This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa
File:                     3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa (raw, json)
Hash identifier:          0zElYS8pYAdAq2zXe+2YefY+xTaQBq2KFhrk8AH5DcA=
Subject key identifier:   40:44:D1:CF:E7:DB:7A:68:2B:1A:72:3B:3B:FE:C0:69:39:A8:B9:8B
Certificate issuer:       /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial:       5720E077EF2B49472553E0EF348AC3040F7A5782
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa
Signing time:             Fri 07 Nov 2025 01:00:00 +0000
ROA not before:           Fri 07 Nov 2025 00:55:00 +0000
ROA not after:            Fri 06 Nov 2026 01:00:00 +0000
asID:                     147120
IP address blocks:        103.175.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
                          rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 17:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:e0:77:ef:2b:49:47:25:53:e0:ef:34:8a:c3:04:0f:7a:57:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
        Validity
            Not Before: Nov  7 00:55:00 2025 GMT
            Not After : Nov  6 01:00:00 2026 GMT
        Subject: CN=4044D1CFE7DB7A682B1A723B3BFEC06939A8B98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:e1:a3:2a:6a:80:ab:0a:54:f6:47:13:59:
                    0a:f7:8d:eb:d5:69:4e:e3:2a:11:1e:2f:98:ce:51:
                    26:6b:78:b4:d4:ab:93:b8:84:ae:ca:1e:2d:55:c9:
                    bc:39:77:fb:9d:3e:2b:1e:ec:08:9d:2c:5c:da:a5:
                    d6:a5:10:09:34:d4:c6:84:8d:67:62:d7:6d:72:b8:
                    47:ea:34:49:31:3e:bb:b5:05:fd:a8:f0:5c:b6:6d:
                    81:26:38:87:0f:6b:83:bf:29:1a:33:95:97:a5:54:
                    98:79:8b:1e:b3:b4:5f:a8:64:d6:9d:c3:b0:9b:e8:
                    7d:20:96:fe:44:dd:3a:73:e4:2e:9a:3b:79:70:e2:
                    00:9d:3d:64:28:1c:0c:02:9e:0c:c1:62:90:95:90:
                    40:f2:0c:dd:1c:27:98:c4:9c:e9:c0:13:68:bb:bd:
                    0e:7b:c3:5d:d7:e9:3d:e5:3e:ba:46:6e:8c:08:79:
                    af:2e:12:2b:15:3e:40:37:7f:eb:d4:36:ce:f1:8d:
                    4d:b2:da:01:a8:ff:6d:5b:0a:0f:8a:f7:6e:ce:66:
                    e1:30:07:af:1b:77:f8:e7:0c:80:9f:41:29:44:27:
                    aa:79:6a:04:84:07:66:f9:58:94:f4:fe:e6:64:b9:
                    36:e9:7f:ae:70:7e:18:c2:60:34:0d:b2:c3:90:05:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:D1:CF:E7:DB:7A:68:2B:1A:72:3B:3B:FE:C0:69:39:A8:B9:8B
            X509v3 Authority Key Identifier:
                keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135362e302f32342d3234203d3e20313437313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:32:45:6c:80:b2:6e:35:23:d2:a0:af:36:da:a9:c1:76:fd:
         2b:e5:de:17:7a:a1:27:94:64:e1:56:f4:d6:46:59:04:99:a1:
         5d:97:de:15:ba:e3:c3:07:ba:c0:14:eb:a1:fc:47:92:7d:d8:
         70:fc:9f:a9:d1:ae:fc:25:6c:65:3c:b7:e9:a9:41:b8:4e:f3:
         15:96:78:62:27:b4:6b:2c:d6:ff:57:c1:74:e3:7b:6e:8c:8c:
         0f:67:96:86:23:4d:44:a5:9c:f5:92:08:e1:99:78:91:8f:a2:
         cf:81:0e:7d:1c:3f:22:7c:fa:56:44:4e:d3:14:96:8e:04:c5:
         49:fd:67:5f:7e:de:7c:29:c3:bf:88:cf:62:ec:c9:b9:a9:23:
         52:3c:32:fe:72:60:00:2e:83:7a:6d:9d:cf:b3:68:a7:50:c8:
         f7:70:55:e6:19:a6:92:e6:89:6e:4b:de:cc:b3:8e:15:47:8f:
         01:9d:e0:f0:fa:e0:c5:9e:75:38:fd:b2:4a:81:fc:95:09:3d:
         16:06:0f:20:f2:8f:2b:82:ea:e5:ae:ad:5c:9f:31:cd:fb:a6:
         86:b0:61:1d:6c:0d:9f:52:2e:a6:9c:07:3e:3b:8f:29:69:57:
         94:6a:64:bf:94:23:a7:5f:84:af:86:10:64:35:28:25:0c:97:
         d4:27:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:40:59 2025 by rpki-client