This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa
File:                     3130332e332e34362e302f32342d3234203d3e203536323337.roa (raw, json)
Hash identifier:          oMyB49fjG0qXg06zokEf9C1O9cFBM5Wz4/XD4oP7uLw=
Subject key identifier:   CB:EE:B2:F0:1C:7E:F0:82:08:7E:E3:6D:17:F3:7C:CC:B1:99:36:06
Certificate issuer:       /CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5
Certificate serial:       023C7BDAA0B4DCA09FBA4A5AF0089AB22B11B801
Authority key identifier: 91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa
Signing time:             Tue 02 Dec 2025 09:27:05 +0000
ROA not before:           Tue 02 Dec 2025 09:22:05 +0000
ROA not after:            Tue 01 Dec 2026 09:27:05 +0000
asID:                     56237
IP address blocks:        103.3.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl
                          rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3c:7b:da:a0:b4:dc:a0:9f:ba:4a:5a:f0:08:9a:b2:2b:11:b8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5
        Validity
            Not Before: Dec  2 09:22:05 2025 GMT
            Not After : Dec  1 09:27:05 2026 GMT
        Subject: CN=CBEEB2F01C7EF082087EE36D17F37CCCB1993606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:80:d7:1a:56:17:e3:be:6d:af:2c:95:5f:
                    00:ed:cd:14:47:ea:45:9b:cf:ef:c9:8a:5a:d7:e1:
                    07:a3:e1:1a:ce:b6:fc:83:bd:7a:e4:74:c5:03:79:
                    fe:91:54:df:54:11:d3:ec:ab:da:13:25:9b:58:0b:
                    57:98:3b:d7:e4:5d:ed:c1:d8:30:13:fe:23:e5:44:
                    b9:9d:85:d9:18:0f:49:a1:a8:2e:b2:01:6e:e6:1a:
                    c5:96:9f:4f:9d:9f:fb:18:e4:bd:18:5b:5d:9f:41:
                    7d:74:73:88:78:55:1b:03:07:67:c8:80:b7:bb:e7:
                    f0:c5:ca:b1:ee:87:ba:11:c3:6e:0a:29:7b:b0:9d:
                    96:fd:75:d2:80:f6:ee:44:b0:54:e4:06:03:c1:83:
                    b0:ad:bc:cb:6d:40:dd:35:dc:cf:4b:a6:3b:05:f8:
                    ab:3f:a0:b5:30:fe:0a:25:64:22:b9:3c:0a:ee:df:
                    5c:d6:df:a7:63:2a:8e:11:e5:6d:2f:ed:95:61:73:
                    de:fc:14:62:23:9e:6b:b1:6c:06:39:c1:fa:00:a4:
                    10:f8:78:65:ab:25:04:5d:ae:d4:23:c2:f4:b8:b6:
                    fc:08:92:31:88:43:85:4e:23:62:17:e4:05:fc:8c:
                    99:0d:97:b2:e6:f1:71:51:6a:19:0f:ae:6b:0a:0b:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:B2:F0:1C:7E:F0:82:08:7E:E3:6D:17:F3:7C:CC:B1:99:36:06
            X509v3 Authority Key Identifier:
                keyid:91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/3130332e332e34362e302f32342d3234203d3e203536323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4d:38:c0:19:36:bc:a6:6d:36:aa:65:0b:e9:5e:61:93:84:
         9d:bd:ad:57:5f:8c:00:96:9e:66:03:75:1e:b7:3f:58:53:1e:
         89:8f:b9:f6:c7:74:22:5c:37:22:fc:e2:14:94:80:2d:65:57:
         bc:66:05:5e:f8:e7:6f:99:66:e5:28:78:a6:73:5f:75:27:2e:
         cd:d6:89:47:87:2b:32:9c:88:e2:bb:c4:4b:79:ff:4e:37:ab:
         b9:ec:38:61:c6:ab:fe:27:f6:f1:8d:0e:f0:2c:b0:37:1e:b5:
         c7:1c:fe:2e:0d:d1:65:2b:ee:d7:77:15:8d:5a:cb:08:20:93:
         06:83:f3:42:94:60:a4:d8:21:73:31:fc:34:d8:ee:96:88:05:
         69:a6:65:f9:a2:8b:af:1b:d4:b6:5a:b6:15:1d:db:21:93:d0:
         12:4b:72:79:37:21:71:7a:30:ee:75:92:97:ff:ad:eb:2b:15:
         9c:44:c6:b4:46:ba:29:63:07:1d:73:a8:d3:27:9e:65:5c:ed:
         9f:9b:7b:54:83:15:d8:49:30:5e:2f:84:75:04:c5:70:77:2a:
         07:0f:2a:40:4f:75:b1:10:2f:d5:45:52:fe:0c:d9:a8:ee:f6:
         51:19:b1:09:90:b0:f2:0f:01:81:07:50:d3:d9:fd:7f:31:bd:
         84:01:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:54:14 2025 by rpki-client