This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa
File:                     3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (raw, json)
Hash identifier:          IbLWzBm08AS4RfKW9sTYAdOcxbZNJ6mrAM/VuC4qUdw=
Subject key identifier:   F8:F4:1B:92:60:70:6E:13:A9:05:5C:5D:BC:AD:31:23:7C:A6:61:BF
Certificate issuer:       /CN=6862B9697E607C0C4861E56917A18D87AC33A721
Certificate serial:       2F18A3A14AF5F45746F58395F1085CF9E083C727
Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa
Signing time:             Sun 16 Nov 2025 13:00:00 +0000
ROA not before:           Sun 16 Nov 2025 12:55:00 +0000
ROA not after:            Sun 15 Nov 2026 13:00:00 +0000
asID:                     150504
IP address blocks:        103.60.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
                          rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 14:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:18:a3:a1:4a:f5:f4:57:46:f5:83:95:f1:08:5c:f9:e0:83:c7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721
        Validity
            Not Before: Nov 16 12:55:00 2025 GMT
            Not After : Nov 15 13:00:00 2026 GMT
        Subject: CN=F8F41B9260706E13A9055C5DBCAD31237CA661BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:cb:28:98:54:fd:61:ec:b6:62:b3:04:3a:
                    f0:a9:4b:f2:a3:67:22:43:92:81:ac:d6:66:70:d4:
                    85:6b:bd:57:bd:af:10:f8:4f:d0:34:54:02:34:a8:
                    72:bf:ae:28:2f:46:9b:80:d2:c0:c7:3b:5a:6b:ad:
                    c9:4f:f0:72:4b:3d:c9:a2:95:32:4f:53:98:e1:cb:
                    c9:7b:66:79:f8:a3:43:b5:b8:57:d2:58:db:8e:c0:
                    ca:a6:23:30:18:e8:aa:ea:30:51:2c:bb:b7:93:4c:
                    1a:bb:c1:ef:1c:27:59:98:6b:46:03:fb:1b:10:27:
                    8f:92:7a:e0:fe:0a:e3:90:c8:62:73:12:07:04:77:
                    a1:c4:ee:b1:b7:ac:4d:f5:25:ac:8a:45:93:f4:0d:
                    d9:22:f2:7b:18:89:d0:f5:1e:5d:05:08:81:96:46:
                    26:2f:5f:d0:bd:2e:be:cb:df:56:95:52:d2:24:75:
                    d7:82:6e:06:cb:54:a8:c1:8f:3d:15:4d:9d:7f:ec:
                    ee:b5:a7:2b:5a:6f:84:ad:d5:09:42:b9:44:d6:a5:
                    8b:4a:9e:92:c9:57:4b:d6:0e:ca:0b:30:ae:da:03:
                    4e:7f:91:04:90:04:33:ee:cb:74:f5:32:68:eb:fd:
                    5b:d1:0e:b1:1f:3a:7c:8a:3c:98:67:99:07:e5:8a:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F4:1B:92:60:70:6E:13:A9:05:5C:5D:BC:AD:31:23:7C:A6:61:BF
            X509v3 Authority Key Identifier:
                keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:7e:2a:ff:87:4c:db:57:ad:db:46:23:85:d2:a3:82:8a:42:
         7e:a7:19:8d:ea:e7:8b:8e:c5:e1:7f:dc:d2:a3:a9:1b:1d:2e:
         ac:5e:3f:44:dc:e1:18:83:0d:06:be:07:cb:ba:46:f9:4c:83:
         3b:6b:a0:ae:fd:1e:74:78:3d:e6:7b:e0:0f:44:60:d1:c2:82:
         52:09:21:54:98:0e:a0:8b:fe:00:49:5b:03:a7:30:86:50:22:
         61:ed:d4:f8:76:44:02:58:71:f5:2c:8d:64:ce:f9:96:f1:a6:
         59:66:fe:59:de:7c:e8:4b:ed:29:c1:a2:0c:c7:dc:fd:56:74:
         48:a5:d7:cf:e2:f9:87:54:66:e4:a2:4a:a0:82:36:f1:54:70:
         ca:0e:55:93:58:f3:8a:b9:5b:62:88:07:ed:47:ee:78:e7:00:
         ef:d6:5a:10:24:aa:58:73:d4:3c:02:4a:84:ec:b7:82:b0:8d:
         ef:04:9d:18:94:2a:b8:54:30:3f:38:a2:5e:1e:01:dc:f4:0a:
         fe:b2:2d:c5:f1:ee:f1:b2:a9:c1:3c:4e:95:02:9d:8a:a9:0d:
         bc:8f:6c:fd:86:82:de:51:e0:9e:30:ad:23:a4:11:b1:a3:7b:
         a2:7a:34:73:82:06:08:d3:c4:ac:41:8f:50:bb:99:84:7e:d6:
         0a:ef:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:38 2025 by rpki-client