This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=
Subject key identifier:   DF:0C:C7:A8:B1:47:31:D3:FA:A2:15:DC:D6:6C:27:AC:F6:8F:77:BC
Certificate issuer:       /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial:       0BCCDF247181021ECA0CF9D1BDD41905B264E738
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa
Signing time:             Fri 21 Nov 2025 07:03:04 +0000
ROA not before:           Fri 21 Nov 2025 06:58:04 +0000
ROA not after:            Fri 20 Nov 2026 07:03:04 +0000
asID:                     138127
IP address blocks:        103.132.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
                          rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 14:54:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cc:df:24:71:81:02:1e:ca:0c:f9:d1:bd:d4:19:05:b2:64:e7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
        Validity
            Not Before: Nov 21 06:58:04 2025 GMT
            Not After : Nov 20 07:03:04 2026 GMT
        Subject: CN=DF0CC7A8B14731D3FAA215DCD66C27ACF68F77BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:48:c0:78:9a:fe:56:dc:73:38:44:43:23:
                    0c:3c:8d:6a:27:d4:d0:76:54:29:f0:b8:2e:f2:d3:
                    44:d1:09:c4:59:36:a9:e4:43:52:63:0c:88:77:fe:
                    de:d8:e2:c5:21:df:22:ed:d3:ce:28:9f:30:08:ac:
                    54:85:c3:0b:4f:20:22:69:8b:e7:cc:c5:ad:f6:20:
                    8a:71:84:c0:59:44:35:43:67:0d:fa:28:d3:31:85:
                    7d:f5:d1:25:4d:82:84:2e:61:cc:b4:d3:72:39:6b:
                    54:75:53:af:fa:9b:d6:46:fb:80:9d:d1:7f:92:f9:
                    7f:4e:d6:b2:41:fe:5c:72:75:8e:6f:f4:88:dd:d7:
                    db:e4:ab:5f:be:3c:75:af:d3:f6:1f:23:ca:59:97:
                    f3:40:74:6b:f7:fa:48:81:1a:77:ef:f8:af:7d:8a:
                    d4:97:27:e8:7c:18:33:30:2e:8e:7b:ca:c6:1e:67:
                    82:bf:8c:28:23:87:b1:05:ba:ec:df:2a:c8:df:0f:
                    3b:c2:b0:15:ed:91:b9:95:02:6c:29:e5:38:0d:7d:
                    94:39:20:94:c7:2e:55:c5:25:9c:92:e3:82:7b:d6:
                    1f:80:36:79:b0:03:a1:aa:79:2b:2a:c4:69:7e:1f:
                    16:65:08:f3:11:e5:bd:d3:bf:a5:1b:45:a4:55:e9:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:C7:A8:B1:47:31:D3:FA:A2:15:DC:D6:6C:27:AC:F6:8F:77:BC
            X509v3 Authority Key Identifier:
                keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:cd:2a:2a:33:ae:52:02:5a:c4:47:5a:5a:1e:da:ad:60:
         77:0f:1a:6e:a0:f8:56:94:1a:c9:3d:ac:04:1f:f6:e4:20:35:
         5d:42:ac:3d:b0:2b:0a:b8:86:61:85:5c:e0:d6:c3:a7:39:a6:
         61:95:26:63:13:0b:9a:a3:bb:5c:22:91:35:f0:3b:92:df:8e:
         97:f7:00:79:b7:4e:90:a8:d1:f8:c2:38:06:8a:c6:9c:2e:af:
         69:20:5b:74:e1:5e:8f:6f:36:7d:81:c5:9e:06:ad:0d:9d:ec:
         2d:0a:15:75:d4:41:a6:0d:96:72:d3:4d:20:15:31:c2:a0:21:
         a7:e1:c4:7a:91:c1:9b:61:e2:8d:ef:86:69:57:54:a1:77:61:
         ce:60:36:bf:d0:fb:cc:77:89:4a:51:31:46:cc:54:e2:23:f1:
         13:e7:97:dd:a6:d4:be:f9:e0:e5:77:0c:8f:0c:75:9c:9a:70:
         7a:a4:ca:08:33:79:6d:f7:b2:c7:6c:83:bb:92:ea:6f:60:19:
         13:9f:ce:33:78:bf:f7:64:f2:b5:73:ed:ba:18:ae:3d:4b:a1:
         8b:d6:c3:de:88:09:2b:ec:0d:99:49:d8:68:71:e5:8d:e6:0c:
         32:02:9a:99:02:16:16:ea:aa:d4:4e:44:2f:a8:cf:66:a7:62:
         46:f0:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:10:51 2025 by rpki-client