This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa
File:                     3130332e37392e35302e302f32332d3233203d3e20313337323839.roa (raw, json)
Hash identifier:          kjJHpX400POBZ9FlMf7b79LcwWfnSnzD5KY03dFlaSQ=
Subject key identifier:   24:32:0E:36:4E:3E:4F:7E:78:E5:B7:C4:26:20:F6:C7:47:0D:C9:64
Certificate issuer:       /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
Certificate serial:       230C5A53093DD3A41F65FFFEA19067DCAAB7AB79
Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa
Signing time:             Fri 14 Nov 2025 14:29:24 +0000
ROA not before:           Fri 14 Nov 2025 14:24:24 +0000
ROA not after:            Fri 13 Nov 2026 14:29:24 +0000
asID:                     137289
IP address blocks:        103.79.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl
                          rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 11:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0c:5a:53:09:3d:d3:a4:1f:65:ff:fe:a1:90:67:dc:aa:b7:ab:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
        Validity
            Not Before: Nov 14 14:24:24 2025 GMT
            Not After : Nov 13 14:29:24 2026 GMT
        Subject: CN=24320E364E3E4F7E78E5B7C42620F6C7470DC964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:e2:be:66:4d:1c:52:e3:98:e8:01:e7:87:
                    d6:ea:ab:9a:2a:84:1f:28:50:35:d0:35:cb:95:ce:
                    45:36:e4:b3:68:d0:13:3e:24:9c:3a:9d:7f:5c:be:
                    80:67:fb:c6:bb:a3:07:19:1d:37:ce:e4:a9:4a:3c:
                    f2:77:13:a5:96:7d:3c:a0:87:df:73:c0:7e:43:63:
                    1b:87:57:38:c2:1e:8b:eb:fb:4e:bf:1f:23:37:a9:
                    b3:cf:e9:c4:3c:29:29:8c:29:b9:b0:77:2c:c4:d9:
                    54:26:c8:82:8c:45:f9:6b:53:8d:6c:5b:6b:e6:1d:
                    fb:9d:a6:3a:13:09:f2:bf:ea:6f:0b:57:c4:b9:21:
                    f5:4c:df:48:7e:b8:6d:37:a6:43:1f:4f:14:6a:32:
                    94:e5:60:c4:4f:b8:be:50:be:46:3e:96:d0:22:d4:
                    11:ab:6d:3b:e5:31:78:92:5e:0d:24:4b:db:4c:90:
                    43:e4:7e:14:e5:75:9d:4c:b4:75:34:d3:36:55:e5:
                    45:7e:7c:db:6c:fe:bd:8a:60:05:ee:7e:b1:2e:54:
                    f3:3d:dd:af:37:3c:99:f8:22:6f:72:60:ee:d2:39:
                    d4:8e:a6:93:49:d3:44:d3:c7:a0:86:81:e0:00:00:
                    8d:82:9a:42:85:90:47:ad:f3:82:01:2f:77:04:90:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:0E:36:4E:3E:4F:7E:78:E5:B7:C4:26:20:F6:C7:47:0D:C9:64
            X509v3 Authority Key Identifier:
                keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35302e302f32332d3233203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:fd:bc:90:8b:66:79:cc:d7:0e:d7:88:52:d8:37:d3:6b:c7:
         46:d0:3c:7f:d2:04:70:06:85:3d:66:a2:ad:89:81:a9:59:49:
         ff:74:ba:ff:fc:9b:fd:34:f6:79:24:75:e9:d4:81:0a:d6:02:
         f1:aa:2b:6a:94:47:71:44:49:b5:e6:08:56:54:e8:16:1c:ec:
         eb:2b:53:6b:4d:10:be:83:d4:4b:a2:7d:f7:57:f1:34:aa:3a:
         db:3b:75:a6:1d:3f:7b:ce:ae:b2:e0:d3:21:d1:fd:59:0f:30:
         58:de:d8:ae:1b:c8:dd:00:c7:e9:ca:2d:d5:7f:8f:2c:78:3a:
         fa:1e:78:03:d6:7e:41:78:cf:f5:46:72:cc:34:2b:36:e2:89:
         f7:69:2e:e4:d3:40:de:46:6c:b3:20:6a:da:a5:f4:df:80:7f:
         97:fc:2f:0d:79:30:e2:03:27:78:43:18:f1:e0:1e:f3:46:54:
         37:88:c5:75:73:2d:45:ca:5f:78:34:26:47:65:34:bd:5a:bb:
         6a:74:64:0d:7d:72:55:dc:b9:6e:7e:fb:46:80:88:aa:78:3e:
         e0:e6:71:7c:15:15:31:83:35:5a:a8:a4:fe:52:b8:6c:ac:af:
         be:d5:24:5b:65:cd:2d:15:b4:50:9d:59:2f:41:86:21:8a:48:
         ca:a5:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:17 2025 by rpki-client