This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          mFq2b38/RUkUkCh1MVybkTba/DYg5kwfb6uDHIQj6Gk=
Subject key identifier:   86:0A:ED:8C:B0:B8:18:36:95:A5:A6:1A:AF:0D:93:4B:54:62:9C:5D
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       40E82D6AE75EF702D6A5B5468E265228E79C1C8D
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 14 Dec 2025 10:00:02 +0000
ROA not before:           Sun 14 Dec 2025 09:55:02 +0000
ROA not after:            Sun 13 Dec 2026 10:00:02 +0000
asID:                     9341
IP address blocks:        103.179.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
                          rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 08:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e8:2d:6a:e7:5e:f7:02:d6:a5:b5:46:8e:26:52:28:e7:9c:1c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Dec 14 09:55:02 2025 GMT
            Not After : Dec 13 10:00:02 2026 GMT
        Subject: CN=860AED8CB0B8183695A5A61AAF0D934B54629C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:e9:e3:e5:d0:85:65:84:87:67:17:f7:82:
                    01:fc:a6:89:54:d6:7b:c3:be:5a:c5:19:9a:a6:48:
                    4a:1b:b1:a0:ef:c2:2d:dc:17:df:fe:43:09:2d:2e:
                    af:fd:3a:89:e4:16:a1:f3:92:0e:41:a0:33:0b:fd:
                    19:3e:30:90:b0:79:85:97:a6:17:e7:91:7c:7b:b4:
                    ad:d3:6b:76:e2:58:9b:f9:e5:99:4c:16:cf:27:a0:
                    6b:d9:35:d6:3c:ef:01:de:d4:59:d4:ed:bb:aa:84:
                    78:8a:bb:75:ef:63:1c:7a:66:c7:59:cd:f9:9d:90:
                    b3:4c:87:d9:ec:c8:28:35:46:f5:92:88:56:9d:b3:
                    46:a6:6e:01:41:55:20:46:c9:fb:57:fc:07:48:54:
                    e3:27:4f:a3:e1:1d:52:1b:78:71:62:0c:56:4a:12:
                    e5:df:59:4b:65:9f:09:de:a4:96:f1:ef:61:13:51:
                    71:8d:7f:27:f6:00:71:23:3b:70:70:96:27:5c:cd:
                    59:b4:92:5f:0a:b7:7d:be:bd:ce:dd:c8:cf:75:7b:
                    a1:f4:3b:a6:8d:82:78:67:5e:ef:f9:2b:7c:5a:ea:
                    ad:81:09:06:a1:ec:59:9c:f3:2b:fe:f6:85:40:b0:
                    dd:dd:11:32:8e:c4:e7:62:a3:a2:31:be:b0:99:44:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:ED:8C:B0:B8:18:36:95:A5:A6:1A:AF:0D:93:4B:54:62:9C:5D
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:99:91:7a:60:06:d8:f8:ef:d8:0e:52:8c:2e:eb:58:34:78:
         78:60:98:bb:c7:b0:8c:3c:40:19:d3:10:07:11:a8:48:1c:71:
         bb:0d:02:c7:e7:42:8d:ec:b1:81:34:af:88:e6:2c:eb:ce:88:
         ea:07:8d:f9:dd:7e:86:1c:b5:23:d2:0c:65:aa:80:57:53:be:
         38:ed:cc:4c:bd:1b:65:ef:01:cd:55:f0:74:1b:40:66:a0:e9:
         7d:ed:9c:d5:73:4a:34:81:3d:a2:fa:49:f4:c3:9b:2e:88:7f:
         82:7a:96:e9:d9:01:0a:c0:6d:c7:2a:c7:35:d8:be:62:2b:08:
         05:f9:97:7d:e2:ce:64:31:0e:5c:a3:60:48:bf:37:fa:4c:ea:
         44:09:14:ee:b1:1b:88:62:ca:55:d3:32:b3:be:00:4b:4e:a6:
         6f:67:26:45:90:05:ba:2e:52:f7:b9:7e:b5:ce:98:96:e9:99:
         36:80:70:8d:1c:e1:4d:ee:04:30:6f:62:91:67:60:11:68:41:
         35:f3:26:99:57:d9:3d:0e:63:8d:fa:a3:cc:27:20:37:ac:27:
         e3:29:b3:21:26:c5:a5:61:3d:0d:f6:0b:13:be:7d:08:b4:66:
         7c:0c:5f:63:20:17:75:f9:ac:fa:66:d3:43:84:0c:13:8f:86:
         ed:3f:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:21:06 2025 by rpki-client