This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa
File:                     3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (raw, json)
Hash identifier:          nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=
Subject key identifier:   9E:5B:11:86:64:BE:2B:4A:2F:C0:59:84:85:2C:2F:97:0A:97:AC:B0
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       63A13BCA2CE105CBD6A74620B197F9EB075AB792
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa
Signing time:             Tue 25 Nov 2025 10:00:00 +0000
ROA not before:           Tue 25 Nov 2025 09:55:00 +0000
ROA not after:            Tue 24 Nov 2026 10:00:00 +0000
asID:                     55676
IP address blocks:        103.105.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 17:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a1:3b:ca:2c:e1:05:cb:d6:a7:46:20:b1:97:f9:eb:07:5a:b7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Nov 25 09:55:00 2025 GMT
            Not After : Nov 24 10:00:00 2026 GMT
        Subject: CN=9E5B118664BE2B4A2FC05984852C2F970A97ACB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:72:2f:17:c8:8b:e1:50:8e:0f:94:45:ca:ff:
                    0f:5d:aa:28:74:5b:f6:4d:92:40:c1:80:86:9b:45:
                    44:01:fe:6a:be:52:5f:1c:2a:66:67:42:7d:b9:99:
                    32:b2:2b:01:47:92:67:b1:18:c7:d2:2e:b7:73:87:
                    5e:70:23:c1:42:1b:63:e7:85:47:f8:0b:6d:56:2c:
                    bb:dd:37:84:4d:ae:9a:14:33:20:a3:3f:5c:5f:7e:
                    c2:3a:ed:63:f7:c9:17:06:00:d5:06:16:57:16:ef:
                    a7:75:ca:76:d1:78:6a:76:4f:77:78:c1:6e:18:b8:
                    e9:bf:7e:d9:74:e6:7d:72:a6:ce:f6:90:31:6d:86:
                    74:43:d3:49:d4:af:73:4f:36:ca:ef:b6:5e:25:9e:
                    2e:8a:7c:27:3b:20:db:d3:cc:11:c5:76:63:b7:63:
                    da:01:2c:93:c0:c7:c3:ef:85:84:65:f6:d9:16:71:
                    04:bf:c8:6f:3a:13:f5:87:88:92:a6:74:d5:4f:3f:
                    67:71:5e:30:e6:a9:58:c6:bf:57:bd:2f:7b:00:f7:
                    2c:32:d8:c4:58:de:de:a7:1d:e4:ac:ab:17:52:92:
                    fc:73:bb:88:61:85:c7:95:e2:1e:d0:cc:d4:4d:03:
                    3a:69:87:d9:96:cb:ce:28:f7:e3:e6:d2:1b:00:70:
                    44:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:11:86:64:BE:2B:4A:2F:C0:59:84:85:2C:2F:97:0A:97:AC:B0
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32342d3234203d3e203535363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:16:69:65:8b:1e:27:6d:d9:ae:5b:7c:69:75:58:b8:7b:77:
         d1:cf:0b:c6:f6:82:be:53:29:9a:28:a9:60:97:6f:d9:27:d1:
         56:5a:5b:9d:dd:e6:84:32:7a:2e:ff:56:6a:c7:f6:40:e6:a4:
         90:10:f1:ba:04:82:4d:e1:90:d1:56:b4:50:7b:0e:84:a0:58:
         c8:94:74:23:d6:6f:3e:64:68:ad:df:d5:5b:17:20:86:c9:84:
         19:7b:79:7b:f7:22:9d:c3:51:3c:9b:f7:28:45:f9:5e:8c:9b:
         62:7e:c3:40:00:68:83:8e:30:17:94:67:3c:8c:00:38:e8:56:
         20:52:a5:93:95:b5:ee:a1:3b:04:e3:70:02:14:0c:69:c7:e4:
         14:5d:ca:06:58:f4:2e:86:0d:13:5e:62:6b:dc:0a:a3:23:29:
         00:2c:09:e9:b9:66:6e:08:4f:29:a4:7c:21:1f:52:c7:3e:be:
         e3:55:06:23:05:2b:7b:34:3d:d9:0f:2c:7a:d3:be:55:4a:19:
         37:65:d3:28:ce:b6:29:a4:b8:59:73:00:c7:5c:7f:cf:d7:aa:
         a2:fb:0a:10:fe:9e:7b:d1:7d:f2:82:62:07:01:ad:31:ed:67:
         56:58:70:b8:81:6d:6b:a6:d1:00:86:2e:cc:f7:c6:b7:40:ee:
         65:ac:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:40 2025 by rpki-client