This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa
File:                     3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (raw, json)
Hash identifier:          2JoB7mbv9tAYmXcRzCwfmfmXedXdKD7pozAzOc8mk0g=
Subject key identifier:   F8:D1:01:1B:26:C2:8D:6F:DE:ED:2B:A5:B3:D8:29:04:67:07:C7:A1
Certificate issuer:       /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
Certificate serial:       0A4E92006E716AEFFD5333A16691C3482BF50E3A
Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa
Signing time:             Wed 03 Dec 2025 07:00:00 +0000
ROA not before:           Wed 03 Dec 2025 06:55:00 +0000
ROA not after:            Wed 02 Dec 2026 07:00:00 +0000
asID:                     149401
IP address blocks:        103.182.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl
                          rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4e:92:00:6e:71:6a:ef:fd:53:33:a1:66:91:c3:48:2b:f5:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51
        Validity
            Not Before: Dec  3 06:55:00 2025 GMT
            Not After : Dec  2 07:00:00 2026 GMT
        Subject: CN=F8D1011B26C28D6FDEED2BA5B3D829046707C7A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:72:a7:75:5b:c9:5f:66:ef:d3:7b:63:e8:df:
                    bc:33:ef:b0:51:19:3e:21:75:3a:13:fc:b4:1b:1f:
                    cf:75:ee:d8:c3:f0:3b:c6:dd:9b:ca:12:c8:fc:79:
                    d7:b0:61:89:cb:d7:65:7d:b9:55:85:0d:dc:75:9d:
                    b2:64:9a:09:3e:8d:2b:6c:d4:1c:8b:76:b7:ce:5c:
                    03:9d:0c:f2:e3:be:c9:c5:eb:3e:5c:f2:36:2b:ad:
                    09:9c:17:b3:05:98:a9:70:3e:01:1e:92:29:3f:16:
                    dc:d1:b5:79:bf:a7:1f:45:e6:6a:4f:43:c6:1e:28:
                    66:1a:bf:41:2e:06:76:4b:f2:22:48:dd:05:7e:e0:
                    9d:31:20:86:1e:ae:01:86:03:f6:23:78:84:d6:84:
                    b6:00:38:06:4c:c8:b2:4b:d0:07:42:84:98:f6:a5:
                    26:8d:bd:2f:1f:68:b7:61:e2:0a:8d:5b:91:dd:2c:
                    97:6b:26:58:68:f8:25:4f:fc:eb:09:8b:46:4c:bc:
                    50:b5:c3:09:85:31:af:3b:fe:0f:5d:90:ce:2e:4b:
                    dc:a7:f8:e4:89:bc:e3:4d:ba:28:ab:2a:31:34:67:
                    c4:46:08:7e:fa:d8:01:b1:8d:c6:63:3c:d0:be:bb:
                    38:7f:97:c6:e3:76:43:5f:35:2b:9c:28:2f:30:0a:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D1:01:1B:26:C2:8D:6F:DE:ED:2B:A5:B3:D8:29:04:67:07:C7:A1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:e6:c3:bf:fd:b7:d4:16:9d:e8:65:91:aa:5f:c5:f8:a0:
         e9:17:72:a2:7d:7e:f3:bb:e8:9c:40:a8:5f:8a:83:9a:4f:fd:
         92:16:00:3f:db:af:aa:ed:0b:7e:22:fc:43:24:c1:81:eb:99:
         00:54:61:71:bd:c4:ec:ee:35:36:61:df:7e:ec:4f:8b:02:29:
         26:05:5d:6c:e9:52:29:80:f9:b9:4c:c1:25:34:35:a6:2a:13:
         4d:a6:16:7d:c9:38:38:f7:32:ae:dc:55:f8:d9:7c:ea:71:fe:
         10:b6:ff:06:bb:52:b1:e4:2c:15:bb:f9:69:8a:c7:02:cd:9f:
         69:68:06:5c:00:9d:e0:6d:9f:dc:6a:2b:c6:56:22:4d:92:0e:
         dc:b7:78:04:a4:17:57:0b:17:a9:21:bd:4e:6a:31:42:fa:ad:
         ec:b1:ba:da:6f:9a:08:60:bf:c5:1c:29:10:40:e2:c5:50:17:
         69:1c:95:e5:f0:bc:0a:a9:e6:4a:d8:7b:70:bb:70:fe:68:cf:
         9e:e4:59:b7:24:0f:a2:34:9f:81:ef:b8:a9:e1:94:39:90:9c:
         77:ac:ad:e6:2c:9a:b2:4b:31:fa:7a:43:65:c5:e3:39:34:5a:
         cb:49:27:63:7b:20:6a:37:83:54:ad:57:ea:c6:2b:4c:cc:77:
         9e:20:96:c1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCk6SAG5xau/9UzOhZpHDSCv1DjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3
NTc5QUQ1MTAeFw0yNTEyMDMwNjU1MDBaFw0yNjEyMDIwNzAwMDBaMDMxMTAvBgNV
BAMTKEY4RDEwMTFCMjZDMjhENkZERUVEMkJBNUIzRDgyOTA0NjcwN0M3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4cqd1W8lfZu/Te2Po37wz77BR
GT4hdToT/LQbH8917tjD8DvG3ZvKEsj8edewYYnL12V9uVWFDdx1nbJkmgk+jSts
1ByLdrfOXAOdDPLjvsnF6z5c8jYrrQmcF7MFmKlwPgEekik/FtzRtXm/px9F5mpP
Q8YeKGYav0EuBnZL8iJI3QV+4J0xIIYergGGA/YjeITWhLYAOAZMyLJL0AdChJj2
pSaNvS8faLdh4gqNW5HdLJdrJlho+CVP/OsJi0ZMvFC1wwmFMa87/g9dkM4uS9yn
+OSJvONNuiirKjE0Z8RGCH762AGxjcZjPNC+uzh/l8bjdkNfNSucKC8wChVVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU+NEBGybCjW/e7Suls9gpBGcHx6EwHwYDVR0j
BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy
MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5
QUQ1MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNTBiYWM0LWE2YTctNDU2Yy04
NTBmLTYwZGNkZTY3YjQ5OS8wLzMxMzAzMzJlMzEzODMyMmUzODMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzQzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7ZQMA0GCSqG
SIb3DQEBCwUAA4IBAQBAp+bDv/231Bad6GWRql/F+KDpF3KifX7zu+icQKhfioOa
T/2SFgA/26+q7Qt+IvxDJMGB65kAVGFxvcTs7jU2Yd9+7E+LAikmBV1s6VIpgPm5
TMElNDWmKhNNphZ9yTg49zKu3FX42Xzqcf4Qtv8Gu1Kx5CwVu/lpiscCzZ9paAZc
AJ3gbZ/caivGViJNkg7ct3gEpBdXCxepIb1OajFC+q3ssbrab5oIYL/FHCkQQOLF
UBdpHJXl8LwKqeZK2Htwu3D+aM+e5Fm3JA+iNJ+B77ip4ZQ5kJx3rK3mLJqySzH6
ekNlxeM5NFrLSSdjeyBqN4NUrVfqxitMzHeeIJbB
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:04 2025 by rpki-client