This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35312e302f32342d3234203d3e20313337323839.roa
File:                     3130332e37392e35312e302f32342d3234203d3e20313337323839.roa (raw, json)
Hash identifier:          Pz+PV87koaQ3kPMJ5gPU/if4f0LOXPtq+HAAi9cx8ZY=
Subject key identifier:   27:4E:8A:BA:1D:64:A1:73:01:AE:A6:CB:2C:55:59:1E:B5:43:0F:13
Certificate issuer:       /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
Certificate serial:       230737ADE074F67195F1F28B1F0B92AB5BD72A3E
Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35312e302f32342d3234203d3e20313337323839.roa
Signing time:             Fri 14 Nov 2025 14:34:39 +0000
ROA not before:           Fri 14 Nov 2025 14:29:39 +0000
ROA not after:            Fri 13 Nov 2026 14:34:39 +0000
asID:                     137289
IP address blocks:        103.79.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl
                          rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 11:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:37:ad:e0:74:f6:71:95:f1:f2:8b:1f:0b:92:ab:5b:d7:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96
        Validity
            Not Before: Nov 14 14:29:39 2025 GMT
            Not After : Nov 13 14:34:39 2026 GMT
        Subject: CN=274E8ABA1D64A17301AEA6CB2C55591EB5430F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:e1:fa:bf:db:bb:82:05:6e:45:cc:0c:48:
                    cc:bf:71:56:80:46:ae:25:33:1a:7a:ad:2b:40:68:
                    6d:6c:a0:8d:c7:ac:fc:22:58:45:0f:d8:44:60:64:
                    7b:b6:c2:7a:8c:0d:b0:38:de:e7:ac:61:0c:f1:12:
                    4d:91:69:89:9f:22:3b:86:fb:1d:c3:b7:81:4f:8a:
                    2f:f1:e4:88:62:99:7b:4e:e3:51:03:a2:a3:34:5c:
                    f8:2c:87:09:bf:0d:29:e8:25:0f:97:9b:39:d1:22:
                    c0:6c:36:8d:a8:46:e3:02:e0:76:3f:e9:2f:83:0f:
                    85:3c:f6:6f:40:ce:1a:ce:64:f6:50:33:13:0b:3e:
                    2e:73:b2:e7:e6:d8:7d:3d:ac:0d:09:18:b9:9b:91:
                    41:28:5a:63:f8:d8:e0:fe:f6:9d:cf:48:5b:39:89:
                    27:aa:2f:91:45:c2:d9:c7:f7:5a:14:7b:bf:5f:5e:
                    91:64:7c:e4:84:36:10:18:cc:c6:b6:d8:6f:b1:47:
                    a1:ab:80:ba:d1:32:c3:13:31:7c:bf:2a:5d:97:65:
                    0e:ca:83:1e:9f:46:52:a5:32:36:e2:1a:a6:09:6e:
                    0b:10:2c:a4:53:f1:54:61:1a:bf:ac:8c:6d:b7:09:
                    10:3c:1d:b6:2c:67:50:57:6c:e8:d1:35:f3:ad:da:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4E:8A:BA:1D:64:A1:73:01:AE:A6:CB:2C:55:59:1E:B5:43:0F:13
            X509v3 Authority Key Identifier:
                keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/3130332e37392e35312e302f32342d3234203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:90:be:44:34:6e:d1:ae:de:db:d4:5e:24:a5:a1:a9:5d:
         e8:b5:5d:f4:73:dd:c1:d9:40:d4:9d:2b:02:78:81:8a:8a:3b:
         cb:36:cd:f0:fc:a0:79:c5:1e:85:b5:f7:3e:ad:b7:f4:53:a5:
         eb:1c:89:ef:81:a7:54:e0:c0:69:9e:7d:17:cc:7c:c9:07:b7:
         22:70:90:93:05:94:29:84:f3:83:89:9d:39:aa:bf:0c:af:41:
         1f:73:d3:9e:a1:56:cf:82:41:2f:41:8e:5b:c9:b6:a1:64:fe:
         be:93:a7:21:33:67:35:c9:02:41:1b:ce:85:14:dc:f9:b4:39:
         9c:5a:8f:9c:12:b3:7d:98:72:c5:c8:6b:40:3a:82:2a:90:6c:
         bc:cd:4f:58:d3:5d:a2:ed:45:11:40:af:a1:4c:1b:c1:af:47:
         d1:36:dc:32:43:cd:5d:d8:40:08:31:d7:d4:5b:b1:41:92:71:
         34:fb:2d:51:c8:de:ba:33:a6:b5:74:02:8f:97:e0:4f:b1:5c:
         d1:04:a1:d4:98:41:6f:46:5e:03:f1:2b:62:1f:bd:6e:a9:49:
         bd:76:5a:5d:5f:a4:b1:ce:c9:85:92:c8:ed:e7:77:84:d0:7e:
         bc:0e:61:8c:24:f9:0f:6d:8c:78:f4:e5:64:e2:47:e0:5e:ae:
         1e:b0:09:92
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIwc3reB09nGV8fKLHwuSq1vXKj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2
QzE3Q0M5NjAeFw0yNTExMTQxNDI5MzlaFw0yNjExMTMxNDM0MzlaMDMxMTAvBgNV
BAMTKDI3NEU4QUJBMUQ2NEExNzMwMUFFQTZDQjJDNTU1OTFFQjU0MzBGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbOH6v9u7ggVuRcwMSMy/cVaA
Rq4lMxp6rStAaG1soI3HrPwiWEUP2ERgZHu2wnqMDbA43uesYQzxEk2RaYmfIjuG
+x3Dt4FPii/x5IhimXtO41EDoqM0XPgshwm/DSnoJQ+XmznRIsBsNo2oRuMC4HY/
6S+DD4U89m9AzhrOZPZQMxMLPi5zsufm2H09rA0JGLmbkUEoWmP42OD+9p3PSFs5
iSeqL5FFwtnH91oUe79fXpFkfOSENhAYzMa22G+xR6GrgLrRMsMTMXy/Kl2XZQ7K
gx6fRlKlMjbiGqYJbgsQLKRT8VRhGr+sjG23CRA8HbYsZ1BXbOjRNfOt2gYRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJ06Kuh1koXMBrqbLLFVZHrVDDxMwHwYDVR0j
BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz
RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3
Q0M5Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiY2FlYTNiLWJkN2YtNDgxYS05
YmM3LWFhMTYwZDA1ZDI2Mi8wLzMxMzAzMzJlMzczOTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNzMyMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdPMzANBgkqhkiG
9w0BAQsFAAOCAQEAt/CQvkQ0btGu3tvUXiSloald6LVd9HPdwdlA1J0rAniBioo7
yzbN8PygecUehbX3Pq239FOl6xyJ74GnVODAaZ59F8x8yQe3InCQkwWUKYTzg4md
Oaq/DK9BH3PTnqFWz4JBL0GOW8m2oWT+vpOnITNnNckCQRvOhRTc+bQ5nFqPnBKz
fZhyxchrQDqCKpBsvM1PWNNdou1FEUCvoUwbwa9H0TbcMkPNXdhACDHX1FuxQZJx
NPstUcjeujOmtXQCj5fgT7Fc0QSh1JhBb0ZeA/ErYh+9bqlJvXZaXV+ksc7JhZLI
7ed3hNB+vA5hjCT5D22MePTlZOJH4F6uHrAJkg==
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:16 2025 by rpki-client