This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa
File:                     3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa (raw, json)
Hash identifier:          ls/qvCLTIAui00ibgj8c/dl69JxHxFEbZ+n3COlxeds=
Subject key identifier:   80:BE:0F:AA:CC:A4:53:4C:10:F8:0C:FB:10:F7:8A:80:EC:5B:B2:DE
Certificate issuer:       /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Certificate serial:       059F87505FAA5B9EFCEF1D133DFF81CF0E8ECFFF
Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa
Signing time:             Mon 17 Nov 2025 23:06:22 +0000
ROA not before:           Mon 17 Nov 2025 23:01:22 +0000
ROA not after:            Mon 16 Nov 2026 23:06:22 +0000
asID:                     215727
IP address blocks:        103.131.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
                          rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 18:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:87:50:5f:aa:5b:9e:fc:ef:1d:13:3d:ff:81:cf:0e:8e:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
        Validity
            Not Before: Nov 17 23:01:22 2025 GMT
            Not After : Nov 16 23:06:22 2026 GMT
        Subject: CN=80BE0FAACCA4534C10F80CFB10F78A80EC5BB2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:0a:74:13:db:b6:f3:72:11:5b:e3:5f:9a:
                    b6:73:15:a5:de:a3:97:00:fe:82:60:fe:9e:5f:a7:
                    32:b5:c1:24:0b:93:65:d7:2f:d4:3b:86:48:20:0f:
                    e5:a5:76:62:9b:fe:9f:5e:1a:56:43:fd:b4:e9:d0:
                    7f:76:3b:b9:25:07:21:77:08:26:ff:a1:52:36:16:
                    f3:53:d8:c5:67:f6:21:ca:72:45:24:59:08:e6:5e:
                    e3:3c:f1:1a:9a:a0:5b:34:c2:12:27:3a:e2:3e:d2:
                    07:b0:f7:50:02:40:56:07:d2:b8:72:f5:d0:43:21:
                    65:5d:7a:de:4e:ef:56:f4:e7:10:d7:9a:28:63:21:
                    af:44:7f:6c:bd:fc:25:2e:6f:4f:b2:3e:36:43:19:
                    da:49:9f:09:7f:6f:89:db:5b:9b:c8:09:81:c2:e9:
                    c3:c8:56:64:b9:c5:a3:d5:2d:39:7d:48:00:f9:55:
                    0d:1e:f2:84:f3:0f:b0:3b:b5:7b:89:7f:c0:32:cc:
                    ca:ae:06:29:d0:94:8e:0f:8e:53:3a:66:a6:a5:df:
                    f8:0c:25:2c:a2:67:8e:b2:ea:26:f5:4f:f6:0a:51:
                    1c:3a:7c:f2:dd:7c:2b:a4:46:4c:8a:02:dd:a9:9c:
                    95:2f:f6:f9:cb:7c:c1:d7:78:fe:f3:65:ae:67:25:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:0F:AA:CC:A4:53:4C:10:F8:0C:FB:10:F7:8A:80:EC:5B:B2:DE
            X509v3 Authority Key Identifier:
                keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20323135373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:1e:0d:38:cb:72:c0:7a:02:85:b3:01:ae:4e:e3:6a:dd:d7:
         0e:d3:db:69:a7:33:f0:57:3b:f4:8d:01:55:af:10:31:33:3d:
         62:12:f6:9f:ca:1c:64:a8:98:2e:f5:2f:3a:6f:f9:30:59:1c:
         ee:4d:48:fb:2a:39:81:17:18:2b:d4:0a:6c:c0:cd:c9:11:bc:
         98:68:9d:42:0c:ac:2e:14:a7:bd:2f:65:91:ff:d9:99:3d:3a:
         b5:9f:6f:bf:d9:2a:69:af:14:ea:2f:6e:15:ad:80:25:b7:0a:
         6a:6d:83:cc:05:e9:29:88:ae:a6:6a:f4:c9:8b:b0:2f:93:60:
         84:ed:a7:46:51:d6:0e:9e:8e:9c:0a:94:62:ca:d1:5c:e8:61:
         e8:e1:ee:0e:16:ba:31:59:ee:14:bf:22:e4:c9:8a:e4:cb:af:
         cb:2d:d4:02:06:70:a7:47:60:d7:4d:4d:83:b0:bc:dd:6b:f9:
         8f:00:26:64:c2:01:10:50:6d:0a:a4:b7:fb:a3:5c:a0:28:db:
         d3:de:46:7a:0f:19:a5:37:2b:7c:33:87:83:a8:4a:77:c0:44:
         45:40:19:be:ff:0a:28:5f:63:e9:0f:46:36:f6:d8:ee:0f:a0:
         73:a8:e2:c5:45:b6:50:f7:c0:0c:a8:30:46:84:a3:9b:38:c3:
         5a:96:2c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:05:08 2025 by rpki-client