This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa
File:                     3130332e34362e352e302f32342d3234203d3e20313530343630.roa (raw, json)
Hash identifier:          nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=
Subject key identifier:   7A:7C:74:5C:EA:0A:03:E0:83:3A:A1:B2:78:BB:1E:30:62:B2:E8:7D
Certificate issuer:       /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
Certificate serial:       47510F999D3B27EAA830CD7DC0314CEFBD2D2176
Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa
Signing time:             Sat 25 Oct 2025 08:00:01 +0000
ROA not before:           Sat 25 Oct 2025 07:55:01 +0000
ROA not after:            Sat 24 Oct 2026 08:00:01 +0000
asID:                     150460
IP address blocks:        103.46.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl
                          rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 02:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:51:0f:99:9d:3b:27:ea:a8:30:cd:7d:c0:31:4c:ef:bd:2d:21:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953
        Validity
            Not Before: Oct 25 07:55:01 2025 GMT
            Not After : Oct 24 08:00:01 2026 GMT
        Subject: CN=7A7C745CEA0A03E0833AA1B278BB1E3062B2E87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:ee:e0:a3:63:61:3c:1c:0b:6b:0e:aa:1b:
                    64:f4:55:30:29:f9:ba:93:08:41:4b:e5:0b:a5:6f:
                    be:7f:4e:9e:43:c8:90:c1:de:b8:f1:31:08:de:5d:
                    b7:5d:5f:44:20:d2:54:db:6f:3d:db:ac:d1:73:af:
                    d0:a5:3a:55:3a:24:81:e6:6e:27:09:3f:88:1f:bd:
                    60:75:ff:df:f3:ee:c6:2a:59:00:cb:b6:c2:37:c0:
                    4c:49:56:a1:27:a8:7e:e5:dc:6b:f7:dd:eb:9f:77:
                    02:29:d1:07:13:11:e5:3f:7a:ba:c8:2a:f9:0c:a0:
                    65:32:76:e6:41:65:71:e6:e8:68:9a:20:09:d8:ad:
                    b4:16:b3:0c:44:03:1e:31:c8:c4:0c:02:63:d4:4b:
                    c8:12:d0:74:af:5a:21:5f:67:06:e7:8b:ca:f8:02:
                    4f:18:1f:b5:b9:84:b5:42:d9:0c:91:0f:11:f9:17:
                    83:2b:15:fa:0d:81:67:3e:37:56:98:43:d9:8c:1b:
                    e1:fc:4e:a4:6e:25:fc:fd:9e:c9:da:32:97:20:8d:
                    51:de:f9:14:f6:d7:4c:60:3d:c4:9a:8f:e5:19:d0:
                    dc:02:70:2b:57:c4:18:26:64:79:d3:53:05:25:73:
                    63:4a:2d:7f:bf:4f:dd:4a:4e:99:5d:14:51:56:1f:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7C:74:5C:EA:0A:03:E0:83:3A:A1:B2:78:BB:1E:30:62:B2:E8:7D
            X509v3 Authority Key Identifier:
                keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/3130332e34362e352e302f32342d3234203d3e20313530343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:0a:e7:56:cd:b8:af:88:15:48:07:9a:cb:62:ed:59:65:95:
         71:a9:a6:47:c2:bb:9c:6f:94:91:0e:fd:b9:5e:60:d6:2e:ab:
         10:1f:86:b5:ba:cf:64:1f:b7:b4:7e:50:5f:70:c9:31:68:74:
         96:09:4a:d6:b7:cc:9a:3c:c6:63:e1:fd:76:20:55:f8:44:6a:
         bc:66:51:59:c6:a1:b9:87:0a:ca:44:f3:fa:ec:c0:c7:6a:63:
         c7:61:7c:84:d3:92:aa:0f:43:8d:92:c3:fc:35:12:d5:f0:7f:
         d3:67:03:84:cc:cf:7b:77:44:80:f1:3b:4c:a2:d2:6b:d9:a3:
         37:53:93:e7:46:e4:a0:a9:1e:c6:93:47:d0:d6:7c:55:c7:89:
         dd:73:3e:f5:24:7c:e5:0b:76:8f:82:e9:79:22:f5:6b:29:fd:
         25:c4:82:43:bd:1f:b1:b9:de:6c:92:65:a3:a3:b8:c9:76:f4:
         a4:95:e8:ad:21:28:8e:b0:e8:df:c7:a5:ab:63:f9:b3:d3:2d:
         ca:34:03:00:12:92:71:e9:25:d9:04:9c:e4:e8:f6:e0:bc:b1:
         8b:88:f2:55:9a:34:e5:ea:28:eb:26:be:de:08:18:ba:aa:4c:
         ef:df:5b:5f:ee:82:5f:7d:86:14:61:98:0c:ae:92:93:d5:ce:
         3a:00:33:7d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUR1EPmZ07J+qoMM19wDFM770tIXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF
OEJFQjk1MzAeFw0yNTEwMjUwNzU1MDFaFw0yNjEwMjQwODAwMDFaMDMxMTAvBgNV
BAMTKDdBN0M3NDVDRUEwQTAzRTA4MzNBQTFCMjc4QkIxRTMwNjJCMkU4N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfO7go2NhPBwLaw6qG2T0VTAp
+bqTCEFL5Qulb75/Tp5DyJDB3rjxMQjeXbddX0Qg0lTbbz3brNFzr9ClOlU6JIHm
bicJP4gfvWB1/9/z7sYqWQDLtsI3wExJVqEnqH7l3Gv33eufdwIp0QcTEeU/errI
KvkMoGUyduZBZXHm6GiaIAnYrbQWswxEAx4xyMQMAmPUS8gS0HSvWiFfZwbni8r4
Ak8YH7W5hLVC2QyRDxH5F4MrFfoNgWc+N1aYQ9mMG+H8TqRuJfz9nsnaMpcgjVHe
+RT210xgPcSaj+UZ0NwCcCtXxBgmZHnTUwUlc2NKLX+/T91KTpldFFFWHxmJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUenx0XOoKA+CDOqGyeLseMGKy6H0wHwYDVR0j
BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx
QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF
Qjk1My5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1LTM0ODMtNDJiMC1i
Mzg1LWZjMDcwNzE2ZmJjYy8wLzMxMzAzMzJlMzQzNjJlMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzAzNDM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnLgUwDQYJKoZIhvcN
AQELBQADggEBALsK51bNuK+IFUgHmsti7VlllXGppkfCu5xvlJEO/bleYNYuqxAf
hrW6z2Qft7R+UF9wyTFodJYJSta3zJo8xmPh/XYgVfhEarxmUVnGobmHCspE8/rs
wMdqY8dhfITTkqoPQ42Sw/w1EtXwf9NnA4TMz3t3RIDxO0yi0mvZozdTk+dG5KCp
HsaTR9DWfFXHid1zPvUkfOULdo+C6Xki9Wsp/SXEgkO9H7G53mySZaOjuMl29KSV
6K0hKI6w6N/Hpatj+bPTLco0AwASknHpJdkEnOTo9uC8sYuI8lWaNOXqKOsmvt4I
GLqqTO/fW1/ugl99hhRhmAyukpPVzjoAM30=
-----END CERTIFICATE-----
Generated at Wed Dec 3 15:30:52 2025 by rpki-client