This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa
File:                     3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (raw, json)
Hash identifier:          GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=
Subject key identifier:   DE:6C:8A:D8:D0:BC:14:91:EC:62:60:08:67:1F:0E:6F:D6:93:63:FB
Certificate issuer:       /CN=56D494F5201C70B3C8FD0630664898D57A51A86F
Certificate serial:       1F9C0077FC8E4CC0863916B0FD4907B6E7323CFC
Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa
Signing time:             Wed 26 Nov 2025 07:38:22 +0000
ROA not before:           Wed 26 Nov 2025 07:33:22 +0000
ROA not after:            Wed 25 Nov 2026 07:38:22 +0000
asID:                     151545
IP address blocks:        103.236.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl
                          rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 05:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:00:77:fc:8e:4c:c0:86:39:16:b0:fd:49:07:b6:e7:32:3c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F
        Validity
            Not Before: Nov 26 07:33:22 2025 GMT
            Not After : Nov 25 07:38:22 2026 GMT
        Subject: CN=DE6C8AD8D0BC1491EC626008671F0E6FD69363FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:3e:eb:87:2c:c5:d2:b1:f7:bc:c4:c6:de:
                    7c:7d:a6:f9:ee:f8:a7:d1:18:ed:44:92:4d:95:57:
                    cd:ad:c6:19:a0:ee:e3:e5:39:75:15:44:d4:bb:13:
                    db:da:67:79:08:51:02:de:99:b6:56:f2:ed:a5:8d:
                    66:b4:62:42:14:04:45:f5:35:c6:36:f8:dc:a6:67:
                    df:72:83:4f:92:2f:d6:7c:33:7a:48:2c:13:5f:4a:
                    fc:ef:e4:d2:e6:6a:25:fe:0a:2c:bf:88:f5:2d:af:
                    31:f3:2b:52:68:a4:b1:e4:08:e9:43:55:da:dd:3d:
                    b2:b8:25:42:c1:42:20:c0:6e:fc:4b:24:45:a0:bf:
                    7d:0a:9c:8c:88:b2:88:45:b9:d4:3b:b2:dd:ba:3a:
                    96:85:06:a7:fd:0e:c9:59:73:a8:fd:00:c9:43:0c:
                    49:af:af:5e:46:4d:55:07:fb:8f:14:c1:e1:cb:ad:
                    42:35:8f:2f:9e:6d:22:06:e1:df:a1:97:d0:b6:05:
                    c8:2c:de:d8:ba:95:62:6f:6b:c5:88:d5:c8:5b:81:
                    2b:d8:2b:a3:4f:c0:d7:ff:40:91:91:15:9a:19:c0:
                    3e:34:b7:79:d8:b9:ba:bb:9d:d3:99:3a:e0:f5:c8:
                    25:77:55:f5:6a:b6:17:17:13:ee:f3:99:ba:c7:48:
                    15:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6C:8A:D8:D0:BC:14:91:EC:62:60:08:67:1F:0E:6F:D6:93:63:FB
            X509v3 Authority Key Identifier:
                keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:64:7c:7b:b0:df:f8:50:4c:bd:77:65:c8:c1:88:bf:9f:
         83:b3:49:46:41:4e:cd:35:b6:62:cd:f7:3b:43:92:06:b9:0e:
         3c:c1:57:fb:a0:c8:84:5a:a4:67:3c:7b:e2:02:8a:d5:3b:cd:
         f2:99:1d:09:71:23:0d:dd:c4:e8:d2:91:32:a5:34:8c:6f:f2:
         70:c6:5f:0c:4b:aa:5e:f7:da:83:36:e1:aa:ac:ef:38:d3:ef:
         02:cb:9d:cd:0b:a3:07:07:30:08:73:53:8d:ea:28:ef:57:11:
         e2:1d:e0:7c:6e:cb:77:fe:8e:7c:7a:ff:cb:6a:a5:f4:71:ce:
         7b:f8:a6:ac:f3:70:f8:93:a3:fb:29:5d:12:d4:7f:23:a7:ae:
         d1:ca:9b:19:cc:82:f6:3e:36:e7:5d:cc:83:56:8b:43:da:9f:
         3f:3c:08:14:aa:e8:a8:9e:e4:fe:7d:16:fd:a9:c3:e6:fc:64:
         26:48:f1:76:01:ff:bd:cf:8a:02:42:75:02:06:55:df:ee:f2:
         b7:08:c4:0d:fb:77:53:24:81:74:95:ce:40:cb:e9:f3:91:e1:
         16:97:b0:b4:be:05:9f:d0:eb:99:a9:be:89:4e:c9:da:c9:25:
         ad:d5:6e:59:e1:68:a7:c6:f5:53:9f:1d:b7:d2:8b:19:79:c9:
         89:74:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:47:05 2025 by rpki-client