This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          YYTZNty3sg6WbwJZplWjBQqyNGraOYIziE5EjfxvIWA=
Subject key identifier:   76:63:FB:83:6C:C5:17:C2:C7:E7:E7:5F:DB:8E:EA:14:B3:1A:B0:FF
Certificate issuer:       /CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
Certificate serial:       0980C2BBD1915D4416A9426EA6E73FEACA6334FA
Authority key identifier: FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 07:02:28 +0000
ROA not before:           Wed 05 Nov 2025 06:57:28 +0000
ROA not after:            Wed 04 Nov 2026 07:02:28 +0000
asID:                     135478
IP address blocks:        103.121.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl
                          rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:80:c2:bb:d1:91:5d:44:16:a9:42:6e:a6:e7:3f:ea:ca:63:34:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF75AEDDC6059E8A2B830E487D72BE77E330BEEF
        Validity
            Not Before: Nov  5 06:57:28 2025 GMT
            Not After : Nov  4 07:02:28 2026 GMT
        Subject: CN=7663FB836CC517C2C7E7E75FDB8EEA14B31AB0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:26:5c:fe:de:c2:50:49:78:a4:53:cc:01:
                    eb:85:f5:d1:ec:91:87:ba:9d:d3:c9:b3:cf:5f:ab:
                    ac:96:fb:44:6d:fb:38:ef:a4:8f:6c:82:9c:19:41:
                    13:7f:52:40:de:0b:3a:82:2e:e3:0b:14:e6:74:c6:
                    b8:3f:9c:a0:58:9a:74:1e:37:d9:20:60:2a:f9:5d:
                    9e:d3:cb:26:26:8b:88:80:32:cb:56:c3:ef:0c:b1:
                    30:52:bf:94:db:9f:d5:d5:09:c3:6f:04:24:4d:24:
                    96:73:19:94:d9:10:e4:89:a8:f8:4b:fe:34:c3:33:
                    0b:13:7e:72:e1:5d:fb:1e:a6:c8:f7:3b:a3:35:f9:
                    7d:b8:91:f1:ca:c2:d8:86:4f:46:cd:30:f4:5d:87:
                    0c:b2:20:86:da:e3:98:09:df:34:f8:02:31:a2:ac:
                    8c:2f:02:54:06:7f:ad:5f:45:fb:b8:0e:40:97:ef:
                    62:e4:8d:1f:d2:a2:6f:af:7e:67:3d:99:21:d9:34:
                    53:9f:e7:5c:bc:8c:b8:3b:bf:81:56:15:4b:04:0d:
                    4d:90:f6:4e:4e:d9:77:df:49:18:51:6b:5e:8c:f3:
                    a1:e6:66:f3:10:db:01:a2:8a:13:9c:37:d8:5c:30:
                    96:b4:4b:f5:e2:86:f8:ef:48:c9:76:d8:fe:1b:d7:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:FB:83:6C:C5:17:C2:C7:E7:E7:5F:DB:8E:EA:14:B3:1A:B0:FF
            X509v3 Authority Key Identifier:
                keyid:FF:75:AE:DD:C6:05:9E:8A:2B:83:0E:48:7D:72:BE:77:E3:30:BE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF75AEDDC6059E8A2B830E487D72BE77E330BEEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3784fe-f9fe-4cbe-8768-263a76986a3a/0/3130332e3132312e3133342e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:40:b8:9e:e9:07:c7:2e:ec:00:2f:67:8a:a7:74:5f:7a:
         b2:cf:92:a9:20:b0:3c:81:26:73:e8:1e:c5:6f:1c:ea:67:5a:
         43:d4:e3:af:60:f6:1e:37:b0:96:7c:81:43:16:e2:83:62:32:
         3f:dd:bf:f6:28:52:d4:af:c8:8d:f0:c3:16:90:43:b2:e4:52:
         05:cc:f4:cb:a0:0b:dc:db:c8:76:d9:69:cd:ca:36:14:b3:8f:
         63:af:9d:74:ce:01:14:83:84:a8:e6:44:fc:57:ab:3c:58:ad:
         33:e4:32:17:fa:3e:61:a9:60:2a:10:98:33:3a:f2:04:68:e6:
         03:3e:03:a9:a4:f3:91:5b:72:69:09:1e:c6:97:1f:40:44:ff:
         6b:e3:c0:d4:8b:b1:0c:69:70:1b:ee:5a:a4:fe:70:f6:7a:45:
         17:29:ec:94:f8:03:ca:9e:9b:b2:6c:d6:33:cf:3a:d3:99:3d:
         22:be:52:bd:eb:16:81:ba:6a:73:3b:e8:c3:c1:58:ba:54:57:
         2f:fe:49:fd:eb:6d:b1:28:59:34:66:9a:42:4d:e6:da:76:dc:
         24:a6:46:d8:a1:d9:b9:97:c0:66:5e:a2:73:ff:6b:ee:8b:54:
         46:47:a8:03:a1:17:3c:08:19:28:0c:d1:00:5f:92:6a:2c:c2:
         94:51:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:30 2025 by rpki-client