This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
File:                     3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa (raw, json)
Hash identifier:          3d+mx0+iwzqvKG0kVcKkiTDes8ajUjlfaMyAG4o8aKI=
Subject key identifier:   3E:B0:10:9F:CE:4F:54:D2:5F:05:90:99:CD:9B:AA:7C:D3:18:93:9F
Certificate issuer:       /CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
Certificate serial:       61C41FBA31E896B9EBB911B7B1BE40D7A7161C16
Authority key identifier: F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa
Signing time:             Wed 05 Nov 2025 06:02:26 +0000
ROA not before:           Wed 05 Nov 2025 05:57:26 +0000
ROA not after:            Wed 04 Nov 2026 06:02:26 +0000
asID:                     138143
IP address blocks:        103.134.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl
                          rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 08:39:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c4:1f:ba:31:e8:96:b9:eb:b9:11:b7:b1:be:40:d7:a7:16:1c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B
        Validity
            Not Before: Nov  5 05:57:26 2025 GMT
            Not After : Nov  4 06:02:26 2026 GMT
        Subject: CN=3EB0109FCE4F54D25F059099CD9BAA7CD318939F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:16:39:81:7e:aa:5d:b7:90:81:bc:3d:c2:
                    49:17:12:01:7a:a4:07:66:f6:3d:bb:cd:e3:a7:5d:
                    22:85:fb:29:61:cc:8d:61:70:2d:b7:2a:5d:1c:da:
                    77:89:fc:c9:9f:af:b7:2f:2d:5f:2e:56:c1:2c:58:
                    14:fa:23:42:0b:f9:f2:4a:a7:6c:98:45:95:46:ee:
                    31:ed:40:c2:9e:a7:60:a7:ae:7e:70:c6:a2:23:5a:
                    3f:38:d5:a0:b6:32:1c:9e:bf:05:cc:d0:54:0f:e4:
                    23:57:38:a6:52:e3:c9:6b:d1:b9:a3:4d:c6:f9:78:
                    e0:29:d1:97:86:94:34:84:e1:60:37:37:50:ed:78:
                    dc:98:a7:ea:c4:23:c1:7c:9b:9c:28:08:54:a3:bc:
                    29:7e:5e:a0:96:84:18:c9:bf:58:61:31:9a:d4:64:
                    55:06:a6:90:d8:e5:52:91:ac:9e:b4:d8:9a:1b:a8:
                    e8:58:2c:f3:43:f7:a3:0c:cc:b7:91:2f:6e:50:cf:
                    8e:d4:0c:13:a0:28:c4:1d:d8:72:7d:86:0c:d2:8e:
                    fa:2e:05:e7:e9:87:3b:f6:87:da:59:dd:c7:54:a4:
                    d3:ae:3e:74:e2:21:c9:5c:8e:4f:7a:d2:bf:df:50:
                    fa:44:a8:b9:1d:8b:0d:00:bf:43:fe:19:b4:30:2f:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:10:9F:CE:4F:54:D2:5F:05:90:99:CD:9B:AA:7C:D3:18:93:9F
            X509v3 Authority Key Identifier:
                keyid:F5:CC:08:F1:CD:0B:94:57:9D:4F:77:3C:EE:5A:BF:BD:5E:8E:22:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5CC08F1CD0B94579D4F773CEE5ABFBD5E8E220B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d794d36-69f8-4406-bf9f-122ddd17f450/0/3130332e3133342e37392e302f32342d3234203d3e20313338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:7a:c6:fe:f1:07:78:bc:c7:71:ea:e4:00:8c:9e:76:f2:b8:
         94:81:37:08:0a:42:15:a1:26:a3:40:f6:07:05:6b:66:6f:a1:
         98:85:97:fb:ea:12:ed:6d:6d:9f:71:8a:5d:71:c8:5e:df:38:
         44:82:f8:91:b2:4f:c2:ee:50:c6:85:07:6f:82:7c:cd:8f:cc:
         00:d3:66:4c:32:72:da:0b:11:ba:34:e6:49:ed:38:f9:38:2a:
         ec:e6:bf:8e:64:19:f4:f7:09:05:41:0e:45:a6:43:72:0e:a1:
         e4:b3:34:7f:62:ad:8f:dc:e2:21:6f:45:ef:1f:b8:a1:53:c9:
         14:3a:9a:d2:b3:1b:9e:1a:72:ad:cd:93:0a:e0:a7:de:92:03:
         17:18:48:cc:75:43:70:94:2a:37:cb:ed:3f:e9:78:d5:a9:07:
         8c:f7:0f:8f:ef:68:28:54:24:34:09:f2:05:0d:92:87:ef:54:
         cf:37:76:d8:45:c1:97:af:70:2b:4c:54:2d:d9:85:5c:80:6c:
         5d:b3:d8:f5:cf:c6:04:5b:34:3a:ae:32:d8:6b:69:0c:e7:48:
         0f:2b:b9:68:2b:2d:a7:48:ce:6c:c8:48:f2:c1:ec:41:c6:95:
         04:dc:79:b4:43:24:34:8d:30:e6:fb:95:36:cb:6c:a4:00:90:
         91:b1:a6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:51:40 2025 by rpki-client