This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa
File:                     3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa (raw, json)
Hash identifier:          mISY0erp3ysDPa3O+17vQrQWnmbYh2F2NVUBefRVeig=
Subject key identifier:   77:F3:E3:C6:5D:35:03:21:E0:E4:80:1C:E0:F2:6A:D6:B5:BA:38:E1
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       03C05C1D6E6AB189B98A0DD2FADE3620588DDE8D
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa
Signing time:             Sat 22 Nov 2025 18:01:10 +0000
ROA not before:           Sat 22 Nov 2025 17:56:10 +0000
ROA not after:            Sat 21 Nov 2026 18:01:10 +0000
asID:                     149746
IP address blocks:        103.17.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 16:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c0:5c:1d:6e:6a:b1:89:b9:8a:0d:d2:fa:de:36:20:58:8d:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Nov 22 17:56:10 2025 GMT
            Not After : Nov 21 18:01:10 2026 GMT
        Subject: CN=77F3E3C65D350321E0E4801CE0F26AD6B5BA38E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:72:5b:6e:93:07:fb:1d:15:2a:f8:1b:ef:
                    99:7d:8e:5f:99:9c:a7:79:f3:bd:87:7e:2b:a2:31:
                    0f:14:22:31:b8:42:0a:03:9b:e6:cd:ca:a1:36:2e:
                    24:11:10:33:f5:12:33:e8:de:c5:1f:be:12:6f:19:
                    1f:91:8f:94:c6:07:62:65:0c:0d:6a:2d:e3:69:f6:
                    b1:47:39:04:d7:a5:85:0f:3a:34:f5:c5:fa:a2:e5:
                    5a:88:dc:fa:35:f5:89:e4:eb:ef:3f:03:b0:ea:45:
                    05:9e:99:82:b7:0c:1f:b7:46:4c:a9:8e:63:17:d0:
                    55:d3:c1:b1:80:ae:ba:a2:99:34:fc:75:cd:d8:53:
                    a1:4e:91:80:bc:63:f6:f3:b1:da:8c:71:db:bf:29:
                    91:5c:50:20:8d:9f:57:28:7a:ce:df:df:63:85:3e:
                    71:26:e6:04:43:72:15:e6:01:b7:d5:cc:e7:42:ce:
                    5b:6f:dc:23:95:bf:d9:c8:fb:c3:2e:df:c7:8b:e3:
                    26:7b:53:dc:c7:cb:83:a9:12:16:8b:eb:95:00:a0:
                    ad:61:5e:42:e4:40:b3:94:e3:9c:75:ba:ff:6f:d7:
                    0a:40:bf:64:24:aa:48:28:06:7b:df:dc:3b:b5:aa:
                    0e:13:d1:8b:6d:19:a7:e3:1e:cd:d5:61:12:00:d6:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F3:E3:C6:5D:35:03:21:E0:E4:80:1C:E0:F2:6A:D6:B5:BA:38:E1
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234362e302f32332d3234203d3e20313439373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:79:30:f1:d4:93:8f:93:97:29:d2:fa:7b:0b:0f:df:28:
         92:14:61:dc:ee:84:6b:8a:fb:6c:f9:6f:ca:27:9b:bc:fa:57:
         b7:e7:86:40:dc:d7:53:59:c4:6a:1b:c3:bf:e8:6c:11:5a:c0:
         4d:58:cd:06:7d:02:77:17:7a:98:33:ac:ed:b9:75:fa:c0:e7:
         40:c5:e1:19:35:59:78:93:a0:d0:9c:9b:d4:5c:24:1b:c6:e4:
         95:b3:0a:30:f1:d5:65:59:a4:82:5d:06:86:5f:9f:0e:d6:94:
         08:c5:3e:9d:3b:07:33:ae:13:af:a6:c9:2f:83:93:21:5a:7d:
         f8:47:66:63:6c:22:dc:fb:88:b7:8a:eb:27:f9:8c:b0:95:35:
         46:49:ca:8a:86:47:00:ee:5a:e0:38:48:5e:29:a3:af:c4:47:
         20:ba:ea:d4:21:8a:77:bc:19:0e:64:91:b5:04:3d:84:ce:3c:
         67:c1:6b:8b:57:df:eb:1c:19:93:62:cb:d8:a1:38:76:32:17:
         3d:9c:34:00:9e:a0:9f:9b:46:04:90:9a:87:e6:cc:be:19:f5:
         cc:d3:30:9d:15:36:aa:3b:14:d3:30:b4:70:58:5c:29:54:48:
         d4:d9:aa:10:8a:fc:31:31:3d:90:fd:4d:f8:e1:62:96:8a:86:
         19:64:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:13:33 2025 by rpki-client