This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa
File:                     3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa (raw, json)
Hash identifier:          AL1FDBHVs75iHHEWETfE/oeUPgYWLb0khAD81mZRSQM=
Subject key identifier:   63:FE:57:F9:55:26:22:15:78:B0:73:99:11:49:E0:69:87:23:AD:68
Certificate issuer:       /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial:       75BB9F0B080C51D4BB4D3291239259DF1EB509BD
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa
Signing time:             Mon 01 Dec 2025 15:00:02 +0000
ROA not before:           Mon 01 Dec 2025 14:55:02 +0000
ROA not after:            Mon 30 Nov 2026 15:00:02 +0000
asID:                     151003
IP address blocks:        103.213.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
                          rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 15:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:9f:0b:08:0c:51:d4:bb:4d:32:91:23:92:59:df:1e:b5:09:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
        Validity
            Not Before: Dec  1 14:55:02 2025 GMT
            Not After : Nov 30 15:00:02 2026 GMT
        Subject: CN=63FE57F95526221578B073991149E0698723AD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:84:25:47:94:bd:a2:40:d5:fc:df:59:57:
                    5e:49:19:92:d6:b3:9b:f7:8d:51:3b:e0:45:ed:1c:
                    ff:b6:5b:89:68:d0:cd:c9:97:0a:84:d6:52:34:09:
                    19:7c:c3:82:e0:42:64:36:7f:28:2c:0d:f6:21:ed:
                    08:0f:6c:19:e2:ef:4c:c5:c4:33:29:db:6c:28:5f:
                    8f:b5:89:87:59:4b:af:41:f5:e2:2a:84:bd:a6:a4:
                    a6:d2:53:64:0e:67:32:30:a7:27:5e:b2:6a:6e:28:
                    42:5c:0e:50:ed:a3:b6:26:25:74:9e:4d:b4:a7:2e:
                    d9:17:30:58:47:51:0d:68:69:71:d3:7e:6f:44:05:
                    08:f4:3c:7e:74:66:ce:4e:b2:31:96:17:0c:fa:16:
                    88:96:b6:16:b6:3b:68:7e:31:bd:dc:e7:b7:66:a9:
                    18:d8:91:4e:c7:0c:61:bf:e7:a0:b2:1f:ec:37:dc:
                    0d:4f:61:dd:71:ab:74:b0:6e:54:71:92:06:ba:06:
                    1d:41:5b:49:f8:fc:a5:be:79:ae:7f:8d:aa:89:ea:
                    c8:de:6f:03:57:8c:ba:e1:42:18:80:60:1a:e6:f0:
                    4b:96:3a:b2:05:5b:e7:99:93:97:ca:fb:df:3b:be:
                    5f:34:b4:5e:97:c0:ee:a7:b3:a1:45:aa:2e:df:2f:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:57:F9:55:26:22:15:78:B0:73:99:11:49:E0:69:87:23:AD:68
            X509v3 Authority Key Identifier:
                keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233342e302f32342d3234203d3e20313531303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:9d:5f:9a:09:bc:16:a0:1a:bf:24:21:c5:c7:29:87:46:
         74:d7:cd:04:d7:35:ca:13:5b:aa:53:f0:cc:ee:03:15:39:b1:
         9a:72:01:68:63:a5:69:8c:29:39:0f:6b:fc:fa:fb:7e:0a:47:
         43:6e:29:08:63:60:4a:86:f9:e4:de:5c:84:82:a3:73:28:fc:
         dd:2a:f5:b8:e8:69:a2:8e:e0:17:ff:21:13:35:98:7c:1b:5d:
         cc:97:55:2b:b7:d5:d7:ff:f9:f9:4d:b7:f4:38:2d:53:1f:52:
         6e:cc:e2:6e:08:33:de:22:b0:6e:38:96:46:a1:7e:ee:3f:5e:
         75:2e:f9:e5:6d:06:33:7c:83:5c:b7:10:5e:69:a9:80:5b:4f:
         26:a6:28:0a:f2:9f:2f:e3:59:76:d8:74:33:f7:04:77:0a:18:
         79:07:4b:89:c0:f6:11:09:de:0b:4e:0c:d3:b8:18:1d:55:50:
         43:45:1f:24:e3:13:98:c2:32:fb:48:f3:91:e7:31:33:97:9c:
         8a:3c:1d:49:7c:1e:73:1d:bd:94:b2:1f:c0:d2:6e:10:59:1a:
         fa:2f:f3:76:31:a4:25:52:cd:b2:21:86:9a:34:f8:3c:a7:f7:
         bb:27:b0:db:f3:4c:c9:72:8d:df:e2:a5:3a:2e:17:7d:78:04:
         23:67:f7:d4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdbufCwgMUdS7TTKRI5JZ3x61Cb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD
RDQzQzQ5OTAeFw0yNTEyMDExNDU1MDJaFw0yNjExMzAxNTAwMDJaMDMxMTAvBgNV
BAMTKDYzRkU1N0Y5NTUyNjIyMTU3OEIwNzM5OTExNDlFMDY5ODcyM0FENjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjYQlR5S9okDV/N9ZV15JGZLW
s5v3jVE74EXtHP+2W4lo0M3JlwqE1lI0CRl8w4LgQmQ2fygsDfYh7QgPbBni70zF
xDMp22woX4+1iYdZS69B9eIqhL2mpKbSU2QOZzIwpydesmpuKEJcDlDto7YmJXSe
TbSnLtkXMFhHUQ1oaXHTfm9EBQj0PH50Zs5OsjGWFwz6FoiWtha2O2h+Mb3c57dm
qRjYkU7HDGG/56CyH+w33A1PYd1xq3SwblRxkga6Bh1BW0n4/KW+ea5/jaqJ6sje
bwNXjLrhQhiAYBrm8EuWOrIFW+eZk5fK+987vl80tF6XwO6ns6FFqi7fLwnjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUY/5X+VUmIhV4sHOZEUngaYcjrWgwHwYDVR0j
BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3
OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz
QzQ5OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkN2ZhMjEwLTVmMjUtNGYwYi04
OWE1LTdkMDBhMzU0YTkwNy8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1eowDQYJ
KoZIhvcNAQELBQADggEBAJ5bnV+aCbwWoBq/JCHFxymHRnTXzQTXNcoTW6pT8Mzu
AxU5sZpyAWhjpWmMKTkPa/z6+34KR0NuKQhjYEqG+eTeXISCo3Mo/N0q9bjoaaKO
4Bf/IRM1mHwbXcyXVSu31df/+flNt/Q4LVMfUm7M4m4IM94isG44lkahfu4/XnUu
+eVtBjN8g1y3EF5pqYBbTyamKAryny/jWXbYdDP3BHcKGHkHS4nA9hEJ3gtODNO4
GB1VUENFHyTjE5jCMvtI85HnMTOXnIo8HUl8HnMdvZSyH8DSbhBZGvov83YxpCVS
zbIhhpo0+Dyn97snsNvzTMlyjd/ipTouF314BCNn99Q=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:37 2025 by rpki-client