This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa
File:                     3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (raw, json)
Hash identifier:          DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=
Subject key identifier:   6F:A9:EE:80:AE:82:A1:06:57:89:0E:C9:28:68:47:24:A9:D3:C4:6F
Certificate issuer:       /CN=6886844AB176920850E0984917E9713667D0A025
Certificate serial:       3D71C2ACF2117E3CF629EFC86C37C0851D1E7174
Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa
Signing time:             Sat 15 Nov 2025 05:09:50 +0000
ROA not before:           Sat 15 Nov 2025 05:04:50 +0000
ROA not after:            Sat 14 Nov 2026 05:09:50 +0000
asID:                     137289
IP address blocks:        103.51.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl
                          rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 05:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:71:c2:ac:f2:11:7e:3c:f6:29:ef:c8:6c:37:c0:85:1d:1e:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6886844AB176920850E0984917E9713667D0A025
        Validity
            Not Before: Nov 15 05:04:50 2025 GMT
            Not After : Nov 14 05:09:50 2026 GMT
        Subject: CN=6FA9EE80AE82A10657890EC928684724A9D3C46F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:13:3f:4c:20:71:5c:e0:0d:d4:a2:a8:08:b6:
                    0b:f3:43:f6:4c:fa:b1:26:32:68:a5:23:0d:c4:2a:
                    b7:2f:8d:da:ca:aa:4d:4c:d4:17:26:f0:bd:ac:a6:
                    54:25:76:8c:ec:86:cd:80:d3:75:93:39:91:e2:c1:
                    a5:b7:44:31:a5:56:79:70:59:ec:48:10:c8:9b:33:
                    18:9a:eb:3a:82:1a:e2:69:76:a6:5c:11:72:e3:9e:
                    77:1c:f8:1f:e4:57:25:82:01:16:e2:f1:a0:f4:41:
                    bf:ac:6f:df:07:a1:d2:91:a8:c4:6d:ab:03:33:a0:
                    7e:ee:25:f5:46:e5:bc:92:67:09:06:32:14:29:f3:
                    51:62:55:85:11:ea:c8:71:ab:47:22:09:3f:39:6b:
                    7c:5e:de:83:6b:ee:ba:f8:55:72:48:b5:c8:3d:c0:
                    c4:1f:57:78:a5:4e:2d:ed:87:9b:6e:17:0b:6f:1e:
                    b8:cf:25:9a:90:70:f5:19:b8:c4:f5:8d:ed:ae:45:
                    c5:c6:0b:01:12:8e:7e:23:f3:b4:df:e5:b6:a7:94:
                    93:90:7b:f1:c1:66:36:df:aa:2c:d0:2e:d1:3a:a2:
                    85:47:76:03:2d:26:89:f6:45:c9:27:39:7d:7f:f5:
                    a6:63:4c:93:35:00:84:06:bb:0b:b9:b4:77:63:d3:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:EE:80:AE:82:A1:06:57:89:0E:C9:28:68:47:24:A9:D3:C4:6F
            X509v3 Authority Key Identifier:
                keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:59:d3:f5:f0:66:54:1e:5c:59:b3:12:4d:8a:cb:07:1b:
         9d:43:3e:73:c5:43:e2:bf:25:67:bf:73:a1:09:13:f9:48:c5:
         d3:bf:95:66:0d:11:57:56:d3:83:78:c8:70:a6:51:65:31:74:
         29:a9:5a:0e:bd:a2:1a:f1:bf:e9:7c:f1:7c:f4:ed:12:da:bb:
         16:ce:43:91:2c:80:fd:67:de:80:78:70:89:23:90:16:ca:4e:
         93:53:1f:29:aa:62:be:ee:8d:49:f9:5b:c0:2a:5d:12:e3:3b:
         fa:cc:25:d7:08:11:50:02:15:ac:79:0b:08:c9:f7:fb:c4:39:
         e7:39:00:f6:c8:a7:49:a6:4d:9c:9e:f9:4b:47:a1:a7:e5:f4:
         9f:a3:02:80:de:b4:c2:60:55:33:fe:bb:95:a6:59:84:98:4c:
         8b:14:07:0d:0c:e9:1c:d9:0f:a3:dd:7a:91:1a:14:22:02:5e:
         fc:ef:27:1d:12:e2:f9:dd:39:58:e5:5f:c6:b7:e1:09:d9:52:
         4d:4e:0e:c4:e5:da:82:32:77:81:5a:34:b6:91:3c:44:3c:0f:
         bf:f7:82:ca:a8:26:f0:42:65:0d:3b:c7:69:d2:e3:c5:66:ed:
         2d:a0:c1:f2:4e:3d:2b:e1:19:6e:87:11:85:b5:48:04:00:43:
         fd:fd:79:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:51:20 2025 by rpki-client