This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa
File:                     3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (raw, json)
Hash identifier:          IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=
Subject key identifier:   83:F2:BD:8B:A6:DD:FC:39:EE:8A:49:9F:BE:CD:80:11:0C:7C:E0:30
Certificate issuer:       /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Certificate serial:       2F68845EB427B574C8DE749FCC1885DD41689D7D
Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa
Signing time:             Fri 21 Nov 2025 12:00:01 +0000
ROA not before:           Fri 21 Nov 2025 11:55:01 +0000
ROA not after:            Fri 20 Nov 2026 12:00:01 +0000
asID:                     141055
IP address blocks:        103.149.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
                          rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 15:26:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:84:5e:b4:27:b5:74:c8:de:74:9f:cc:18:85:dd:41:68:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
        Validity
            Not Before: Nov 21 11:55:01 2025 GMT
            Not After : Nov 20 12:00:01 2026 GMT
        Subject: CN=83F2BD8BA6DDFC39EE8A499FBECD80110C7CE030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9d:e0:55:53:61:de:25:ee:44:0d:0c:cc:c4:
                    72:75:3f:79:3a:76:a6:c5:a0:a1:48:1d:48:cf:bf:
                    26:20:0a:05:21:be:e3:68:d6:c0:57:d5:d9:09:1a:
                    bd:7d:53:54:8a:81:ee:bd:1c:7d:41:cf:56:25:02:
                    7f:11:35:d5:a7:83:f5:31:4a:1a:ac:91:b2:f8:31:
                    6c:5f:66:b1:fb:ab:a1:e0:73:e5:14:90:b6:ad:e6:
                    32:91:95:bf:64:d4:f1:69:77:79:8a:02:c8:c1:1a:
                    99:a4:c4:6d:04:e4:90:12:f3:7f:79:ee:6d:4e:53:
                    d0:24:f9:0c:82:ea:47:7d:d4:58:26:60:c1:b0:05:
                    8e:36:b2:ff:21:10:1f:03:e1:17:9c:64:6c:51:82:
                    85:bc:42:da:93:ef:ce:86:79:3f:e3:3a:dd:f6:fa:
                    5c:31:25:18:49:9f:f4:10:c6:af:6f:2b:d3:a0:f6:
                    14:27:77:c9:b3:4e:4d:41:fc:20:c9:c8:b6:dd:75:
                    15:5a:02:40:3b:35:bd:6d:0e:b2:cc:2e:af:f5:c3:
                    f3:5c:e4:d3:0a:aa:0a:d2:6a:7d:84:36:3b:35:7a:
                    19:3a:a4:42:5b:01:db:f8:09:b3:49:5d:07:2d:fd:
                    85:94:c0:f3:98:ac:9b:90:eb:06:e6:cb:53:79:bb:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:BD:8B:A6:DD:FC:39:EE:8A:49:9F:BE:CD:80:11:0C:7C:E0:30
            X509v3 Authority Key Identifier:
                keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:5f:27:55:23:0f:0d:d3:86:1e:a8:f1:6e:3a:0e:66:d6:
         8b:1e:6c:ba:76:90:db:2f:39:7b:13:43:72:c3:ca:9d:a0:da:
         07:a1:ee:4f:6e:a3:5a:be:62:8f:4c:ea:87:a9:0b:1d:eb:b7:
         c6:46:55:74:67:c0:46:65:f2:fd:bb:3b:af:f9:28:e2:86:fa:
         cc:ef:15:9d:df:bb:01:43:9b:13:75:38:25:31:44:da:28:a1:
         09:85:7b:b4:b2:06:c2:7e:b4:8a:7c:fe:55:1f:e4:01:6d:be:
         98:c0:2e:46:44:ca:79:d1:ad:a5:61:e5:7f:b6:21:7e:d1:90:
         8d:fe:3a:b0:8d:e2:91:e5:67:14:67:c3:20:a9:9a:b6:33:d6:
         ab:0f:12:29:53:cb:9c:07:8a:cd:95:9f:a1:44:78:8a:61:c8:
         fb:b3:ce:0f:d6:45:0e:fb:50:d5:42:d5:96:c4:3c:9e:7b:b0:
         94:6c:63:1a:dc:ea:ba:05:a4:68:d7:29:09:d5:ee:27:4d:4e:
         af:0b:19:d9:7e:ac:17:48:27:5f:da:7c:21:d2:19:a1:e8:72:
         32:b2:ff:f2:be:15:51:90:92:40:60:6b:ca:19:9f:99:be:b8:
         fe:af:0b:ba:73:79:7d:1c:c9:af:08:95:38:46:81:39:6a:22:
         79:a2:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:45:31 2025 by rpki-client