This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
File:                     3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa (raw, json)
Hash identifier:          LJlBxq8ymyHGerS3R49fpjBElb4mwDz4wakEqWAnKM4=
Subject key identifier:   C0:99:63:F8:60:5D:B2:1D:75:94:00:3E:7B:65:D6:40:61:CF:1D:6A
Certificate issuer:       /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial:       3E613EBF0D16EE3189881E75B429DBA7393F942F
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa
Signing time:             Thu 13 Nov 2025 17:02:31 +0000
ROA not before:           Thu 13 Nov 2025 16:57:31 +0000
ROA not after:            Thu 12 Nov 2026 17:02:31 +0000
asID:                     142354
IP address blocks:        103.169.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
                          rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 14:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:3e:bf:0d:16:ee:31:89:88:1e:75:b4:29:db:a7:39:3f:94:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
        Validity
            Not Before: Nov 13 16:57:31 2025 GMT
            Not After : Nov 12 17:02:31 2026 GMT
        Subject: CN=C09963F8605DB21D7594003E7B65D64061CF1D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:41:85:64:cb:3c:09:9a:13:af:2f:49:62:f5:
                    56:79:80:32:a5:c7:c9:10:3c:01:c1:1f:c1:fe:e9:
                    74:6d:71:46:6c:ed:7a:50:fa:b4:70:9d:94:cc:1e:
                    6d:26:0d:e9:0f:63:bf:f0:8f:d5:0b:5f:44:77:69:
                    f5:d1:24:cf:ce:41:67:c2:44:57:28:e2:48:55:2b:
                    d9:30:28:cf:ab:e3:8d:55:96:ed:e2:0b:a4:a6:b5:
                    f3:25:36:b8:f9:99:4c:aa:de:32:c0:db:52:ba:7a:
                    02:37:c1:e8:0c:18:cb:96:b3:26:7d:e7:da:44:69:
                    11:d7:48:1a:76:5b:f6:e4:c0:c3:b3:1b:7a:8b:2a:
                    cd:e8:d5:3f:cb:14:42:1e:59:2d:1a:e7:e8:24:9d:
                    2e:ea:50:e9:75:8e:3d:37:8d:07:8a:14:d3:e5:a9:
                    65:7b:13:61:95:36:05:ea:68:3f:18:9a:18:da:13:
                    8a:81:a5:51:df:54:71:ae:e5:59:1b:62:4d:6e:ed:
                    c3:6f:43:57:af:c7:8e:96:9b:67:78:77:1e:6c:46:
                    e1:84:f4:ff:3f:78:7a:1f:bd:f9:7e:4a:d4:77:86:
                    1b:e3:4a:bf:e2:cf:e4:3b:9e:67:f6:a0:9f:69:f7:
                    fd:99:ac:5a:4c:03:6d:c7:17:23:6e:8f:03:b1:9d:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:99:63:F8:60:5D:B2:1D:75:94:00:3E:7B:65:D6:40:61:CF:1D:6A
            X509v3 Authority Key Identifier:
                keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32342d3234203d3e20313432333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:04:ee:c9:eb:42:b1:d3:4b:70:5b:7f:2b:48:62:43:e7:88:
         2c:51:38:4b:67:fd:29:a1:fe:e0:4c:3a:ba:8e:88:94:39:2c:
         4e:d5:25:1c:58:ac:a8:08:ee:63:ff:39:9f:91:05:2a:48:55:
         82:91:74:7f:b7:8a:dd:b5:4d:2c:9f:c6:47:b0:62:eb:ac:a6:
         7e:12:0f:94:50:50:2d:7f:f6:d2:f2:55:95:76:55:4c:b9:b2:
         8a:eb:a5:67:dc:4c:94:c6:c7:54:bb:17:69:12:7a:88:98:cc:
         88:3a:04:7e:98:57:06:af:4a:ef:a9:01:bb:aa:70:15:ed:65:
         9c:ca:d7:d4:ec:17:81:cf:a5:93:f8:fd:8b:d2:25:a1:d3:09:
         62:10:93:1a:89:3d:0a:50:ca:b8:29:b8:60:ad:aa:8e:00:35:
         5d:ee:92:fc:10:6f:de:3c:3d:e9:65:f0:fd:34:68:f6:cd:ae:
         94:a0:cf:3a:ef:8a:ce:47:a6:57:1c:4a:c5:06:c4:d9:5c:33:
         cd:b9:b9:aa:86:28:c2:84:24:d1:10:45:05:f0:df:5b:a8:a6:
         2d:d9:5d:0c:e3:1c:76:1d:01:50:76:11:2e:8e:0e:0e:0c:97:
         fd:b4:3d:b4:d2:d6:7c:87:94:33:fe:c5:f3:78:88:41:3d:73:
         40:05:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:55 2025 by rpki-client