This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
File:                     3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          fibpaoWLGLqVlSh+YVe38FiOvASMtn5m89vjXOwhkBg=
Subject key identifier:   BB:F0:0E:E2:D5:66:4D:4D:8B:0D:81:73:A3:94:9B:26:F2:6A:7C:71
Certificate issuer:       /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial:       0E959ED067B8F47D07D4CF4F13FECF17D945A1A0
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
Signing time:             Wed 19 Nov 2025 09:00:01 +0000
ROA not before:           Wed 19 Nov 2025 08:55:01 +0000
ROA not after:            Wed 18 Nov 2026 09:00:01 +0000
asID:                     139982
IP address blocks:        103.66.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
                          rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 17:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:95:9e:d0:67:b8:f4:7d:07:d4:cf:4f:13:fe:cf:17:d9:45:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
        Validity
            Not Before: Nov 19 08:55:01 2025 GMT
            Not After : Nov 18 09:00:01 2026 GMT
        Subject: CN=BBF00EE2D5664D4D8B0D8173A3949B26F26A7C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8e:fc:c4:b7:50:01:33:8b:5b:3b:11:e3:9f:
                    33:d9:45:aa:7f:b2:ef:ee:47:95:07:c6:2b:eb:9d:
                    89:4b:86:34:a5:61:90:e8:71:91:df:d0:7e:de:19:
                    6c:f2:d9:e0:78:7f:bb:e6:27:0a:60:81:09:bf:55:
                    89:ac:40:e2:4d:5f:aa:f8:10:34:f1:2a:b1:ab:42:
                    a6:57:03:26:40:a2:a9:70:ed:e1:82:a8:58:99:5f:
                    4f:b2:1a:16:f9:f5:d7:57:18:58:da:16:82:aa:6b:
                    9f:06:f4:95:3b:3c:be:ab:20:20:11:54:57:11:7d:
                    d3:39:0e:93:23:23:32:f4:30:b9:43:de:50:6f:8a:
                    a7:48:8c:6e:19:e7:99:8c:85:c2:07:60:b9:19:54:
                    18:3e:7d:6a:39:fd:99:8d:f9:49:e6:b2:0b:29:42:
                    9a:5a:06:d5:ff:b6:f2:a0:d1:01:90:8b:de:c6:16:
                    27:52:73:9d:1a:24:8e:0c:78:e8:db:ad:46:c3:80:
                    fe:30:8c:8b:dc:7a:af:18:28:87:2b:d6:80:71:d3:
                    fd:af:55:49:fa:ad:2c:08:1e:04:57:2e:b1:5d:d1:
                    4e:6c:52:0c:36:7b:90:10:7b:e0:7f:5a:10:4d:cc:
                    bf:70:cf:f3:e0:3a:c9:91:3e:04:72:52:c2:c9:c3:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:0E:E2:D5:66:4D:4D:8B:0D:81:73:A3:94:9B:26:F2:6A:7C:71
            X509v3 Authority Key Identifier:
                keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:e7:7c:fe:91:00:2a:69:2f:3d:bf:74:81:bb:5b:25:4d:38:
         aa:b3:f1:44:01:87:bb:e3:98:1d:4b:d4:07:2a:84:a0:80:2c:
         04:c4:cf:67:60:53:e1:1e:d4:84:0e:5e:e7:95:4d:a3:8c:29:
         07:51:b8:db:aa:4a:82:3f:49:81:ee:7d:a2:62:fe:f4:9b:47:
         d5:61:1f:1a:dd:71:1d:08:55:48:f3:aa:bf:a7:92:5a:1c:a2:
         b7:da:5a:0b:97:42:96:3d:28:db:ca:f5:e4:70:26:b8:93:d3:
         19:6a:b5:57:90:27:b7:b9:72:a5:dc:72:42:0b:74:e6:ed:f1:
         aa:24:f5:51:02:65:40:f2:8e:70:b5:cd:4c:db:a1:91:62:63:
         5c:9e:f6:f0:e9:02:1e:38:bf:3d:5c:ad:38:5b:86:fa:d4:5e:
         1a:39:13:bc:17:0b:d7:7c:33:ce:8b:87:07:06:ee:bd:cc:61:
         94:21:14:8d:ab:c6:da:da:bc:de:1a:17:db:4f:c4:16:64:c9:
         fb:82:24:ac:0f:d8:35:de:53:e0:25:5e:ec:11:c8:28:32:67:
         0d:ef:62:a5:cf:da:70:bf:85:3b:40:66:af:8c:92:c6:62:7c:
         a3:cd:f2:7d:1f:79:91:64:b3:11:07:cc:39:c0:6d:ac:e2:8c:
         c6:e3:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:13:53 2025 by rpki-client