This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
File:                     3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa (raw, json)
Hash identifier:          a+I06nP5b+sG7uombRaO/A9VFiWnda28578PbtlGH3U=
Subject key identifier:   2D:E3:02:2B:A6:1A:36:11:7F:8E:16:B4:43:FE:BE:AE:75:32:5A:03
Certificate issuer:       /CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
Certificate serial:       5B60A24B9C58D00BA91E961D175BFA8D4FBB6F62
Authority key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa
Signing time:             Fri 07 Nov 2025 00:00:00 +0000
ROA not before:           Thu 06 Nov 2025 23:55:00 +0000
ROA not after:            Fri 06 Nov 2026 00:00:00 +0000
asID:                     147120
IP address blocks:        103.175.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl
                          rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 17:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:60:a2:4b:9c:58:d0:0b:a9:1e:96:1d:17:5b:fa:8d:4f:bb:6f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360
        Validity
            Not Before: Nov  6 23:55:00 2025 GMT
            Not After : Nov  6 00:00:00 2026 GMT
        Subject: CN=2DE3022BA61A36117F8E16B443FEBEAE75325A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:20:0d:fb:a6:4e:d1:64:17:f2:c6:55:e8:84:
                    21:78:46:b8:11:d7:9f:cd:db:b0:ba:85:2f:ba:d6:
                    d8:7a:0f:cb:17:3e:2b:e5:6f:64:b3:d5:4a:8e:d7:
                    53:56:1d:f0:49:7e:3f:34:98:a8:81:b5:e4:7f:76:
                    8d:fd:c7:cc:1a:ca:80:4b:e2:74:a5:cf:fa:95:ae:
                    bb:1f:b5:0c:d9:71:ba:3e:3d:56:6f:70:eb:55:76:
                    b9:d0:79:ac:a2:ad:89:3e:c4:67:9a:7e:45:71:b7:
                    3b:da:e7:ad:93:1b:ad:15:3f:66:55:3e:a2:2e:58:
                    ff:3f:57:61:a1:b7:84:f8:4b:e4:b8:96:31:6c:7c:
                    87:c8:07:6a:f4:09:05:94:3a:79:ea:a6:76:7d:6a:
                    a9:44:96:37:ff:08:ff:4d:48:27:0b:28:df:b0:fd:
                    3f:5f:37:67:af:e0:56:91:63:ce:09:a7:90:c4:ce:
                    fa:84:46:41:23:11:e5:03:56:e6:5b:09:90:91:48:
                    ef:6e:78:5d:20:8c:fc:b8:78:9a:3f:9d:6f:52:1c:
                    5c:5f:ca:cd:10:9d:22:1d:b3:12:fb:ae:2c:49:5d:
                    f7:50:ca:e2:4f:7a:fe:9e:60:a5:55:ca:14:f4:85:
                    db:0a:49:b1:69:45:c8:5b:54:de:74:ba:19:b8:22:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E3:02:2B:A6:1A:36:11:7F:8E:16:B4:43:FE:BE:AE:75:32:5A:03
            X509v3 Authority Key Identifier:
                keyid:ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/3130332e3137352e3135372e302f32342d3234203d3e20313437313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:45:0c:a0:8d:be:b7:9f:5b:c0:83:63:43:17:76:75:eb:
         9a:c3:74:5f:c6:27:e3:76:f0:20:92:06:83:05:f1:4f:3a:37:
         30:df:9b:f8:d2:39:5d:ad:8c:77:5b:67:9a:83:7d:ab:5a:40:
         a1:a9:99:1d:8d:b2:9d:f5:04:cd:23:28:45:3e:28:31:2d:6c:
         00:d8:e1:32:76:8d:ec:f8:84:38:5d:ef:2e:ec:d8:f2:5a:65:
         a0:0c:ae:a3:cf:8a:c2:46:d3:33:6d:5d:a0:ec:d6:8d:ca:33:
         17:40:02:94:fc:ed:7c:23:01:3f:0a:68:47:2c:d6:7d:39:fb:
         43:78:60:23:7a:6e:51:db:32:52:5c:e5:03:23:1c:e9:23:7e:
         97:f2:f7:83:3d:49:fe:da:eb:82:cb:1b:8a:6f:3c:01:a1:c6:
         87:82:1f:6e:8c:ea:8c:60:a3:24:b4:a3:fe:18:14:82:ee:36:
         7c:d7:31:84:14:b8:23:35:cf:4d:d1:16:8f:0e:3c:21:97:cd:
         bd:b7:eb:34:58:bb:7c:dc:4e:96:b5:a4:9c:a0:01:e0:b1:54:
         54:70:a1:32:59:5a:ab:16:cd:2d:81:a9:4a:32:b2:b5:95:59:
         d0:c4:56:81:41:ad:3e:c1:34:b8:2d:e5:84:7c:da:60:87:48:
         42:33:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:40:58 2025 by rpki-client