This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa
File:                     3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (raw, json)
Hash identifier:          V1YXnZ8RaD7jZMTPv9sl3RlMQ1DjfCA6C5B7VF3kpxc=
Subject key identifier:   CC:34:59:E8:D1:A3:D1:63:37:94:79:3C:0E:54:30:C0:0A:A2:6F:8A
Certificate issuer:       /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Certificate serial:       51D6A30C5A651D09B56342E669D09D7B7AE0C2A3
Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa
Signing time:             Tue 02 Dec 2025 12:00:00 +0000
ROA not before:           Tue 02 Dec 2025 11:55:00 +0000
ROA not after:            Tue 01 Dec 2026 12:00:00 +0000
asID:                     150256
IP address blocks:        103.78.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
                          rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 21:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d6:a3:0c:5a:65:1d:09:b5:63:42:e6:69:d0:9d:7b:7a:e0:c2:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
        Validity
            Not Before: Dec  2 11:55:00 2025 GMT
            Not After : Dec  1 12:00:00 2026 GMT
        Subject: CN=CC3459E8D1A3D1633794793C0E5430C00AA26F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:2c:a2:21:78:ab:44:5b:bd:73:83:95:1d:
                    65:8a:be:46:56:9e:91:2c:cc:5b:bb:52:d4:71:90:
                    47:56:89:c4:75:57:4c:91:95:4a:45:ef:1a:a4:a3:
                    db:80:d3:f8:b6:f3:9a:f0:14:f9:55:12:1d:69:50:
                    f6:19:ec:03:9e:7b:6c:09:32:72:2d:c6:2b:9d:74:
                    4b:26:77:13:3d:b7:43:7d:22:91:07:26:01:1e:c9:
                    bd:ff:0b:56:02:3f:32:f3:1a:ca:82:8f:9b:f6:95:
                    b6:03:67:8e:96:4e:e6:b7:66:f3:73:49:11:57:c4:
                    40:72:68:fd:19:df:43:a4:21:2d:4f:44:e4:18:c8:
                    6d:31:e8:3d:1d:0a:f8:af:c3:82:9c:23:d2:d4:49:
                    d1:c8:0e:40:78:5f:11:d1:60:7d:76:14:cf:bf:b7:
                    54:c0:f1:8e:70:fa:56:c5:f6:9a:ad:d2:95:6f:84:
                    fe:d1:80:bd:b7:63:d5:d3:e7:bf:2c:d9:a2:eb:83:
                    1b:d0:5c:3c:ef:2a:db:a3:5d:d2:5a:87:ae:d3:e2:
                    c9:c2:fe:73:6a:13:0e:05:8a:0f:87:2f:74:33:1e:
                    55:4c:de:3c:8f:54:bd:24:6f:98:d5:e5:0b:41:f0:
                    e0:8e:3c:0f:a8:8b:89:e4:bb:8c:86:e6:a9:2f:f8:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:59:E8:D1:A3:D1:63:37:94:79:3C:0E:54:30:C0:0A:A2:6F:8A
            X509v3 Authority Key Identifier:
                keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:43:a6:2a:75:fd:50:19:23:69:d0:cd:e1:b2:28:46:d0:
         a2:ea:6f:f5:cd:ff:44:f8:82:cd:d7:25:79:aa:57:34:d3:ae:
         c6:4c:f9:d9:dc:1c:76:d3:d4:49:50:96:c9:a2:a9:8b:b2:e1:
         f1:4a:62:03:51:e5:9c:2f:77:3a:3e:b9:d3:5e:e7:56:31:c3:
         a2:fc:ec:82:53:18:64:2d:e5:a0:14:8e:1d:56:b8:0a:97:73:
         77:fb:c6:53:6c:79:94:f6:f8:12:78:e7:b4:e8:df:0d:8b:9b:
         ba:7a:0a:18:45:bf:e2:49:a8:8a:c6:fa:01:71:28:ef:d4:62:
         af:91:12:8c:1e:6b:54:bb:af:46:ef:3b:7d:7b:d3:a7:ad:fd:
         7b:f6:d2:5b:97:88:0d:65:2b:0e:2f:f5:18:75:42:9d:42:1e:
         8b:c5:83:4d:c0:42:71:1e:bc:b5:a2:f7:4a:aa:d0:69:be:5a:
         e9:42:eb:7c:01:0a:1b:91:52:0a:53:6c:dc:2e:c9:3c:a4:9e:
         75:78:5a:49:41:36:5b:78:f1:61:a4:b0:40:ce:a9:6a:aa:8b:
         e9:dd:6b:45:24:45:bf:53:d4:55:8e:84:c8:bd:0d:97:c4:63:
         b5:cf:58:73:08:61:cc:26:1f:4e:c6:e3:55:48:4d:54:3c:32:
         37:52:40:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:40 2025 by rpki-client