This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          e4LzIJ7mNEPo8Z4E2D5BNtWUfSHKVbICt2AhQeG9xv4=
Subject key identifier:   87:42:0E:9A:54:AA:63:50:74:AB:1F:9A:88:D9:3E:16:A9:3C:46:93
Certificate issuer:       /CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
Certificate serial:       15C5563F4124E8B82F89CA3FFC0F637397037DDF
Authority key identifier: 6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa
Signing time:             Thu 27 Nov 2025 05:00:00 +0000
ROA not before:           Thu 27 Nov 2025 04:55:00 +0000
ROA not after:            Thu 26 Nov 2026 05:00:00 +0000
asID:                     152017
IP address blocks:        103.255.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl
                          rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 18:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c5:56:3f:41:24:e8:b8:2f:89:ca:3f:fc:0f:63:73:97:03:7d:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Validity
            Not Before: Nov 27 04:55:00 2025 GMT
            Not After : Nov 26 05:00:00 2026 GMT
        Subject: CN=87420E9A54AA635074AB1F9A88D93E16A93C4693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:93:b6:3d:67:55:51:07:3e:ff:c4:74:c3:
                    d8:97:93:6d:f8:f8:d3:1c:41:5d:d8:56:b7:46:58:
                    24:ec:e4:2e:24:56:18:58:53:4e:c4:28:66:6b:84:
                    69:ee:82:68:21:7c:78:8a:e5:9c:98:2d:c5:1b:f2:
                    89:31:18:a0:72:7b:dc:47:43:d8:f9:ea:06:81:98:
                    66:ea:6e:f5:15:72:03:0d:c2:6d:67:e2:9e:6b:37:
                    e5:b1:24:e9:bc:4d:09:6d:45:7a:97:c0:35:1a:dc:
                    2c:f1:c1:dc:c8:83:d7:46:33:ab:5f:a8:be:72:4a:
                    3c:f5:41:0c:b6:fe:f6:25:03:f7:99:c4:45:8a:27:
                    7b:58:02:ba:b4:54:be:06:0c:74:80:ea:22:4f:ad:
                    5a:c1:3f:6a:e6:98:eb:21:89:04:45:80:ad:fa:b6:
                    f0:04:0f:5a:78:b1:91:c8:9b:49:c1:30:4a:a5:07:
                    d3:7b:43:84:32:63:5c:8c:d3:21:c3:6d:ca:ef:61:
                    dc:03:50:62:d7:b0:48:a2:1b:e1:0d:37:3e:53:d1:
                    7a:a5:f3:82:fe:3b:e6:a7:a2:dd:40:0c:da:13:4a:
                    45:ad:63:62:aa:23:c9:65:46:11:54:20:eb:81:9e:
                    64:e5:bb:73:82:b6:02:76:98:f1:fc:33:43:01:24:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:0E:9A:54:AA:63:50:74:AB:1F:9A:88:D9:3E:16:A9:3C:46:93
            X509v3 Authority Key Identifier:
                keyid:6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:78:be:8f:d6:6f:b4:ef:10:e1:6c:4a:92:bc:d0:5c:cc:
         ed:96:dd:52:52:99:35:d5:65:ff:63:37:18:6f:ee:e1:bf:5f:
         b0:c0:ff:89:fc:9b:86:57:da:31:d0:9d:a7:7a:6e:70:d0:1c:
         7b:8e:e0:78:d6:6c:13:ec:42:16:cc:7e:1b:9a:d7:2e:ba:c1:
         39:fa:ba:ed:24:b4:06:16:41:98:6f:0f:90:32:a3:83:7c:7d:
         d0:1c:f1:3b:14:8a:49:3b:a2:2c:06:0a:d0:9c:e4:c4:77:58:
         45:8d:a9:68:c1:df:2d:1d:fe:3e:2d:53:f1:77:1d:a8:b5:40:
         91:27:b8:a7:c7:85:b3:77:38:88:9c:c9:dd:a2:8e:c7:25:26:
         4a:60:14:4f:8c:ad:88:08:fc:4f:e7:c9:fa:4c:e0:ff:4f:95:
         60:3f:72:6b:56:ef:47:1a:6a:35:60:4c:53:b3:d2:85:60:41:
         fe:c4:39:59:66:e7:aa:bf:72:e2:9a:58:be:db:c5:35:c6:7a:
         e9:bf:18:36:c0:58:e4:fe:08:c8:93:27:8c:38:14:02:c4:e9:
         c6:1e:b0:25:67:5a:39:1d:9d:2a:dd:1b:fb:a9:b8:10:cd:83:
         64:6b:7c:d1:55:16:1a:79:c4:fe:55:66:fc:c9:fa:0a:59:67:
         ca:8b:61:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:49:36 2025 by rpki-client