This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          ah6jjuDsScnETUKRuJMdbV7gAyHOG7vH/cUJcAPOG7U=
Subject key identifier:   50:68:D2:17:9D:0A:71:E7:A9:21:14:4D:C0:E4:13:6A:C5:9D:1E:55
Certificate issuer:       /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Certificate serial:       7F5FB226CDE06A357BB5E56780AEEE9038DE55E0
Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 10:03:03 +0000
ROA not before:           Wed 05 Nov 2025 09:58:03 +0000
ROA not after:            Wed 04 Nov 2026 10:03:03 +0000
asID:                     135478
IP address blocks:        103.121.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
                          rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5f:b2:26:cd:e0:6a:35:7b:b5:e5:67:80:ae:ee:90:38:de:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
        Validity
            Not Before: Nov  5 09:58:03 2025 GMT
            Not After : Nov  4 10:03:03 2026 GMT
        Subject: CN=5068D2179D0A71E7A921144DC0E4136AC59D1E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:ab:cc:c8:5d:61:80:15:6c:ec:36:2d:47:
                    2b:ea:90:d6:05:ea:e4:9e:c0:0c:9a:97:af:a8:2d:
                    4f:a5:ae:c4:e2:9f:d6:d6:21:fe:34:92:2c:e9:e3:
                    08:6e:dd:cf:b3:5b:63:21:34:64:9c:e2:25:32:3f:
                    98:02:16:25:80:5b:0b:bd:8a:2a:30:8f:b7:f6:e3:
                    7a:59:97:9b:6b:92:04:a6:07:f5:b0:1b:8d:6f:0c:
                    50:de:df:54:0a:89:0c:70:c8:c1:9c:45:8b:8c:ad:
                    1e:13:6e:d2:72:b8:0e:a6:7d:4e:70:16:78:73:cd:
                    cf:d1:84:51:c0:98:47:ba:03:5a:54:db:a9:06:f6:
                    15:1c:62:f3:1e:4d:fd:8c:4d:dc:d3:cb:93:53:33:
                    3a:f8:b6:f8:6c:0c:77:86:9e:36:f1:8e:fa:3a:67:
                    33:d3:df:52:ab:14:82:67:84:9d:b2:ae:7d:0c:0b:
                    6a:ef:53:a2:cf:b2:8d:74:4c:65:29:0e:84:9b:64:
                    55:6d:c6:a1:1d:76:75:af:9a:df:31:70:f6:04:7d:
                    f2:82:b4:7c:22:85:c7:93:9d:75:73:e1:ee:0c:cb:
                    06:a7:aa:8c:e0:e9:59:8f:69:a9:2e:1e:58:59:ac:
                    c2:59:fe:fb:92:ec:7c:f0:f1:6d:6d:6e:1d:88:40:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:D2:17:9D:0A:71:E7:A9:21:14:4D:C0:E4:13:6A:C5:9D:1E:55
            X509v3 Authority Key Identifier:
                keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:a6:54:cd:dc:1b:e9:eb:69:55:be:c1:a5:06:45:fa:48:80:
         c2:49:25:70:a5:b0:07:ba:a2:97:76:fb:8e:4b:ea:34:ac:50:
         f8:af:c2:0f:57:b2:54:38:42:36:a1:41:6a:b1:e2:24:5a:fd:
         68:c5:ac:39:99:71:54:15:2d:99:19:a2:76:8b:f8:3f:f2:1b:
         cd:97:a9:04:a9:77:e6:c6:84:97:25:1e:25:3b:c7:97:8b:93:
         1d:32:03:d7:e3:4c:09:44:14:58:d1:12:62:38:1d:a3:b3:90:
         d3:06:d1:a9:1d:49:05:45:5e:fe:72:6d:7a:87:81:7a:c7:9b:
         f3:b5:15:09:5c:b7:54:75:4a:56:31:14:d4:ea:a2:67:86:da:
         0e:7c:9f:4b:5f:95:81:5f:c3:36:01:86:ac:d1:5e:8c:e6:ab:
         70:f1:c8:75:8a:82:2c:b1:7e:19:ec:26:2e:8b:39:05:68:9d:
         29:d1:72:d2:8d:7d:d9:67:6f:ad:e8:36:5e:c4:8b:36:73:9b:
         11:56:17:02:07:29:cc:ba:f6:56:df:c6:bb:a3:e8:72:78:4b:
         79:19:b4:8b:b7:ab:31:8b:0a:4c:00:e3:37:4c:9f:42:3b:99:
         84:af:ed:91:8c:40:54:11:32:9a:09:e6:1f:72:9d:7f:b6:37:
         18:64:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:54 2025 by rpki-client