This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32352e302f32342d3234203d3e203536323432.roa
File:                     3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=
Subject key identifier:   6E:BE:87:00:35:B5:C3:27:60:86:2E:76:7F:55:AC:80:E1:B8:A3:2D
Certificate issuer:       /CN=C380A411E3CE15C60336341BB4B0994B307B920D
Certificate serial:       375EA862C83F130AE5624B45AAC967ED2CEE2B25
Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32352e302f32342d3234203d3e203536323432.roa
Signing time:             Thu 11 Dec 2025 09:02:33 +0000
ROA not before:           Thu 11 Dec 2025 08:57:33 +0000
ROA not after:            Thu 10 Dec 2026 09:02:33 +0000
asID:                     56242
IP address blocks:        103.143.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl
                          rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 04:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5e:a8:62:c8:3f:13:0a:e5:62:4b:45:aa:c9:67:ed:2c:ee:2b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D
        Validity
            Not Before: Dec 11 08:57:33 2025 GMT
            Not After : Dec 10 09:02:33 2026 GMT
        Subject: CN=6EBE870035B5C32760862E767F55AC80E1B8A32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:5b:00:a1:04:75:c5:a9:f6:90:8a:e1:4b:
                    1e:49:ae:3a:b3:8c:2d:50:bd:52:0d:0a:b7:97:37:
                    f2:27:1a:b4:91:36:23:cb:90:71:81:b6:f9:c9:b6:
                    30:46:ed:21:7d:bd:a9:9e:46:77:a3:ea:8d:d1:b7:
                    37:7d:2c:94:9e:45:9e:a1:cc:e4:2b:39:cb:a9:11:
                    00:8c:10:a6:bb:7b:57:aa:63:d7:54:cf:9f:4e:f8:
                    ed:05:9c:07:70:41:dd:c8:21:ea:d2:2c:58:19:3c:
                    5a:9c:ed:ba:37:dd:cb:fa:ff:b8:fd:c4:67:63:09:
                    0e:b2:0d:6b:a8:fe:d3:a8:11:2b:5b:6a:a6:80:4e:
                    1a:8f:12:0a:63:70:d6:5f:81:31:df:60:69:3e:7f:
                    59:24:fe:64:d7:90:73:9c:4f:48:6e:79:dc:24:57:
                    f3:00:4d:55:6e:71:f2:4b:57:59:90:70:42:02:ea:
                    dc:36:fa:e7:f5:05:b0:32:7b:19:e0:97:ef:5d:61:
                    ba:13:5a:02:7c:df:24:6a:2e:38:1a:99:9e:41:23:
                    6e:de:11:83:06:9f:e4:39:78:6f:9e:07:7e:1e:24:
                    96:26:2b:e8:70:29:ba:d1:59:57:8f:1a:c4:5e:f3:
                    9d:25:e3:27:ed:32:0d:c4:69:56:8c:41:8a:09:9f:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BE:87:00:35:B5:C3:27:60:86:2E:76:7F:55:AC:80:E1:B8:A3:2D
            X509v3 Authority Key Identifier:
                keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32352e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0a:86:16:d7:bd:8b:c1:05:54:dc:b9:d7:86:e2:33:5b:4f:
         10:cb:a7:c9:d2:32:9f:b4:13:28:93:7f:6f:52:dc:64:de:1b:
         4d:48:8f:2c:b8:d7:7e:a5:af:d3:76:46:7f:d0:36:b7:a9:de:
         a7:4d:03:b6:30:dd:0a:56:72:6f:42:61:bf:9a:e3:63:e0:d7:
         32:30:91:c5:40:f9:b6:c4:2a:e9:22:07:02:59:b3:76:16:0b:
         da:b6:18:0d:20:66:e1:eb:5f:6d:be:38:a6:47:df:ac:e2:0c:
         42:32:7c:cb:40:96:e5:29:8c:1b:42:72:a9:4f:d3:da:76:64:
         ae:b6:d7:df:a1:f8:be:02:9e:de:ec:55:f5:e6:c4:e6:98:68:
         f9:e0:7b:64:19:8a:0b:8a:4a:1e:a5:3f:7e:8d:9c:43:a1:50:
         b5:c2:28:44:0c:be:f9:86:1b:63:88:ef:56:b2:d5:b1:ff:8f:
         03:1d:ff:82:a4:1a:89:3a:8b:aa:80:f6:e8:2b:df:45:e6:82:
         4e:cb:ce:b9:a7:a1:26:fc:b0:8e:45:1d:d4:1f:1a:81:a2:28:
         55:aa:fc:10:cf:05:73:57:f1:09:57:56:e5:55:57:21:ba:2a:
         d0:f5:da:4d:ee:c4:94:84:fc:a5:40:51:77:61:7f:31:c9:48:
         c2:3d:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 11:42:42 2025 by rpki-client