This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa
File:                     3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (raw, json)
Hash identifier:          UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=
Subject key identifier:   94:00:34:16:3F:E4:53:1E:42:FE:14:0D:FF:A9:98:12:0B:EB:90:98
Certificate issuer:       /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
Certificate serial:       30AFA662FABC88A389A6E92AEAB0E804849FE848
Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa
Signing time:             Fri 14 Nov 2025 03:03:34 +0000
ROA not before:           Fri 14 Nov 2025 02:58:34 +0000
ROA not after:            Fri 13 Nov 2026 03:03:34 +0000
asID:                     142321
IP address blocks:        103.168.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl
                          rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Dec 2025 23:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:af:a6:62:fa:bc:88:a3:89:a6:e9:2a:ea:b0:e8:04:84:9f:e8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1
        Validity
            Not Before: Nov 14 02:58:34 2025 GMT
            Not After : Nov 13 03:03:34 2026 GMT
        Subject: CN=940034163FE4531E42FE140DFFA998120BEB9098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:a4:8e:2d:84:6c:50:cb:fa:65:78:e1:1e:
                    54:24:61:d9:d4:94:7f:8e:1a:37:e9:5a:82:6c:cc:
                    d6:30:7a:dd:60:7b:4c:b6:44:b8:81:42:de:68:71:
                    13:d8:d5:9f:53:d0:cb:c4:8d:2f:c7:00:1e:2b:05:
                    9f:9a:4b:27:47:53:a0:19:48:4d:b3:97:78:11:42:
                    bb:01:d1:c8:c0:84:f1:61:92:57:df:b5:3b:0a:cf:
                    2a:71:b1:8c:29:12:22:79:2d:7c:2e:0f:86:ec:10:
                    3d:49:a5:b9:70:eb:92:eb:99:f0:29:b9:c2:e2:ee:
                    1b:85:ed:7e:18:5a:b7:13:da:4c:4e:52:82:86:8f:
                    1a:17:80:85:1d:ae:31:dd:5f:0e:08:7b:d4:09:da:
                    39:e0:8b:35:52:04:d4:11:b3:c0:20:be:ae:81:81:
                    c9:b0:09:b6:4f:55:58:8a:0a:65:76:07:7d:14:95:
                    15:ba:a5:a3:cf:97:d3:e4:b5:70:eb:ab:d3:f9:09:
                    1c:6f:48:4f:28:45:0e:e9:98:b6:6d:2a:6a:07:15:
                    9f:64:ca:64:64:3b:f3:8c:ed:13:52:cb:0a:c3:65:
                    11:fb:24:a1:22:ea:09:73:2e:dc:bf:07:36:2b:84:
                    20:37:e1:a8:00:ec:50:52:63:d6:fa:0d:63:0a:8a:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:00:34:16:3F:E4:53:1E:42:FE:14:0D:FF:A9:98:12:0B:EB:90:98
            X509v3 Authority Key Identifier:
                keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:0d:20:69:5c:f3:8c:d8:27:fa:e8:f6:42:34:f8:0b:6b:
         20:14:6c:1d:03:f2:8f:3f:c7:2f:68:15:a1:df:ac:12:56:66:
         38:17:17:26:4c:6c:18:4c:9b:f2:a5:06:5c:c2:9d:07:2d:93:
         e8:83:50:f3:63:75:de:67:a4:f3:a5:35:88:87:7c:32:76:d4:
         d4:92:69:c8:58:b5:62:e2:dd:62:e4:88:6e:4b:7b:cd:87:d5:
         63:1b:67:dc:38:84:7f:80:89:5b:61:63:64:10:da:f3:84:3b:
         de:a9:50:4a:22:80:12:72:db:05:e2:fe:29:93:d8:f5:4f:ed:
         cd:10:34:c3:91:52:dd:01:4a:5d:70:36:76:76:c8:53:4b:71:
         b7:2b:a6:0c:cc:e0:3b:f0:c0:af:48:c0:64:29:38:81:f9:32:
         5d:7b:d5:dc:cb:60:64:9b:9e:2f:a2:18:60:3b:99:87:62:4e:
         15:6e:3b:bc:30:fb:d5:9a:60:18:7d:30:f1:59:e2:a9:43:3f:
         36:65:6a:ef:e5:f1:b1:07:77:57:06:60:a0:34:26:c7:80:2d:
         d3:0a:87:14:0c:37:61:1f:40:c8:4d:27:07:05:18:a0:01:df:
         65:be:52:dd:32:c3:56:0d:fd:a1:70:2e:be:d1:44:29:ec:26:
         0c:f6:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:25:48 2025 by rpki-client