This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
File:                     3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          2iQsY2shTRUgO13U5IiTRn4DaQNWjPojhHqwN4kzhnY=
Subject key identifier:   D0:B8:BB:57:DA:3D:25:C0:7E:EC:84:A8:FD:7C:DA:BE:48:89:64:4D
Certificate issuer:       /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
Certificate serial:       25AB4E89EE6ED2004755732EDD5F16AD6AAB8147
Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa
Signing time:             Wed 26 Nov 2025 02:56:29 +0000
ROA not before:           Wed 26 Nov 2025 02:51:29 +0000
ROA not after:            Wed 25 Nov 2026 02:56:29 +0000
asID:                     141968
IP address blocks:        103.42.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl
                          rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 22:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ab:4e:89:ee:6e:d2:00:47:55:73:2e:dd:5f:16:ad:6a:ab:81:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8
        Validity
            Not Before: Nov 26 02:51:29 2025 GMT
            Not After : Nov 25 02:56:29 2026 GMT
        Subject: CN=D0B8BB57DA3D25C07EEC84A8FD7CDABE4889644D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:07:0a:9b:5c:63:3d:c2:70:6d:01:09:5c:
                    90:2c:b9:07:06:50:2e:6a:bd:41:8a:86:0e:44:e7:
                    ba:ab:ea:43:00:07:0e:f3:4a:aa:ff:f5:dc:ca:03:
                    0d:75:f4:74:79:c0:31:0f:e8:d8:50:09:28:2c:52:
                    fc:f4:ae:a4:1b:73:73:04:8b:35:df:d6:3d:ce:e9:
                    9b:d8:66:30:69:01:1e:b8:ca:84:8b:fd:2f:64:9f:
                    fa:dc:b3:9a:2d:63:7c:ee:75:76:2d:a3:0f:dd:c3:
                    95:a3:a2:0d:68:ec:27:cc:13:cc:06:d3:96:6e:f3:
                    9b:61:e8:b4:1a:9c:1a:86:ea:62:c2:a8:5b:87:b8:
                    2e:e9:76:7d:b8:f2:98:74:70:58:37:d5:b8:b6:4e:
                    64:25:e6:df:ae:ac:f2:a2:b8:47:24:bc:9f:ac:06:
                    d3:ea:82:28:63:91:c0:04:42:66:5f:73:2c:25:c5:
                    05:ed:e2:0b:10:62:b1:33:b8:79:82:27:84:52:32:
                    d4:96:dd:8d:67:dd:d1:75:42:83:66:46:6a:18:64:
                    b2:72:86:77:41:40:1f:83:f0:83:64:cd:0d:fb:1f:
                    9d:21:b8:19:a2:1d:35:7f:77:7c:b5:61:e4:ed:ec:
                    d0:b4:76:3e:5f:0b:02:fe:df:42:ed:e7:3a:10:a6:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B8:BB:57:DA:3D:25:C0:7E:EC:84:A8:FD:7C:DA:BE:48:89:64:4D
            X509v3 Authority Key Identifier:
                keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:30:2b:d1:7a:5f:3a:04:c6:e6:81:b0:64:b2:ba:36:c8:
         88:68:26:52:cc:c0:5a:f9:b0:12:b0:dc:14:b3:a4:b8:3f:5e:
         58:2f:ec:17:5e:e1:b0:b4:fe:e6:c2:73:47:43:28:05:79:e5:
         ed:8c:26:bc:a0:27:c8:b0:51:d0:5f:56:3c:9a:b6:62:a9:09:
         bd:66:44:3a:8f:17:4f:c6:1d:ed:53:60:cd:ea:6c:62:d2:84:
         45:d1:60:f1:37:c0:4e:46:3e:23:f9:1e:1e:bc:f4:91:82:1b:
         fe:17:47:3d:6d:b4:70:72:9e:2c:d5:8a:34:93:ab:37:b0:b9:
         2e:61:a8:c6:e4:64:f2:36:39:00:3c:e5:15:40:43:aa:0e:f2:
         0c:f4:a2:4d:e6:3c:c3:69:26:71:d8:98:a0:09:9d:63:4e:a6:
         3b:91:76:51:b1:36:84:db:6c:bb:60:97:04:dd:02:cc:5b:33:
         85:81:83:e2:30:f8:2b:54:ef:b4:e1:0c:de:bd:a4:6d:35:cd:
         2a:22:96:fe:7c:bf:60:1b:e7:14:41:32:56:32:e3:58:4b:8e:
         9f:36:19:36:40:d6:45:e6:b5:7f:4c:4f:70:f2:08:92:57:d9:
         e3:b1:3f:7f:50:4b:ef:bd:4c:7f:47:d0:a1:5e:7a:de:1d:af:
         22:b1:07:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:14:42 2025 by rpki-client