3e:17:
         0b:8d:b8:1b:d6:9c:0a:74:02:f8:41:74:02:c6:d7:10:29:7c:
         f6:55:8a:f8:d5:9d:dd:b4:c9:24:f7:20:17:29:80:eb:69:b4:
         a7:04:15:d7:79:42:26:a7:89:9b:6a:a6:26:50:3d:01:32:a5:
         12:0a:f1:3e:e3:d9:14:77:9d:51:29:29:1a:96:5f:e0:85:a7:
         87:ea:e6:1c:57:0b:af:c9:4d:20:be:ad:33:be:31:c5:1f:66:
         0a:7c:99:a6:15:ca:3e:de:d7:d4:78:5d:94:34:9d:98:42:b9:
         f1:e9:af:b6:c2:8e:ac:b3:51:99:15:a5:76:a9:b5:e9:73:22:
         d1:3e:46:8b:8a:74:57:aa:c3:7e:3e:ab:8a:6a:48:9b:db:74:
         7f:16:40:92:d2:1c:3d:d6:35:f0:ab:41:e0:4e:96:8c:92:b0:
         c4:8c:e3:e0:87:fc:a1:b5:78:ae:83:bd:d5:b0:ac:07:95:fe:
         5e:9c:c4:d4:72:8c:83:07:a2:0d:86:cb:a4:2e:da:fb:3f:9e:
         2c:8f:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:16 2025 by rpki-client