This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
File:                     3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (raw, json)
Hash identifier:          SPILoD0YuDgHkCG/UcROiBKV6NuzifUgiPor6w8kdtI=
Subject key identifier:   12:60:BD:EE:B1:50:29:CD:38:33:98:4E:5C:19:49:78:A3:ED:8A:61
Certificate issuer:       /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial:       7CFE3F94FC2E968F8AB56EF3B8279CBFA289783F
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
Signing time:             Mon 17 Nov 2025 22:00:01 +0000
ROA not before:           Mon 17 Nov 2025 21:55:01 +0000
ROA not after:            Mon 16 Nov 2026 22:00:01 +0000
asID:                     147170
IP address blocks:        103.178.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
                          rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 19:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fe:3f:94:fc:2e:96:8f:8a:b5:6e:f3:b8:27:9c:bf:a2:89:78:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
        Validity
            Not Before: Nov 17 21:55:01 2025 GMT
            Not After : Nov 16 22:00:01 2026 GMT
        Subject: CN=1260BDEEB15029CD3833984E5C194978A3ED8A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:70:f7:19:6c:9e:da:9e:14:7e:fd:a9:88:
                    a7:7d:8c:ae:43:6c:a0:de:f4:a7:f3:55:6b:b5:9a:
                    db:3f:30:e9:f1:a6:58:5b:bf:a6:89:62:6b:7e:08:
                    da:44:ed:95:25:c2:00:92:d1:c4:7e:3f:a5:47:18:
                    5d:2a:57:96:e9:8c:72:49:7a:f9:01:c4:d8:65:bf:
                    2a:75:a5:49:cf:d4:01:27:90:46:c0:0a:ed:5a:1e:
                    c2:88:16:f4:4d:a8:28:98:95:76:41:ce:14:06:a4:
                    c9:fd:78:a5:32:19:a1:38:b5:d0:12:34:98:4e:46:
                    94:06:3b:87:53:2e:94:8b:db:a4:6a:23:80:6f:83:
                    0a:9b:42:77:07:e3:0f:04:48:3d:de:46:ff:02:ec:
                    2b:6d:c8:84:da:69:06:28:76:ce:4d:cd:96:a0:3e:
                    1f:77:40:b1:c7:84:c3:cc:13:16:dd:1b:87:2d:ab:
                    a8:40:34:75:04:80:5f:89:6c:b1:42:7f:5d:b6:18:
                    69:64:ca:57:4a:b3:12:d4:33:34:42:5c:90:4b:00:
                    94:34:8d:4d:5a:8f:96:99:fe:bf:79:fc:3f:05:50:
                    c4:40:54:bd:8b:f3:50:91:12:87:d3:10:ba:57:f0:
                    b9:23:ed:e9:c1:e7:a0:30:f6:39:a1:b3:01:50:04:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:60:BD:EE:B1:50:29:CD:38:33:98:4E:5C:19:49:78:A3:ED:8A:61
            X509v3 Authority Key Identifier:
                keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:e7:16:8c:49:ba:d0:9f:f5:3d:7f:1c:3f:52:26:0d:eb:
         38:a5:85:ce:24:98:c3:e0:1a:78:e9:d6:29:1a:82:98:fd:00:
         fc:b3:a3:ba:bc:ee:a9:63:e9:04:21:82:f9:d2:31:23:8d:49:
         f5:ae:66:7a:17:da:6b:f5:5e:7e:70:93:fb:80:a2:a7:7e:39:
         ba:a9:b0:3b:3e:2b:88:0f:6c:03:c3:1f:0d:e8:e1:94:1e:eb:
         c9:72:16:9f:2b:81:df:77:60:4d:d1:99:01:43:28:f3:ef:4b:
         6d:14:15:d1:c1:1f:ba:de:a1:d1:5c:9f:24:ab:a3:c6:67:46:
         c6:39:5a:b8:cf:51:58:44:aa:9a:a7:35:28:34:fd:a3:d5:a7:
         5d:cd:71:db:ba:75:22:99:f2:c1:0d:3a:34:8d:f3:f1:bc:2f:
         02:2d:d6:fe:e0:cf:82:b7:15:f8:12:01:fc:97:66:2b:6f:89:
         fe:c2:91:f4:0e:ef:ce:60:9d:93:40:e7:87:3f:eb:a2:9f:11:
         89:eb:01:b1:de:b0:a1:5b:d3:c9:49:0e:90:79:97:fb:b1:9f:
         45:ae:c4:4b:eb:b3:d3:fa:48:25:47:85:f3:7b:ee:18:e4:4e:
         9b:2f:fd:e4:74:07:bf:95:d1:9d:48:79:f8:c9:da:7d:1c:5f:
         6a:a8:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:11:36 2025 by rpki-client