This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3130332e34312e3136392e302f32342d3234203d3e203633353130.roa
File:                     3130332e34312e3136392e302f32342d3234203d3e203633353130.roa (raw, json)
Hash identifier:          YbMzsklhUnNFLiUL3eUvckWsyku5p4eRcoUqgAfUbbs=
Subject key identifier:   11:F7:EC:5D:7A:E1:9B:94:18:22:C0:8E:3D:4C:1D:02:FA:CA:DE:29
Certificate issuer:       /CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
Certificate serial:       4E2CDCADC8A5A6DDBA704869665092DBF1629C56
Authority key identifier: 79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3130332e34312e3136392e302f32342d3234203d3e203633353130.roa
Signing time:             Thu 18 Dec 2025 04:04:16 +0000
ROA not before:           Thu 18 Dec 2025 03:59:16 +0000
ROA not after:            Thu 17 Dec 2026 04:04:16 +0000
asID:                     63510
IP address blocks:        103.41.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl
                          rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 09:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2c:dc:ad:c8:a5:a6:dd:ba:70:48:69:66:50:92:db:f1:62:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D1595B22C90AC275A4090AF3BE0AEF665EA81B
        Validity
            Not Before: Dec 18 03:59:16 2025 GMT
            Not After : Dec 17 04:04:16 2026 GMT
        Subject: CN=11F7EC5D7AE19B941822C08E3D4C1D02FACADE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:d0:34:b0:8c:c3:b2:fc:82:6d:34:e7:10:
                    7b:3d:d5:20:6c:a6:a1:7c:3c:84:68:8a:65:f7:51:
                    d1:12:a5:83:5f:2e:1f:43:97:d5:d4:8a:e4:1e:7c:
                    d1:75:fb:75:0a:ea:4b:31:e8:04:87:87:03:6b:73:
                    9d:cb:c3:2a:cd:4f:d3:4a:8f:14:1c:52:2f:83:ab:
                    12:61:a6:29:17:05:aa:16:4f:c7:c5:03:45:c9:23:
                    25:a5:5d:7d:c3:de:8a:4e:1b:fb:ae:29:91:21:b4:
                    84:09:52:d6:26:ec:f6:52:45:82:94:83:9f:3b:a4:
                    64:c1:f9:ba:99:c1:fc:24:40:7c:0b:28:54:25:99:
                    3d:86:78:10:6c:f0:d2:c3:5e:6a:2b:b5:80:b1:d4:
                    d8:76:06:4a:ff:8f:66:48:f3:03:a0:1b:e1:d9:0f:
                    31:c7:d3:19:e0:3c:e5:fc:90:02:69:e5:d7:18:93:
                    20:96:ed:70:cd:fb:4c:62:d2:a3:3e:a1:ce:ad:a9:
                    ef:f4:b2:a5:4a:ef:87:0d:13:d8:71:62:00:2e:ff:
                    71:05:81:59:44:60:eb:e0:fa:4e:fd:d0:db:5a:7f:
                    87:14:8e:81:b6:1d:3a:6f:a6:e0:2e:6d:fc:48:d1:
                    2e:54:4d:b2:72:b2:a1:fc:46:d1:96:34:0f:99:84:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F7:EC:5D:7A:E1:9B:94:18:22:C0:8E:3D:4C:1D:02:FA:CA:DE:29
            X509v3 Authority Key Identifier:
                keyid:79:D1:59:5B:22:C9:0A:C2:75:A4:09:0A:F3:BE:0A:EF:66:5E:A8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79D1595B22C90AC275A4090AF3BE0AEF665EA81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/45869181-ea55-421d-aba8-6968314c8d80/0/3130332e34312e3136392e302f32342d3234203d3e203633353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:0c:ae:46:fb:31:75:e0:20:50:05:8c:2d:6f:f6:b4:41:
         94:50:d0:47:97:ed:a8:ea:c1:e0:33:68:84:4e:f9:f4:19:ec:
         1b:b6:62:4a:be:1a:ba:61:66:fe:b3:48:7d:9c:32:4e:2f:f7:
         be:2c:38:6e:f1:0e:13:05:a5:6d:18:7a:7a:aa:04:3b:63:52:
         b2:15:e9:ad:08:ff:e1:29:c6:e7:30:94:61:36:f1:5f:42:54:
         31:be:51:b2:4d:6c:bb:8f:d7:00:03:92:68:52:22:13:ec:09:
         b7:b6:1e:24:18:d0:ec:9d:7e:d4:6b:b6:7f:09:be:7a:b9:29:
         42:d4:33:62:2c:67:c0:05:5a:77:c0:c9:ce:ff:92:b7:90:08:
         20:92:89:34:e8:01:7a:5e:3e:b2:32:17:f6:9a:8f:1d:86:ea:
         5e:7e:97:f8:4c:53:b0:de:53:f8:c2:53:47:23:f8:1d:ac:c9:
         3f:22:0b:b6:1c:70:1f:9a:25:24:82:89:75:87:12:5f:89:fc:
         06:32:2d:d6:a4:0b:31:b6:34:76:12:d0:4e:8e:14:20:1c:1b:
         90:79:d4:80:28:91:1f:11:ba:4b:fb:58:d8:a0:81:35:a9:3a:
         16:02:b1:22:12:fd:54:5c:67:3f:c2:0a:a7:db:e5:da:ed:28:
         46:61:83:85
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTizcrcilpt26cEhpZlCS2/FinFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlEMTU5NUIyMkM5MEFDMjc1QTQwOTBBRjNCRTBBRUY2
NjVFQTgxQjAeFw0yNTEyMTgwMzU5MTZaFw0yNjEyMTcwNDA0MTZaMDMxMTAvBgNV
BAMTKDExRjdFQzVEN0FFMTlCOTQxODIyQzA4RTNENEMxRDAyRkFDQURFMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLa9A0sIzDsvyCbTTnEHs91SBs
pqF8PIRoimX3UdESpYNfLh9Dl9XUiuQefNF1+3UK6ksx6ASHhwNrc53LwyrNT9NK
jxQcUi+DqxJhpikXBaoWT8fFA0XJIyWlXX3D3opOG/uuKZEhtIQJUtYm7PZSRYKU
g587pGTB+bqZwfwkQHwLKFQlmT2GeBBs8NLDXmortYCx1Nh2Bkr/j2ZI8wOgG+HZ
DzHH0xngPOX8kAJp5dcYkyCW7XDN+0xi0qM+oc6tqe/0sqVK74cNE9hxYgAu/3EF
gVlEYOvg+k790Ntaf4cUjoG2HTpvpuAubfxI0S5UTbJysqH8RtGWNA+ZhHnrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUEffsXXrhm5QYIsCOPUwdAvrK3ikwHwYDVR0j
BBgwFoAUedFZWyLJCsJ1pAkK874K72ZeqBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NTg2OTE4MS1lYTU1LTQyMWQtYWJhOC02OTY4MzE0YzhkODAvMC83OUQxNTk1QjIy
QzkwQUMyNzVBNDA5MEFGM0JFMEFFRjY2NUVBODFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzlEMTU5NUIyMkM5MEFDMjc1QTQwOTBBRjNCRTBBRUY2NjVF
QTgxQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ1ODY5MTgxLWVhNTUtNDIxZC1h
YmE4LTY5NjgzMTRjOGQ4MC8wLzMxMzAzMzJlMzQzMTJlMzEzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM1MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpqTANBgkqhkiG
9w0BAQsFAAOCAQEAgsoMrkb7MXXgIFAFjC1v9rRBlFDQR5ftqOrB4DNohE759Bns
G7ZiSr4aumFm/rNIfZwyTi/3viw4bvEOEwWlbRh6eqoEO2NSshXprQj/4SnG5zCU
YTbxX0JUMb5Rsk1su4/XAAOSaFIiE+wJt7YeJBjQ7J1+1Gu2fwm+erkpQtQzYixn
wAVad8DJzv+St5AIIJKJNOgBel4+sjIX9pqPHYbqXn6X+ExTsN5T+MJTRyP4HazJ
PyILthxwH5olJIKJdYcSX4n8BjIt1qQLMbY0dhLQTo4UIBwbkHnUgCiRHxG6S/tY
2KCBNak6FgKxIhL9VFxnP8IKp9vl2u0oRmGDhQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 09:39:54 2025 by rpki-client