This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
File:                     3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (raw, json)
Hash identifier:          63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=
Subject key identifier:   1B:25:99:C8:2B:28:88:95:29:A9:9C:BE:7F:10:F3:18:8E:C6:DE:63
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       7C4E555C2A62E563683E2D509D7D02613F9B8A1A
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
Signing time:             Sun 23 Nov 2025 09:00:01 +0000
ROA not before:           Sun 23 Nov 2025 08:55:01 +0000
ROA not after:            Sun 22 Nov 2026 09:00:01 +0000
asID:                     136865
IP address blocks:        103.102.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 15:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4e:55:5c:2a:62:e5:63:68:3e:2d:50:9d:7d:02:61:3f:9b:8a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Nov 23 08:55:01 2025 GMT
            Not After : Nov 22 09:00:01 2026 GMT
        Subject: CN=1B2599C82B28889529A99CBE7F10F3188EC6DE63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:ed:61:48:2b:5a:d8:d7:82:7f:76:d0:4b:
                    23:a1:33:50:04:c7:b3:34:3f:00:22:7e:ca:5e:f3:
                    17:11:0d:90:9f:5f:59:ed:33:af:8f:05:26:0f:63:
                    08:4f:7a:bc:0f:c7:33:c8:8a:53:d5:90:85:8e:ef:
                    14:be:54:b8:76:22:9a:0f:37:83:1f:ef:fe:e7:b5:
                    d0:c8:73:07:c8:88:52:c6:aa:99:d6:07:d9:2c:cf:
                    20:65:fc:27:f0:62:ac:13:55:f3:7e:56:85:52:7f:
                    75:a8:33:31:f6:48:61:c5:35:db:b7:28:96:bb:59:
                    01:81:ec:69:18:ae:29:3f:fc:ef:17:b7:99:f2:e6:
                    a8:2f:61:00:5b:e0:cf:72:fa:1a:8a:6c:bf:70:ff:
                    36:31:81:f3:4f:4b:50:99:f6:e6:e8:d3:bd:b8:53:
                    dd:b9:73:ef:74:da:5d:cd:e6:00:ca:ef:88:91:3f:
                    25:df:16:e4:90:3f:43:7d:b8:18:b7:d1:c2:9a:f4:
                    85:c2:40:d3:53:ea:7c:7c:11:74:a8:22:c7:4d:ae:
                    8b:c0:7e:8f:bf:03:c4:2e:43:eb:fc:f6:18:72:80:
                    58:58:11:ae:ed:c6:32:82:7f:85:bd:b3:37:53:f6:
                    10:cc:3e:5b:52:b8:0c:fa:49:a8:36:ae:1f:69:40:
                    2d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:25:99:C8:2B:28:88:95:29:A9:9C:BE:7F:10:F3:18:8E:C6:DE:63
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:9c:01:2f:19:b5:1d:38:11:7a:55:83:06:7d:fa:80:c0:
         d5:f2:87:39:fc:52:34:ad:95:c4:11:bf:5b:06:87:9e:9d:12:
         6f:77:b2:11:c1:88:c2:56:87:2c:26:26:e4:0f:2a:fc:e6:83:
         6b:15:81:22:ae:86:a6:f4:be:9f:24:0a:88:58:74:fa:63:3a:
         29:77:9d:14:09:e9:12:e7:b3:fe:45:f6:56:1d:95:30:80:26:
         ca:9d:0d:5d:c5:2a:7d:75:dc:29:88:e3:f9:79:2e:57:26:f5:
         ec:db:77:a9:d6:26:a3:6b:41:9a:71:e0:a5:57:7d:31:94:d3:
         84:a4:1e:fc:fe:f8:33:ca:3a:51:29:e2:52:df:54:2b:ba:b6:
         35:34:d1:ee:92:bf:8a:f0:73:3f:45:45:ce:89:7a:c4:0e:84:
         0c:e6:09:5f:95:2f:c0:ef:d9:95:9a:b4:96:0c:e6:a2:d2:99:
         03:96:5b:81:dc:12:e5:96:b0:06:86:05:84:9f:7f:26:3a:4e:
         04:b1:5b:26:96:e0:5b:cf:1a:02:76:75:53:d2:03:2d:8e:ba:
         6b:28:53:af:00:95:67:0b:29:a3:ff:1a:37:a7:87:e5:de:91:
         12:4e:02:42:65:4e:44:1a:98:34:09:e4:cc:20:d6:85:3b:03:
         dc:6b:ed:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:07:08 2025 by rpki-client