This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          FTYnPWS24KutCEB77kSb6hW+KB2BZNWH+4XZLzuJC2Y=
Subject key identifier:   85:F5:FF:91:8D:50:DE:95:90:2C:8B:F2:4B:5C:35:BC:2D:74:9B:1E
Certificate issuer:       /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial:       6BDB49A3797E63F117073322BE2890F0AF80EC57
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 05:00:00 +0000
ROA not before:           Wed 05 Nov 2025 04:55:00 +0000
ROA not after:            Wed 04 Nov 2026 05:00:00 +0000
asID:                     135478
IP address blocks:        103.121.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
                          rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 20:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:db:49:a3:79:7e:63:f1:17:07:33:22:be:28:90:f0:af:80:ec:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
        Validity
            Not Before: Nov  5 04:55:00 2025 GMT
            Not After : Nov  4 05:00:00 2026 GMT
        Subject: CN=85F5FF918D50DE95902C8BF24B5C35BC2D749B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:d4:fa:c6:36:4e:f6:d3:02:0f:9a:27:db:
                    19:84:ad:d4:61:ad:c8:21:79:20:48:41:80:96:f5:
                    a6:e1:cc:a5:5e:4c:d5:d1:b1:38:2c:7b:f3:3a:80:
                    76:90:46:fd:22:46:8d:ad:2e:69:75:a5:43:18:fa:
                    4e:45:5d:0f:79:25:9e:f4:80:1b:3a:6b:e6:6e:32:
                    c4:f2:9c:3d:02:57:c7:0e:a3:48:6e:c5:34:8b:56:
                    85:7e:3c:3e:9a:5b:61:30:36:19:6f:bc:f6:16:38:
                    74:3b:20:56:f1:9a:39:84:0e:e6:5e:71:a1:dc:7a:
                    78:55:c6:ed:1b:70:e1:3a:d6:2e:9b:f7:a4:1b:9e:
                    69:80:f8:61:0a:eb:12:68:1a:da:b0:d1:9e:27:a9:
                    ed:a4:9c:f2:ca:1a:7c:74:b6:60:e8:70:72:4e:8d:
                    52:cd:d0:85:91:eb:64:43:70:76:a0:69:99:7d:27:
                    c9:2e:52:e2:94:b3:9f:9b:7d:fc:f5:e3:23:23:23:
                    a3:d9:8b:76:e7:ff:36:ee:9f:1b:92:c7:8a:a8:e7:
                    9a:89:04:92:2b:de:22:65:cd:96:94:2a:01:01:53:
                    28:56:17:b0:99:07:61:5c:7f:f8:79:d2:6e:6c:c9:
                    f6:5b:0c:a8:8b:1e:b6:ce:c1:98:a1:6f:a7:dd:5c:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F5:FF:91:8D:50:DE:95:90:2C:8B:F2:4B:5C:35:BC:2D:74:9B:1E
            X509v3 Authority Key Identifier:
                keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:1c:65:39:34:17:a1:39:82:d9:48:0d:22:cd:bc:c1:65:e5:
         6a:a6:ba:d1:17:ed:1d:84:25:ed:8e:2e:3a:0f:d3:76:16:5b:
         70:e0:70:ea:22:3f:2d:2a:ec:da:ef:b4:5a:4e:06:a8:72:30:
         50:8e:a3:0c:71:27:e7:ba:aa:72:cd:28:99:4d:ff:9b:56:2a:
         80:dd:c6:2d:de:ef:db:9b:98:a3:17:16:b0:35:d2:05:76:42:
         5a:37:10:32:d8:49:e3:da:7c:46:dc:09:67:d7:92:a7:3f:7f:
         1b:70:af:d9:22:ee:c8:b5:01:44:80:c3:83:f4:45:05:68:9f:
         b0:fe:97:52:8e:46:f7:b2:7b:26:48:ec:b4:0b:27:14:6e:e2:
         ea:f0:11:6e:1e:ff:91:e4:ff:69:51:01:98:95:e5:a4:68:7e:
         b9:5d:62:f3:1c:cd:6e:d5:00:6c:37:a1:47:52:43:b0:98:cd:
         d9:60:f2:2a:8f:9c:53:ac:a7:a8:66:ed:74:b0:fc:85:9a:17:
         8f:7c:de:29:3a:9d:62:e2:c5:fe:83:01:ee:a8:5d:d0:f6:c8:
         69:11:3e:0f:ba:e0:94:c8:a7:1b:1d:7a:bb:d1:0b:6a:ad:0f:
         cd:5d:20:9c:ad:3c:25:88:47:50:1d:99:2b:ca:75:ff:5c:c7:
         61:24:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:34 2025 by rpki-client