This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
File:                     3130332e3235352e31352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier:          xIS6sNK0UqeUJFxq14NuNTlsbhpsETkb9gDhOu1ONl8=
Subject key identifier:   6A:C9:A1:DE:6F:72:D3:F8:47:3E:80:85:46:E2:74:04:DA:9D:B4:11
Certificate issuer:       /CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
Certificate serial:       1EB24BA83306B548C31B25D2FF128248B94878CF
Authority key identifier: 6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa
Signing time:             Mon 01 Dec 2025 08:00:02 +0000
ROA not before:           Mon 01 Dec 2025 07:55:02 +0000
ROA not after:            Mon 30 Nov 2026 08:00:02 +0000
asID:                     59151
IP address blocks:        103.255.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl
                          rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 17:42:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:4b:a8:33:06:b5:48:c3:1b:25:d2:ff:12:82:48:b9:48:78:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B5E677E9A47133AB5F37B3E2C11193BCF66B801
        Validity
            Not Before: Dec  1 07:55:02 2025 GMT
            Not After : Nov 30 08:00:02 2026 GMT
        Subject: CN=6AC9A1DE6F72D3F8473E808546E27404DA9DB411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d7:0b:e6:8a:1e:40:8a:48:19:cc:f1:f5:d3:
                    c3:32:a8:6b:27:5d:37:76:2a:d1:5a:1a:74:d5:32:
                    73:4f:6e:45:a0:2b:53:a1:e0:3f:d2:7f:3e:a9:8a:
                    9a:f7:68:e2:08:da:44:f2:81:5d:7d:1e:6b:19:8d:
                    b7:52:4f:41:72:4a:5d:b4:5c:dd:24:02:4b:a6:99:
                    d0:96:02:83:7c:9f:6e:dd:29:f6:52:4b:c9:cd:d3:
                    50:a8:5e:3e:c6:c0:a9:3d:e0:19:39:74:8d:e2:c9:
                    14:36:30:76:1b:b3:d7:7a:40:03:0e:88:3d:99:5d:
                    4f:d9:08:48:1b:6c:ae:87:15:ad:e1:63:e2:fb:47:
                    b4:ce:29:99:12:6d:fe:e1:fd:62:2d:08:84:f9:eb:
                    89:59:0f:6f:43:2e:54:a6:f2:0f:f6:36:57:22:40:
                    8d:eb:67:a5:bd:62:96:e2:21:63:e9:cb:8b:c5:33:
                    df:b8:19:21:d4:d2:47:72:86:45:50:93:a2:7e:91:
                    ce:1b:10:82:c3:72:a7:59:c1:78:79:f6:52:40:b9:
                    24:f7:bb:64:6b:08:8c:3c:b0:6f:7c:1d:64:07:28:
                    2e:25:e4:f4:c0:d8:35:ef:e9:48:7f:a2:25:38:f9:
                    1b:41:0c:be:85:6c:8d:7b:8c:55:74:c1:ce:9b:04:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C9:A1:DE:6F:72:D3:F8:47:3E:80:85:46:E2:74:04:DA:9D:B4:11
            X509v3 Authority Key Identifier:
                keyid:6B:5E:67:7E:9A:47:13:3A:B5:F3:7B:3E:2C:11:19:3B:CF:66:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B5E677E9A47133AB5F37B3E2C11193BCF66B801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3235352e31352e302f32342d3234203d3e203539313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:06:af:ef:44:4f:79:e6:cb:f3:21:a1:6b:70:27:42:c9:
         5e:76:32:3d:85:3c:3f:25:35:f2:29:16:30:ed:62:47:8a:6c:
         e7:f1:04:f2:00:02:7d:55:9c:d0:13:5d:e8:b1:f0:a3:a1:be:
         2a:83:c4:b7:85:f5:69:39:f4:08:18:eb:c2:83:f8:cb:42:7f:
         29:ed:03:0a:2c:2c:af:37:c9:0e:53:0a:19:40:c6:b9:f9:42:
         48:06:ca:53:ce:d5:38:0f:82:3c:56:31:2f:b3:4f:30:d3:e3:
         20:9d:ea:77:71:ac:c9:1c:ae:a9:ea:0b:1f:85:ff:e9:32:d3:
         9f:ff:72:30:4c:1f:27:fe:23:26:87:95:1c:b6:27:94:10:c0:
         bf:ed:63:44:46:77:01:48:78:d1:eb:7f:d3:a8:6b:f3:eb:f4:
         7e:77:94:02:ff:53:33:1b:ad:0b:d4:1d:f6:a2:8d:fd:d5:e6:
         c8:dd:30:00:2c:a1:16:55:df:9f:02:bb:61:f5:d7:99:9f:ce:
         cc:95:40:60:95:f9:9d:44:ff:62:72:ec:8f:0b:6d:68:f6:ba:
         44:fc:82:61:83:73:b2:ed:48:ef:3f:29:92:96:dc:5b:01:fa:
         ee:0d:e2:d6:3f:a9:4b:ec:57:a9:d5:5c:89:d0:04:2e:fa:e0:
         2c:08:13:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:11 2025 by rpki-client