This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
File:                     3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          LfUE4rPNFz/aR5lxsCZpCHmmGGAgXk5P43w+IeyGgRE=
Subject key identifier:   7B:CA:9E:0E:60:D2:A0:88:08:6B:21:5A:29:AF:A7:D9:CE:A8:E3:1C
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       7CD9B8192114DE29B0D823280EFD86C6DA2ADB14
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
Signing time:             Wed 19 Nov 2025 04:00:02 +0000
ROA not before:           Wed 19 Nov 2025 03:55:02 +0000
ROA not after:            Wed 18 Nov 2026 04:00:02 +0000
asID:                     141630
IP address blocks:        103.60.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 21:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d9:b8:19:21:14:de:29:b0:d8:23:28:0e:fd:86:c6:da:2a:db:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Nov 19 03:55:02 2025 GMT
            Not After : Nov 18 04:00:02 2026 GMT
        Subject: CN=7BCA9E0E60D2A088086B215A29AFA7D9CEA8E31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b8:90:d9:a1:e7:67:99:3e:f8:5f:45:f4:10:
                    71:13:0c:e5:c9:bb:66:1e:34:74:88:02:ce:bf:8c:
                    84:ed:9b:61:77:20:c8:81:ac:1c:7d:c7:48:39:6f:
                    6c:06:0d:ca:e4:23:f5:3b:e5:1d:92:7a:84:be:34:
                    59:cd:98:07:7d:38:71:29:a5:85:d9:16:9b:17:ca:
                    a5:a9:ac:49:16:e9:81:82:d7:dd:f4:7d:d0:b0:12:
                    78:19:a8:30:26:48:ae:4e:ed:c8:23:7f:5d:40:ab:
                    56:bf:40:23:a5:b4:a2:74:a1:a9:e9:65:f3:1e:bc:
                    c7:14:f5:4a:b8:e8:02:86:69:26:92:2c:10:01:c1:
                    51:04:9a:ca:e9:ba:9d:68:36:0b:2a:6e:70:e8:5f:
                    b8:26:cb:d1:51:df:58:b4:b4:a6:24:58:cd:23:37:
                    3b:1f:62:fd:24:63:0f:79:a4:db:29:bb:8a:c2:77:
                    70:c1:f1:d3:9e:ff:93:ca:a1:a2:e8:51:7e:02:fc:
                    07:5b:56:cf:dd:31:4e:92:96:8d:1d:8f:7f:3d:26:
                    40:1e:a5:f5:3e:e8:2f:ee:b6:2e:fe:36:29:c2:a9:
                    77:bc:d8:75:1d:75:07:e0:cc:c1:78:68:d9:00:18:
                    4b:64:a3:bc:38:79:a5:eb:c6:90:f8:c9:c3:2a:13:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CA:9E:0E:60:D2:A0:88:08:6B:21:5A:29:AF:A7:D9:CE:A8:E3:1C
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:a8:7a:0a:3e:1d:d0:df:05:1d:ee:18:c0:11:5d:ca:98:
         0f:ba:1f:f4:9f:25:b3:17:ce:d7:4b:89:50:ee:90:43:b6:46:
         15:d1:1e:7d:8b:a9:a1:f7:dc:f7:30:4a:b5:ea:26:42:ab:ca:
         88:8d:38:65:17:16:6b:1c:1f:a2:4b:63:69:0e:6c:a6:44:e1:
         c4:f0:2d:40:e1:b4:11:df:c8:0c:89:ce:7e:23:26:b8:58:10:
         f8:74:4d:26:06:8c:f9:62:e5:81:82:ef:72:de:ea:e6:df:b6:
         dc:92:d0:9a:c0:04:e1:ce:db:c2:8d:22:53:f4:55:3e:8c:32:
         76:b9:8c:20:2d:40:d1:17:db:ab:b0:b0:cc:75:89:17:71:fb:
         f0:30:4e:23:d6:65:f0:ab:03:6a:7d:2c:ee:74:bf:8b:6e:b0:
         13:b4:99:04:6b:c8:44:be:93:91:16:ef:9a:59:c2:59:05:8c:
         da:99:08:0d:70:ae:0a:0c:90:7d:bc:85:8e:c1:8f:12:a1:4a:
         c4:1c:95:0a:33:51:44:ae:b8:34:3b:27:b0:bc:58:03:01:f6:
         51:3e:94:07:ae:30:ef:b2:63:5c:c0:60:55:89:4b:d9:d7:26:
         23:dc:91:cc:2a:87:00:b1:3e:da:43:18:9b:6a:39:86:24:15:
         7b:57:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:58 2025 by rpki-client