This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa
File:                     3130332e31382e32382e302f32322d3234203d3e20313339393338.roa (raw, json)
Hash identifier:          ucnqUA3ytkqy/KZQsVBDn5h+vw9Xea+SBX0gdpwdSiI=
Subject key identifier:   C4:5B:57:62:FE:6B:4B:33:A0:AF:C0:0D:38:1D:9D:20:19:6F:B4:72
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       6FA898CB19EDFCF7473061F2F38C1933AB5EC4BE
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa
Signing time:             Wed 05 Nov 2025 05:00:03 +0000
ROA not before:           Wed 05 Nov 2025 04:55:03 +0000
ROA not after:            Wed 04 Nov 2026 05:00:03 +0000
asID:                     139938
IP address blocks:        103.18.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 23:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:98:cb:19:ed:fc:f7:47:30:61:f2:f3:8c:19:33:ab:5e:c4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Nov  5 04:55:03 2025 GMT
            Not After : Nov  4 05:00:03 2026 GMT
        Subject: CN=C45B5762FE6B4B33A0AFC00D381D9D20196FB472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:c6:6e:f9:c5:f1:52:c4:dd:70:37:9c:b6:
                    2c:db:b6:c8:7d:4a:4d:75:61:76:02:7e:62:19:d3:
                    f6:74:59:73:b2:ca:77:c0:88:d2:a5:96:7d:8d:63:
                    36:bf:b2:d6:1b:01:eb:da:cd:d3:b2:66:61:1a:fd:
                    4b:44:d8:72:e9:ce:df:91:a6:31:c0:32:a4:c2:1a:
                    36:60:29:b1:ce:32:3b:17:1b:d2:61:92:e6:c8:85:
                    9b:46:6e:2f:5c:74:1f:c5:66:74:a4:09:19:de:3a:
                    da:8b:c1:c4:0f:07:e9:89:73:35:ab:4d:12:e6:4e:
                    f5:4f:c9:4b:90:e4:a0:5c:51:dd:46:e7:57:50:f3:
                    17:04:ab:46:2d:2b:97:9a:d2:4d:31:cd:33:05:4b:
                    89:c9:df:a3:4d:a1:10:1b:2f:08:3f:dd:9d:31:c5:
                    26:35:fb:2d:42:02:96:89:c5:39:c2:c9:bd:50:3b:
                    65:58:b1:62:39:7d:eb:db:f6:fb:73:ef:91:21:f0:
                    81:ee:79:f8:62:59:d6:15:6f:6a:5a:c9:cc:66:6b:
                    c6:fd:8e:1f:01:c5:cf:10:7b:51:67:61:a7:75:51:
                    06:0a:eb:db:c0:2b:68:89:13:f1:6c:4b:48:4f:7a:
                    a5:16:8c:4e:e1:2b:ff:9e:e4:42:db:46:ab:85:d7:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:57:62:FE:6B:4B:33:A0:AF:C0:0D:38:1D:9D:20:19:6F:B4:72
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e20313339393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:79:63:c6:09:01:22:eb:b2:33:03:9f:0d:68:0c:7f:86:
         99:c1:cd:14:1b:56:28:97:30:b0:1f:26:ed:b0:12:3d:70:3c:
         b1:a3:e5:70:f7:0b:86:88:84:c1:bf:a9:1a:94:8c:ec:df:99:
         e8:e9:d5:3f:39:45:bb:fd:30:c1:42:86:0d:1c:a1:26:a9:56:
         62:5f:00:06:68:b0:ff:5b:99:cd:02:04:f6:3d:b7:e4:84:a6:
         02:a2:51:f9:ba:75:5b:db:07:f8:e4:a2:90:49:27:24:bf:a8:
         18:74:f7:7f:a1:23:ea:70:75:f2:f2:8d:71:4e:7f:06:a1:1e:
         ef:21:43:67:23:8b:c4:b2:00:b4:87:53:61:ef:a4:90:e8:ba:
         35:b3:e8:fc:2d:71:6e:2b:af:75:42:74:aa:1e:8e:1e:ee:a6:
         ce:b1:45:3a:04:e9:fa:69:1e:5b:9b:54:13:b8:d4:c6:47:35:
         99:63:4b:c9:19:d3:c7:22:31:ae:02:a6:5a:3f:e7:b9:da:e5:
         01:de:46:22:17:84:f6:b3:96:4e:6c:ae:48:3c:68:b8:99:9a:
         1b:90:00:31:56:a7:95:76:f1:03:86:9a:a2:fa:8e:37:4e:21:
         86:2c:a2:e8:84:3a:27:98:31:9c:8d:c6:f9:81:44:51:59:86:
         55:3e:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:04 2025 by rpki-client