This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
File:                     3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (raw, json)
Hash identifier:          tLzip6pluW4kS8q/xNkX5NOxfLZpZ4mdvSRQjE8Ako0=
Subject key identifier:   87:E8:4C:8F:EC:36:C3:21:16:FA:86:47:93:4E:6C:85:84:07:41:B5
Certificate issuer:       /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial:       2701BCFE410EA9020277FAA181165C9458266A69
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
Signing time:             Wed 19 Nov 2025 05:00:02 +0000
ROA not before:           Wed 19 Nov 2025 04:55:02 +0000
ROA not after:            Wed 18 Nov 2026 05:00:02 +0000
asID:                     141073
IP address blocks:        103.155.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
                          rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 14:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:bc:fe:41:0e:a9:02:02:77:fa:a1:81:16:5c:94:58:26:6a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
        Validity
            Not Before: Nov 19 04:55:02 2025 GMT
            Not After : Nov 18 05:00:02 2026 GMT
        Subject: CN=87E84C8FEC36C32116FA8647934E6C85840741B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:fb:f7:11:84:a2:e1:2a:5b:76:89:3f:3b:
                    2a:f7:d6:df:d6:90:4e:49:c0:eb:48:36:3b:3e:cd:
                    a2:3a:4a:95:cd:e6:ef:b2:e1:52:e4:5a:03:c5:21:
                    ed:b1:c4:fe:5f:8c:1e:bc:90:66:ba:cf:11:50:37:
                    0a:07:f2:46:e0:df:40:a5:a6:2c:8f:a2:1a:32:6d:
                    a4:50:6c:64:64:e4:4d:e4:fc:16:e9:c0:d8:72:a0:
                    29:04:38:cf:54:23:dd:3b:a1:5f:52:ab:3e:a1:3c:
                    8a:b2:29:83:49:e0:0f:23:83:45:4a:84:cb:96:cb:
                    98:ae:b1:08:ae:43:01:6f:cd:95:46:07:de:a9:de:
                    c4:65:e7:cf:9e:9c:13:1f:bd:de:72:2d:a4:5f:81:
                    e3:a8:ae:f2:2b:c9:42:15:69:67:3c:97:41:ee:3a:
                    e5:ba:d2:7c:60:54:05:d3:43:0b:80:6f:4b:2f:2e:
                    a6:b2:20:95:a3:95:cc:41:2a:38:64:61:c3:c2:48:
                    98:60:bb:d3:ab:3c:47:6f:5a:61:b4:4c:b9:33:81:
                    ef:58:e8:53:05:7a:b1:1d:96:62:64:d6:4c:12:c3:
                    66:24:39:43:69:c7:ea:e2:37:8d:f8:a1:7a:f2:1b:
                    7e:a3:4b:a6:f9:80:24:d2:af:dc:86:aa:3f:2f:b7:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E8:4C:8F:EC:36:C3:21:16:FA:86:47:93:4E:6C:85:84:07:41:B5
            X509v3 Authority Key Identifier:
                keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:0a:27:fd:e4:8b:58:e8:31:d0:5d:a7:a0:64:09:cc:5e:
         4f:09:0d:89:2b:17:9f:e4:66:db:7c:6f:87:47:06:c2:18:53:
         80:e7:82:8c:d2:8e:81:43:56:f4:84:ba:ec:b8:17:f3:f7:68:
         04:e0:9e:e3:87:2f:5d:cd:5e:74:9f:32:a6:5a:0e:df:98:4e:
         50:7c:d6:fa:df:0b:da:c3:99:e6:33:31:09:11:88:96:32:2c:
         9c:5a:d8:db:93:c3:2b:0a:3f:f7:b0:97:d6:05:7c:dc:0f:4c:
         45:b3:81:d7:87:9a:e5:c7:e2:2a:cc:89:34:6a:7a:b4:49:33:
         b2:fb:76:ec:33:ad:1c:c2:35:01:4b:a0:61:57:56:dc:ff:0b:
         36:7a:e2:63:ab:d9:db:bc:df:a9:de:48:66:70:1f:db:0d:48:
         e4:f3:de:17:92:6f:6b:b6:35:b7:ff:38:e8:30:88:98:f7:93:
         fe:bc:15:65:28:cf:27:78:fb:92:a4:e6:dd:91:5c:28:5a:6f:
         05:89:54:18:db:db:04:8a:f9:e8:41:f4:70:18:77:a0:34:e2:
         0f:71:fd:2d:27:7c:58:c6:14:48:c5:a5:87:b0:24:a6:1c:7f:
         c6:08:a9:d4:1a:ae:59:ce:67:57:b4:17:76:c1:92:1e:0f:5b:
         58:96:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:07 2025 by rpki-client