This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
File:                     3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa (raw, json)
Hash identifier:          qRx69uXQySR48CKNl3AT5MvLAC1vSm8ublsGP/t0noo=
Subject key identifier:   82:B3:99:56:F4:BF:CE:50:75:6A:6C:C9:55:5A:EF:9E:A3:66:4C:B9
Certificate issuer:       /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E
Certificate serial:       176EA454178A17D1802B94577F6DBC2BD8F40D0C
Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa
Signing time:             Tue 18 Nov 2025 23:20:11 +0000
ROA not before:           Tue 18 Nov 2025 23:15:11 +0000
ROA not after:            Tue 17 Nov 2026 23:20:11 +0000
asID:                     141127
IP address blocks:        103.148.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl
                          rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 10:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6e:a4:54:17:8a:17:d1:80:2b:94:57:7f:6d:bc:2b:d8:f4:0d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E
        Validity
            Not Before: Nov 18 23:15:11 2025 GMT
            Not After : Nov 17 23:20:11 2026 GMT
        Subject: CN=82B39956F4BFCE50756A6CC9555AEF9EA3664CB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:cd:cd:d4:17:98:45:ff:cc:be:4e:b7:87:
                    71:78:37:17:ae:5b:95:52:8d:4d:22:81:96:9b:7e:
                    52:34:9d:31:87:ac:a3:cf:1b:29:a5:3f:c3:bb:dd:
                    9e:8c:6c:7d:74:22:00:2f:da:de:98:9d:5c:3d:3b:
                    98:5e:ed:59:c3:0f:05:77:07:4d:5d:c0:eb:fa:4a:
                    84:71:19:b8:79:9d:06:12:07:db:d5:5e:b4:cb:54:
                    c9:12:c0:cc:cb:ae:3a:28:e2:b1:19:08:1e:db:7b:
                    8d:49:bf:cd:39:e1:29:4e:ab:72:e9:0a:08:e3:d9:
                    cc:e8:75:0b:fd:ae:17:c5:40:5d:ec:85:00:c9:9e:
                    70:f8:85:fb:1a:8d:96:8b:c7:d5:f9:98:51:3c:d7:
                    bd:d2:93:ec:e8:4b:4c:ef:44:7a:aa:80:e8:5e:ee:
                    fd:77:d9:4e:53:f6:93:28:f6:bd:04:8a:02:0d:0a:
                    b8:6c:52:bf:46:34:5b:04:9f:f8:41:6a:a5:70:f6:
                    90:8a:b1:1c:6e:c4:39:07:81:04:1e:15:dd:3c:64:
                    a0:42:71:ce:2b:c0:f8:15:53:3b:50:5e:9c:94:9b:
                    40:a2:e8:4a:58:ec:ce:73:73:c9:58:ee:e6:14:2d:
                    43:ee:34:76:de:48:53:d4:36:2c:55:77:6f:86:be:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:99:56:F4:BF:CE:50:75:6A:6C:C9:55:5A:EF:9E:A3:66:4C:B9
            X509v3 Authority Key Identifier:
                keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/3130332e3134382e3133302e302f32332d3234203d3e20313431313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:8c:76:d6:af:86:2e:c4:f3:8e:2e:e6:e7:50:75:db:34:06:
         91:9b:dd:c2:1f:03:fa:7f:35:77:db:ff:96:a9:7f:72:fa:7d:
         d4:dd:d1:4f:3c:de:c7:19:a9:be:01:c3:c7:03:0a:85:fe:87:
         a8:92:f2:4d:49:a4:aa:92:76:1b:ef:91:55:40:41:1e:47:5d:
         df:f8:33:ab:73:09:98:6e:79:bc:32:a1:f1:b4:58:2d:51:f7:
         03:3a:a2:42:f4:ee:a3:d1:bf:1f:55:4f:3f:76:98:58:4a:13:
         92:5c:6c:7f:2c:10:07:a0:05:da:db:8f:07:09:fb:fb:fd:83:
         75:6d:5c:56:1f:a7:4c:19:02:d1:e9:9f:ef:72:52:4e:b4:4a:
         03:35:6f:1e:d7:35:db:a2:ca:e1:2b:92:a7:70:1d:77:03:7d:
         95:13:74:1a:1c:cc:e1:6d:51:36:d6:93:99:60:16:c1:e9:30:
         b2:56:ed:9a:2c:ca:67:af:28:34:33:c8:e0:c7:36:02:55:a7:
         60:96:92:6d:59:0a:e8:a9:0b:80:39:c8:9e:e8:df:e7:9d:3f:
         27:8c:01:19:f0:87:a5:41:4d:a5:90:a9:8e:11:2d:99:0d:44:
         5b:9c:f5:a2:f9:8c:51:ee:5c:92:92:6e:de:55:d0:a8:b0:57:
         95:52:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:51:20 2025 by rpki-client