This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa
File:                     3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa (raw, json)
Hash identifier:          y1b90kaFvQzDW1q+lhO6VHcA60Uf2b/9f97dmB10t3o=
Subject key identifier:   2B:6C:DD:4D:14:53:37:D8:97:67:4D:4B:40:6F:DF:5F:26:93:C1:4B
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       06481B2F5B2EA864B5BA168D3C468026BA887BEB
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa
Signing time:             Wed 10 Dec 2025 18:53:17 +0000
ROA not before:           Wed 10 Dec 2025 18:48:17 +0000
ROA not after:            Wed 09 Dec 2026 18:53:17 +0000
asID:                     154410
IP address blocks:        103.125.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 07:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:48:1b:2f:5b:2e:a8:64:b5:ba:16:8d:3c:46:80:26:ba:88:7b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Dec 10 18:48:17 2025 GMT
            Not After : Dec  9 18:53:17 2026 GMT
        Subject: CN=2B6CDD4D145337D897674D4B406FDF5F2693C14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:d2:93:34:da:1e:f4:e1:cf:5a:6e:f1:cc:
                    43:00:5f:13:e0:50:22:4e:fa:aa:a9:a1:c5:ba:d1:
                    41:2d:b2:57:4b:7f:76:1f:a5:9f:90:05:83:0f:5c:
                    c0:03:70:6c:c0:0e:87:b7:07:1a:6f:d8:96:2f:3d:
                    8a:7c:89:9f:35:88:44:f9:9f:dd:66:6c:7d:4e:c2:
                    fa:99:72:95:d5:97:40:bd:11:1c:c4:30:10:d0:45:
                    83:82:db:12:93:50:3e:c7:7a:d5:2c:fe:c2:01:a1:
                    81:5e:5d:10:58:a9:51:eb:0d:50:bb:27:4c:5a:9e:
                    28:52:f8:3e:f4:a2:81:41:ee:ab:8e:73:4c:72:28:
                    96:84:84:0c:b0:0f:1d:e5:1f:cd:8d:7d:c8:1e:00:
                    58:4d:fe:74:7f:65:73:45:fa:e2:6e:e4:d4:e0:89:
                    16:de:07:dc:52:8e:86:35:a8:ff:9b:5b:c2:9e:2c:
                    76:95:b6:f0:f6:86:7a:61:43:cd:ce:e6:0d:cd:c3:
                    75:9a:18:13:81:c5:12:de:98:11:c6:92:42:27:df:
                    2f:00:d9:d7:5f:48:6e:04:ad:be:ae:86:3d:09:0b:
                    f9:18:79:11:31:e6:72:23:60:7b:5f:98:ce:56:c7:
                    18:4c:cd:df:88:f4:1d:9a:8c:ac:4d:11:65:ce:a9:
                    50:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:DD:4D:14:53:37:D8:97:67:4D:4B:40:6F:DF:5F:26:93:C1:4B
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:41:9f:5d:38:4e:71:d7:47:5b:c6:e8:73:ce:93:a7:74:4b:
         bc:31:c9:e4:e9:5c:3e:9d:7b:1a:44:9d:90:47:d3:34:ab:15:
         f9:b0:34:06:6d:b3:18:66:10:83:c0:5c:b0:a1:10:df:e8:a5:
         1a:5a:f0:18:52:71:22:64:33:89:01:33:16:98:3f:be:9f:2c:
         97:0d:03:ae:33:26:89:46:9c:85:47:83:ec:d8:23:8c:ae:84:
         17:9a:09:e7:86:4a:27:b1:97:c7:74:a6:9f:19:6c:72:54:a1:
         35:35:d9:22:b4:58:59:a6:5c:88:ed:92:25:22:d8:97:2c:5f:
         04:9d:a4:d8:e6:d2:2d:c0:e6:26:73:4a:92:5d:75:dd:99:7b:
         db:a8:00:86:58:18:b2:29:76:b6:e0:7c:5c:32:7e:72:77:6f:
         57:47:e2:ef:9d:a3:ab:0c:46:94:19:f4:be:7d:e9:a4:bc:16:
         9a:a2:60:67:84:07:91:2e:a1:fe:9a:ea:21:5f:0d:ad:48:e1:
         59:4c:c0:46:81:70:a6:96:88:ad:04:da:ef:6c:8b:e2:c7:b6:
         38:5c:ca:4e:29:87:a7:e3:0c:ba:d3:a8:82:44:64:7f:87:d8:
         9c:47:b5:10:e9:cf:fb:43:72:2e:cb:9b:ab:a3:06:4c:49:a8:
         ac:38:1b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 05:14:07 2025 by rpki-client