This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e203535363736.roa
File:                     3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (raw, json)
Hash identifier:          8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=
Subject key identifier:   6D:DB:F6:53:74:E7:CC:C0:CB:8F:2F:AC:6F:84:AF:45:40:2F:57:AD
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       644679B6EB35AF92F1504E81D8B2FACC51908CC7
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e203535363736.roa
Signing time:             Mon 01 Dec 2025 03:07:12 +0000
ROA not before:           Mon 01 Dec 2025 03:02:12 +0000
ROA not after:            Mon 30 Nov 2026 03:07:12 +0000
asID:                     55676
IP address blocks:        103.105.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:46:79:b6:eb:35:af:92:f1:50:4e:81:d8:b2:fa:cc:51:90:8c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Dec  1 03:02:12 2025 GMT
            Not After : Nov 30 03:07:12 2026 GMT
        Subject: CN=6DDBF65374E7CCC0CB8F2FAC6F84AF45402F57AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:11:95:30:a6:32:9f:05:61:c1:85:a3:80:
                    d1:16:2b:6a:68:90:2d:15:b1:cc:28:4b:01:18:36:
                    ea:b7:09:fd:eb:f8:4d:af:8e:7a:d7:c1:bf:e6:b3:
                    6a:22:5e:4c:4f:e2:a6:07:0e:ea:55:d7:b2:72:fa:
                    a1:eb:f9:4f:6c:61:02:aa:62:53:b3:c4:58:6a:6b:
                    f6:94:10:bc:16:d9:de:cb:24:bc:6a:76:55:df:45:
                    fc:57:58:a9:13:4d:ca:cf:94:e3:56:0a:a3:3e:67:
                    0b:66:72:01:57:57:05:79:90:8c:4a:08:d6:e8:ba:
                    d2:b9:37:dc:be:2c:14:d2:04:3a:ed:ed:e4:34:29:
                    f0:1e:56:23:ea:ce:f1:7e:03:52:3f:0a:69:4b:41:
                    e4:c5:b4:52:0c:ce:40:9e:a8:49:1f:6c:ff:9c:76:
                    ff:52:ae:c6:38:71:ce:51:c9:0a:a3:c2:9c:b5:af:
                    5f:2d:9d:db:04:db:e3:2d:48:4c:39:44:e0:a4:45:
                    31:96:39:02:67:4a:08:dc:d4:7f:e6:35:1d:77:d4:
                    34:d1:35:51:1a:29:68:71:d7:88:8a:20:6b:56:85:
                    24:97:70:f5:de:54:97:38:ef:93:ad:fa:91:ac:d0:
                    76:65:4e:cc:6d:df:e0:ad:b0:38:d8:21:1d:17:52:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DB:F6:53:74:E7:CC:C0:CB:8F:2F:AC:6F:84:AF:45:40:2F:57:AD
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e203535363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cf:51:ba:05:c1:fb:7c:9a:56:1e:c8:18:a4:92:63:35:4f:
         59:d3:9b:14:78:d1:fe:0f:8c:32:56:28:dd:16:59:12:66:3e:
         75:44:24:78:27:bf:88:be:39:16:6c:39:65:9e:4f:8e:ca:07:
         67:92:b9:28:3e:6d:a9:ad:d5:f5:46:a8:70:a7:a7:74:8a:52:
         18:b5:00:de:eb:1f:b5:d6:ad:97:54:5d:90:85:13:7e:f1:5a:
         d0:83:4c:ad:91:08:c9:1c:5e:7e:69:fa:c2:4f:7e:3b:76:7b:
         59:af:36:e2:24:44:65:48:c4:e8:9d:de:ed:83:c8:2d:e0:66:
         1d:e5:ae:8b:f6:19:96:11:cd:98:0c:f4:19:bb:78:17:21:28:
         8c:16:bc:1f:7f:3d:76:f7:2c:9b:55:d0:7f:36:fe:f1:03:39:
         be:15:b0:44:bf:6c:f4:48:15:b0:60:06:a9:89:1c:ab:76:33:
         67:dd:98:f4:b3:76:74:b1:b6:83:81:e6:97:98:ca:fa:65:c9:
         78:bd:a8:4c:a6:a5:ef:6f:e1:dc:d4:cf:7b:26:f7:cc:3a:11:
         10:25:bb:6d:51:74:f1:71:a5:c8:0b:3a:af:65:17:73:85:50:
         99:eb:df:c4:dc:bf:86:5c:64:b3:e5:85:36:f8:30:24:a5:d3:
         0d:22:8e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:31 2025 by rpki-client