This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=
Subject key identifier:   36:15:A2:C0:5A:08:C0:CE:7B:94:AE:C7:9A:C0:89:DF:D2:58:D2:2B
Certificate issuer:       /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
Certificate serial:       53D11C83C10AF645099EB5874204525C0722A025
Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 10:03:03 +0000
ROA not before:           Wed 05 Nov 2025 09:58:03 +0000
ROA not after:            Wed 04 Nov 2026 10:03:03 +0000
asID:                     135478
IP address blocks:        103.121.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl
                          rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d1:1c:83:c1:0a:f6:45:09:9e:b5:87:42:04:52:5c:07:22:a0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8
        Validity
            Not Before: Nov  5 09:58:03 2025 GMT
            Not After : Nov  4 10:03:03 2026 GMT
        Subject: CN=3615A2C05A08C0CE7B94AEC79AC089DFD258D22B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0d:e4:a8:52:9e:ed:47:0a:e0:ec:71:0b:c9:
                    66:03:08:da:85:2c:5e:6c:7c:d2:e7:4e:b3:54:83:
                    eb:24:1f:c0:0c:01:31:9a:49:d8:34:23:6b:b6:6a:
                    5b:e8:d2:64:3d:6b:07:83:38:07:24:c1:86:26:40:
                    b9:aa:02:cf:e0:9a:04:69:18:2a:95:fe:c8:8a:1e:
                    b1:25:95:7a:52:6d:a6:14:3e:20:db:3c:3e:3a:be:
                    28:a1:33:74:36:0d:7c:f1:12:57:05:8c:f2:f0:21:
                    2d:05:ee:b5:c4:fa:87:94:83:f5:2b:f8:e4:45:40:
                    43:9b:41:ed:90:f7:81:74:02:2a:25:f1:ce:0e:0b:
                    d1:7c:34:b7:47:4f:ff:21:e8:57:fe:91:a0:be:47:
                    6b:90:ac:3c:67:51:0a:94:44:58:b0:00:22:96:e0:
                    ce:52:f1:59:0d:c3:2a:c0:08:ef:41:12:cf:e6:3e:
                    48:58:49:92:5a:f9:15:2b:77:07:ba:7c:5a:bf:f4:
                    35:66:28:51:1a:02:7c:c1:c8:90:ae:3c:5e:9f:f2:
                    9f:64:ff:f2:b7:5a:12:a0:af:45:7e:d7:e2:d6:ff:
                    bb:25:98:6f:26:0b:3e:12:93:44:30:0b:90:56:13:
                    5f:f0:43:4f:70:0b:77:e7:2c:4b:64:00:01:96:b0:
                    e0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:15:A2:C0:5A:08:C0:CE:7B:94:AE:C7:9A:C0:89:DF:D2:58:D2:2B
            X509v3 Authority Key Identifier:
                keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:46:ce:9b:70:3e:e1:b7:6f:29:65:97:4e:ab:3e:47:18:
         ab:fc:76:48:37:0d:2f:5a:79:9a:1e:ce:e2:7e:10:55:ff:6e:
         a0:cc:00:4d:84:d2:4a:fb:9e:cf:0c:ee:b3:84:60:e7:5b:51:
         93:5f:8d:f0:3f:05:2c:81:a7:6b:07:86:0f:9f:ad:1b:8b:27:
         68:d9:7d:8f:98:3a:77:8d:06:c7:d4:bf:55:7c:07:c7:01:c6:
         30:eb:dc:b1:45:8a:43:ad:47:0b:70:08:b8:ee:4d:e6:e4:5a:
         98:e3:65:0f:2f:b7:31:a4:d7:76:b5:6a:a4:3f:d1:9b:0c:37:
         50:5e:24:59:56:78:dd:5e:21:97:3c:2c:9f:f6:08:46:f0:6a:
         ef:21:29:b8:e8:30:75:8e:a1:20:88:dc:42:0b:8f:d2:d3:08:
         23:de:17:b4:0c:06:b9:2f:34:06:75:09:f7:26:8e:3a:0d:ab:
         cc:6d:92:0f:a4:8a:aa:67:f5:7c:c1:8a:d2:6f:d3:aa:a5:c4:
         50:b3:5b:c0:d4:8f:50:21:d8:b4:e9:0d:ad:e3:11:6b:ab:60:
         cd:e2:d2:70:4f:a6:83:f4:11:bf:64:d7:74:7d:85:8b:a9:49:
         91:a7:66:e4:8d:94:86:d1:b9:ca:9d:eb:ed:40:b8:5e:b3:46:
         33:cd:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:53 2025 by rpki-client