This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          rZsY+EfwBfpDowLibQzRpaGO5lMOsSrGagNCzUI5+EM=
Subject key identifier:   6E:2C:11:A2:F8:BE:2A:96:7D:09:2C:50:7F:C5:A8:D9:C2:0E:F3:60
Certificate issuer:       /CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
Certificate serial:       0E565DE01D09D347AC872E198365DBE3858D4F80
Authority key identifier: 6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa
Signing time:             Thu 27 Nov 2025 05:00:00 +0000
ROA not before:           Thu 27 Nov 2025 04:55:00 +0000
ROA not after:            Thu 26 Nov 2026 05:00:00 +0000
asID:                     152017
IP address blocks:        103.255.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl
                          rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:56:5d:e0:1d:09:d3:47:ac:87:2e:19:83:65:db:e3:85:8d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Validity
            Not Before: Nov 27 04:55:00 2025 GMT
            Not After : Nov 26 05:00:00 2026 GMT
        Subject: CN=6E2C11A2F8BE2A967D092C507FC5A8D9C20EF360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:b6:6d:69:78:99:8d:e9:41:9f:c6:59:41:
                    b3:c8:24:ee:dd:88:53:ab:b4:1c:28:64:9f:5a:d7:
                    70:4c:d0:15:42:95:7b:73:57:19:2e:57:00:43:15:
                    42:2c:e4:60:f8:aa:8f:87:63:f9:f8:27:d1:39:e7:
                    4b:13:d4:d7:f8:98:c1:05:5a:f8:8c:47:e2:cd:b3:
                    40:3d:fb:f1:37:39:49:f3:b0:62:34:3c:cc:86:9e:
                    a2:57:38:75:f1:aa:ec:dc:40:dd:50:04:cc:d6:f5:
                    f3:87:ba:ac:0b:1a:f8:c1:90:99:7a:90:60:3f:99:
                    09:0b:79:d9:35:d6:6d:3d:c1:d7:fc:cd:27:f2:7a:
                    2c:02:fd:98:26:b2:95:e1:93:77:1b:48:b2:1e:c3:
                    d2:8f:65:d7:8f:92:14:b4:fd:42:f4:52:34:f9:5f:
                    19:6c:df:9e:74:ee:95:07:ee:42:ef:60:7f:f0:43:
                    ed:5c:0a:d0:94:25:d4:ee:dd:25:4f:2b:21:29:39:
                    fd:89:a9:60:74:fa:62:f2:73:61:fe:9b:aa:83:8a:
                    6a:2d:71:55:34:17:60:4c:66:86:a1:aa:5f:24:8a:
                    ab:ea:a2:ee:ba:54:3e:25:a1:f7:db:50:86:e5:cb:
                    c1:57:e1:8e:94:c7:76:8e:ea:c9:72:92:84:09:97:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2C:11:A2:F8:BE:2A:96:7D:09:2C:50:7F:C5:A8:D9:C2:0E:F3:60
            X509v3 Authority Key Identifier:
                keyid:6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32332d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:c7:5c:79:31:04:16:a9:19:da:d8:a6:e0:75:c9:14:ec:
         4e:ce:3f:62:ed:0e:74:e2:fe:5e:82:95:65:44:cc:3e:65:b3:
         f1:8e:7c:7c:21:10:6f:e6:58:17:97:a0:08:dd:41:39:26:1b:
         3f:a0:4a:cf:ef:d3:9f:d2:9c:8d:a8:43:90:10:85:bf:46:ae:
         1b:5c:87:50:e1:c9:fc:b3:2c:e9:d5:94:38:3a:5e:f7:97:42:
         84:fc:8f:47:7c:55:2a:16:f2:e7:2e:50:5b:fd:f3:f0:49:8d:
         1e:06:96:71:58:25:18:46:44:b9:58:e3:df:e8:1e:ef:45:a9:
         d1:d8:ff:d3:6d:dd:0d:8a:5a:41:5e:c4:1b:d2:51:db:96:cb:
         26:b2:80:72:1b:2b:36:4e:4f:08:c1:b3:b3:3b:c1:69:7c:7e:
         7e:56:d8:46:91:27:6d:ca:47:48:d1:b1:97:e5:05:3c:2c:36:
         02:88:02:38:8e:77:b4:22:ca:90:07:3a:35:3b:75:64:e7:5b:
         af:6e:99:aa:6d:e8:a0:44:89:7f:b1:4c:74:86:87:76:fe:66:
         09:b9:d9:64:e6:2b:93:21:e7:8a:71:8e:57:d6:09:df:fc:73:
         67:04:92:ec:c0:ad:24:64:5d:65:ac:9d:bd:b0:fe:7e:24:47:
         55:61:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:50:55 2025 by rpki-client