This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa
File:                     3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa (raw, json)
Hash identifier:          FVR7OXRQ9lsqccYbbruNBCZHbMSoocj8hgbL/LfCNK0=
Subject key identifier:   6A:65:B4:59:14:7B:D5:B1:97:43:E8:58:19:0A:92:19:61:6B:E8:BF
Certificate issuer:       /CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
Certificate serial:       59F4D23CDE631B11471A0672CD5E69C06689FBB0
Authority key identifier: D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa
Signing time:             Tue 04 Nov 2025 07:00:00 +0000
ROA not before:           Tue 04 Nov 2025 06:55:00 +0000
ROA not after:            Tue 03 Nov 2026 07:00:00 +0000
asID:                     137287
IP address blocks:        103.105.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl
                          rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 08:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f4:d2:3c:de:63:1b:11:47:1a:06:72:cd:5e:69:c0:66:89:fb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B568DACE796AFC606BD299D9DA57F714CD7970
        Validity
            Not Before: Nov  4 06:55:00 2025 GMT
            Not After : Nov  3 07:00:00 2026 GMT
        Subject: CN=6A65B459147BD5B19743E858190A9219616BE8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:5d:5b:79:ab:90:35:d6:82:e1:95:16:8b:
                    8e:08:e3:ce:2e:93:09:23:08:f8:5b:65:44:3f:75:
                    6d:fb:e9:4d:05:b6:1f:85:cf:06:47:8c:1a:6d:94:
                    61:28:79:bc:b5:f3:ce:0a:d5:1d:f7:e3:0f:69:38:
                    77:89:f1:1d:69:9f:36:ea:31:05:f0:e6:11:3b:95:
                    7b:96:69:4a:d2:8e:0d:2b:46:fd:d3:ea:c3:d2:90:
                    54:7a:50:9b:95:9c:72:3d:af:af:82:92:c9:c4:18:
                    bf:05:00:69:c6:c6:e4:81:89:e3:60:08:d5:ad:19:
                    84:af:30:90:8e:58:a9:2f:a1:91:35:e1:f9:ab:56:
                    ea:77:8e:50:a9:8b:19:cd:98:ef:8d:1a:6a:d2:03:
                    a8:c8:7e:a4:31:bd:a8:57:8f:88:d1:3b:50:0c:72:
                    c6:c8:73:bb:23:20:02:41:79:3d:0c:8d:93:f3:bd:
                    39:f7:f5:ab:d1:09:1e:c7:62:b6:ef:41:5d:d7:64:
                    52:8a:cc:94:33:0b:54:8c:d7:b9:1b:d5:f9:65:12:
                    ac:4d:e8:88:ca:36:ee:46:56:59:e4:91:71:ac:b8:
                    9f:31:61:a1:50:1b:c0:5f:7b:8f:30:e7:3e:55:8e:
                    fa:74:e1:b7:9f:c2:31:8e:b5:3c:c1:0f:85:67:57:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:65:B4:59:14:7B:D5:B1:97:43:E8:58:19:0A:92:19:61:6B:E8:BF
            X509v3 Authority Key Identifier:
                keyid:D9:B5:68:DA:CE:79:6A:FC:60:6B:D2:99:D9:DA:57:F7:14:CD:79:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/D9B568DACE796AFC606BD299D9DA57F714CD7970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9B568DACE796AFC606BD299D9DA57F714CD7970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55cab9df-03b5-48b3-a872-a0fe12a67426/0/3130332e3130352e3139362e302f32332d3234203d3e20313337323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:cf:15:fb:19:a1:de:6e:be:e1:85:42:4e:a8:d6:76:b0:
         b6:eb:3d:d2:3e:bb:be:4c:a3:e4:74:e5:c8:30:f7:57:f6:37:
         bb:03:af:b9:f8:b3:ba:1b:79:90:f8:9f:f7:ba:4e:3d:ac:f1:
         bd:00:56:75:2c:86:bc:59:01:54:2b:79:51:ee:dd:03:23:0e:
         2d:fd:e2:af:a4:c5:ed:9c:af:5f:74:ca:ed:0e:49:62:a1:30:
         93:e1:91:25:b5:62:82:8d:34:26:17:0e:0c:81:3a:08:c6:aa:
         52:45:87:89:7a:23:d1:c0:73:68:a4:48:66:73:8e:99:e2:85:
         cd:46:ff:1d:c2:86:f6:58:a1:eb:b2:28:7f:67:12:ca:ac:5c:
         16:c4:a7:4f:0a:e8:0a:f6:61:19:56:8e:ff:e4:71:29:6e:ee:
         c7:ae:9f:e1:01:f5:dd:81:02:c3:66:da:6e:65:46:00:6d:9b:
         e1:ff:d3:02:fc:b5:3d:00:ca:7f:08:fe:7e:7c:03:8b:5d:e3:
         69:8d:99:fd:69:42:7c:ce:3c:69:c6:a8:b2:3a:e9:37:c6:15:
         b9:d6:c7:55:44:ae:ae:ac:68:d8:29:3a:44:fa:e2:ef:84:dc:
         92:8a:f6:ad:60:7c:8d:31:b3:93:15:db:56:2d:9c:5c:cb:b7:
         36:27:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:40:26 2025 by rpki-client