This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          Ov8NRVnVqFMBFhQjGCU710LWI7k2FUziabpa7227XyA=
Subject key identifier:   0D:CD:F7:3B:65:B1:77:F0:DE:2C:CF:FF:3C:A4:14:AD:5F:F3:1E:DD
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       1B0FD96406A68468D565179E831B2DC8EB8F610C
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 14 Dec 2025 09:00:02 +0000
ROA not before:           Sun 14 Dec 2025 08:55:02 +0000
ROA not after:            Sun 13 Dec 2026 09:00:02 +0000
asID:                     9341
IP address blocks:        103.179.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
                          rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 08:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0f:d9:64:06:a6:84:68:d5:65:17:9e:83:1b:2d:c8:eb:8f:61:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Dec 14 08:55:02 2025 GMT
            Not After : Dec 13 09:00:02 2026 GMT
        Subject: CN=0DCDF73B65B177F0DE2CCFFF3CA414AD5FF31EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:27:c3:e4:71:fa:b5:3d:5f:90:a6:1a:50:
                    30:4a:f6:8e:43:34:08:55:e8:72:bb:d5:3d:a2:91:
                    58:dd:d1:bd:22:c2:c4:29:46:20:a3:a1:db:cf:ff:
                    70:6c:48:b3:ec:6d:46:6b:ab:d0:a7:61:f4:9d:8a:
                    13:08:1a:a4:cb:20:e3:1d:d7:1d:96:ed:97:3e:60:
                    7b:2f:0e:aa:32:44:0a:76:62:73:6d:f5:17:5c:be:
                    db:49:08:9b:9a:11:d4:79:52:f6:3f:2d:b6:cd:05:
                    60:be:1b:1f:90:fe:eb:5b:ff:e7:14:e6:2b:d5:30:
                    75:60:51:27:01:85:98:eb:92:34:85:9b:82:7b:d7:
                    10:3a:c9:a0:a6:fe:3c:4f:b9:3c:c7:65:b5:1a:40:
                    16:2a:2a:cd:60:81:34:1e:7b:fb:e4:d3:97:c4:d3:
                    2e:31:8c:2d:42:40:ba:e9:c0:34:81:e8:10:8f:91:
                    85:ec:18:3a:d4:5d:9a:9b:33:84:8d:4f:4e:e0:29:
                    93:d3:2b:f7:ba:b3:34:0b:93:7a:e5:c3:ac:50:00:
                    1d:f8:51:77:fd:fa:cf:c7:95:e2:22:37:5e:c5:cd:
                    c3:a2:90:0b:97:7e:fa:db:35:cd:d7:5d:0e:ce:7a:
                    16:4a:e0:30:f7:ce:85:50:ea:95:18:8e:ab:54:ff:
                    7b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:F7:3B:65:B1:77:F0:DE:2C:CF:FF:3C:A4:14:AD:5F:F3:1E:DD
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:45:6a:52:2e:37:61:0e:64:6a:20:80:5b:2b:27:ce:23:
         72:a3:d6:20:08:a4:91:70:9d:86:0e:5c:85:d6:e0:9b:54:e7:
         a8:78:3f:e4:46:55:ee:73:ce:a2:b5:73:dd:22:d5:63:ab:35:
         fa:fa:59:69:26:db:37:27:02:40:ac:77:b1:80:12:9e:a4:2f:
         91:13:10:7a:b5:a2:24:0a:ed:1b:06:73:f8:d2:78:5a:08:ae:
         e2:33:af:7f:66:54:36:4c:35:31:1e:1b:35:c7:57:f8:45:2f:
         18:6e:7c:c6:99:24:e5:94:8f:96:00:e7:a0:c6:0e:23:4a:d0:
         f1:22:2f:10:2c:4e:96:54:26:49:be:3d:1e:db:eb:b8:c2:70:
         e2:7d:0f:57:24:ad:a4:22:36:7f:61:da:c5:b4:67:c6:b8:0d:
         a8:0b:0a:78:31:0e:68:cc:60:d8:b2:42:05:c1:25:26:ff:ea:
         e7:58:47:e2:0a:ba:4b:2e:06:c5:31:a1:69:fb:3e:50:ff:c3:
         73:50:6e:03:95:63:9c:0d:db:2e:bf:ce:63:24:9b:cf:b3:18:
         11:17:d1:12:51:09:37:0e:d5:a3:63:37:6b:5f:a5:9d:64:7b:
         2a:6c:d3:fd:16:16:e3:4a:e7:50:7f:c8:18:71:44:31:e6:aa:
         25:d7:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:15:10 2025 by rpki-client