This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa
File:                     3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (raw, json)
Hash identifier:          s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=
Subject key identifier:   58:50:EF:87:EB:F3:56:42:13:42:C3:04:12:5F:CD:50:16:21:80:EA
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       17880F4DFE35AC05ABE0914DDE290E80A8F33B80
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa
Signing time:             Tue 02 Dec 2025 08:00:01 +0000
ROA not before:           Tue 02 Dec 2025 07:55:01 +0000
ROA not after:            Tue 01 Dec 2026 08:00:01 +0000
asID:                     142311
IP address blocks:        103.168.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 09:08:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:88:0f:4d:fe:35:ac:05:ab:e0:91:4d:de:29:0e:80:a8:f3:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Dec  2 07:55:01 2025 GMT
            Not After : Dec  1 08:00:01 2026 GMT
        Subject: CN=5850EF87EBF356421342C304125FCD50162180EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:bd:5d:fe:fb:0a:65:9f:5b:da:f9:84:52:
                    c8:25:e2:00:07:c4:81:b8:ef:dd:81:95:45:96:71:
                    70:1d:e6:d1:11:db:82:6e:0e:c6:d6:64:53:e6:74:
                    b7:15:9c:1d:52:db:37:82:86:43:73:fc:27:63:85:
                    d9:48:03:0b:06:26:b7:c0:43:b9:3f:11:19:6b:7f:
                    1f:f2:9d:ea:81:de:f5:8b:53:be:5b:57:32:09:84:
                    4b:56:35:54:1b:3a:3a:0d:ce:b1:59:4b:a6:3a:7c:
                    23:9a:54:8e:60:01:2b:bb:dd:c0:c6:bd:8f:77:d6:
                    5e:f8:8d:07:4e:61:79:27:a3:68:dc:ac:ec:13:f0:
                    b9:25:25:e8:13:30:1e:ad:06:88:19:f7:cb:fe:9e:
                    ea:f7:1d:08:b1:63:83:97:48:69:51:27:96:aa:05:
                    a0:f9:42:a6:95:7f:c5:42:08:5a:5a:3b:a0:3b:7d:
                    34:75:26:ae:33:b1:8d:40:cd:8d:07:d3:38:7e:d1:
                    1e:a7:25:5f:87:7e:e7:bf:4b:44:55:ee:02:63:48:
                    e1:f9:41:d2:17:3f:bf:00:95:14:54:8e:04:02:87:
                    b2:3f:05:b3:8e:95:66:c1:ff:92:22:a0:dc:65:10:
                    de:9e:38:3a:3f:75:51:ae:8f:3d:6e:bb:99:92:9a:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:EF:87:EB:F3:56:42:13:42:C3:04:12:5F:CD:50:16:21:80:EA
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:2f:8c:c3:1f:77:b6:15:43:a6:b5:01:a3:e4:b6:9d:e6:
         96:95:ad:44:6b:a2:2e:56:fd:36:b2:95:06:cc:ac:2a:b1:fc:
         7b:24:c1:1b:7a:3f:7e:9f:99:44:d3:c8:44:30:89:7d:a9:d2:
         44:2d:51:d0:37:f7:39:1b:f9:ca:a8:ed:98:f2:f1:d8:61:99:
         5d:a1:e0:a1:d7:63:a2:e7:3a:67:f3:90:fa:30:c0:f9:4f:fc:
         46:7f:f7:0f:3d:4f:30:06:15:e8:09:af:0e:13:8b:1c:41:8a:
         c5:10:51:fc:f0:e7:2e:f6:95:e6:52:b1:bb:42:53:f9:54:0c:
         1d:15:4e:07:25:dd:c1:e8:b5:5f:ba:52:b4:52:9f:94:87:07:
         ad:81:65:8a:92:06:51:c1:0c:80:df:15:22:c7:3e:34:26:f7:
         4f:d6:61:8a:d6:c4:9e:32:c1:11:1f:38:73:3a:d1:7c:ef:33:
         dc:17:8e:f3:e3:c3:3c:f4:f0:02:a1:83:46:62:2f:f2:08:fa:
         ee:e4:b1:b3:ef:78:fe:7c:4e:b1:95:f8:bb:f6:62:4f:6b:45:
         c5:fe:4c:87:50:db:61:12:07:f5:48:e7:68:31:ac:8f:de:e1:
         cd:25:78:d1:a9:ca:c9:1b:e4:dd:60:b1:e8:bc:e8:67:37:9a:
         f2:33:aa:ea
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUF4gPTf41rAWr4JFN3ikOgKjzO4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1
MTkxMzNGNzAeFw0yNTEyMDIwNzU1MDFaFw0yNjEyMDEwODAwMDFaMDMxMTAvBgNV
BAMTKDU4NTBFRjg3RUJGMzU2NDIxMzQyQzMwNDEyNUZDRDUwMTYyMTgwRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wb1d/vsKZZ9b2vmEUsgl4gAH
xIG4792BlUWWcXAd5tER24JuDsbWZFPmdLcVnB1S2zeChkNz/CdjhdlIAwsGJrfA
Q7k/ERlrfx/yneqB3vWLU75bVzIJhEtWNVQbOjoNzrFZS6Y6fCOaVI5gASu73cDG
vY931l74jQdOYXkno2jcrOwT8LklJegTMB6tBogZ98v+nur3HQixY4OXSGlRJ5aq
BaD5QqaVf8VCCFpaO6A7fTR1Jq4zsY1AzY0H0zh+0R6nJV+Hfue/S0RV7gJjSOH5
QdIXP78AlRRUjgQCh7I/BbOOlWbB/5IioNxlEN6eODo/dVGujz1uu5mSmoOXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWFDvh+vzVkITQsMEEl/NUBYhgOowHwYDVR0j
BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0
ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx
MzNGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjMzJlZWUxLTEwZjctNDU3ZC1h
OGM1LTVmN2Y3NDFhNjNkYS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM1MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJcwDQYJ
KoZIhvcNAQELBQADggEBAI14L4zDH3e2FUOmtQGj5Lad5paVrURroi5W/TaylQbM
rCqx/HskwRt6P36fmUTTyEQwiX2p0kQtUdA39zkb+cqo7Zjy8dhhmV2h4KHXY6Ln
OmfzkPowwPlP/EZ/9w89TzAGFegJrw4TixxBisUQUfzw5y72leZSsbtCU/lUDB0V
Tgcl3cHotV+6UrRSn5SHB62BZYqSBlHBDIDfFSLHPjQm90/WYYrWxJ4ywREfOHM6
0XzvM9wXjvPjwzz08AKhg0ZiL/II+u7ksbPveP58TrGV+Lv2Yk9rRcX+TIdQ22ES
B/VI52gxrI/e4c0leNGpyskb5N1gsei86Gc3mvIzquo=
-----END CERTIFICATE-----
Generated at Wed Dec 3 16:10:52 2025 by rpki-client