This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa
File:                     3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (raw, json)
Hash identifier:          umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=
Subject key identifier:   A7:D9:01:C4:47:95:32:FC:AC:9D:9F:56:9A:0C:84:94:18:D7:71:6F
Certificate issuer:       /CN=01DF4BADDE0B23C16F941DC3468443771C193624
Certificate serial:       302AB7436944E8BA33A16F4A1A98C37B68E092AF
Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa
Signing time:             Sun 16 Nov 2025 17:30:39 +0000
ROA not before:           Sun 16 Nov 2025 17:25:39 +0000
ROA not after:            Sun 15 Nov 2026 17:30:39 +0000
asID:                     153111
IP address blocks:        103.184.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl
                          rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2a:b7:43:69:44:e8:ba:33:a1:6f:4a:1a:98:c3:7b:68:e0:92:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624
        Validity
            Not Before: Nov 16 17:25:39 2025 GMT
            Not After : Nov 15 17:30:39 2026 GMT
        Subject: CN=A7D901C4479532FCAC9D9F569A0C849418D7716F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:59:66:c9:f4:cc:be:27:0c:5a:3f:3f:db:
                    fa:64:18:8a:4a:7c:e1:88:63:db:17:92:2f:61:49:
                    b0:80:c1:28:a3:c0:56:d8:ad:e6:53:07:15:2e:d6:
                    41:17:59:9f:61:ae:ef:7b:52:61:5c:50:56:3a:5e:
                    70:1f:7c:6e:98:e1:c8:32:6c:a4:bc:25:19:38:46:
                    1c:54:73:69:85:06:3b:72:67:77:8a:82:ec:8b:9b:
                    33:36:48:89:6d:3a:90:93:b4:ed:05:80:db:99:22:
                    97:9e:32:80:6a:a8:5f:cc:15:a6:52:91:af:a4:a8:
                    54:db:84:db:1d:9d:c9:a2:cc:42:17:5c:f7:cc:eb:
                    c2:d7:b8:60:87:65:1c:41:ce:f5:cf:6f:d3:ca:35:
                    71:b0:37:e0:6f:e6:4b:87:d7:5a:7d:b7:d4:45:3b:
                    7d:61:16:b0:29:02:f9:8d:f4:bf:2c:fe:79:9d:be:
                    e9:21:71:ea:0f:89:51:51:a7:25:05:7d:4e:b6:54:
                    a8:16:74:f9:2a:d8:09:00:07:9e:4e:cb:7f:eb:0a:
                    d0:32:73:24:25:e2:0d:3c:4b:12:56:77:09:dc:5f:
                    52:9b:b9:fa:1e:d3:24:29:9f:8c:66:d5:c8:ea:8f:
                    fe:16:35:f8:db:43:d3:94:39:9f:11:66:26:11:5c:
                    30:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D9:01:C4:47:95:32:FC:AC:9D:9F:56:9A:0C:84:94:18:D7:71:6F
            X509v3 Authority Key Identifier:
                keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:fa:3f:ef:9f:fa:81:b1:62:8a:bf:ce:de:23:8e:3a:f7:3c:
         cb:90:20:de:ab:b0:2d:84:71:8e:bd:5b:a2:1e:f0:a8:19:0d:
         4f:c2:0a:e2:89:17:41:2c:c6:bf:b1:06:2c:8d:e8:99:75:58:
         e4:5e:d4:e0:83:14:f0:8a:5a:b0:fa:e1:8a:e7:f5:93:2b:b3:
         a2:b7:59:48:06:81:0a:ea:12:d5:eb:c9:18:f7:81:3a:1e:8e:
         cc:db:b1:e1:a6:a0:bf:cb:e9:86:70:e0:ec:64:70:58:85:d6:
         88:af:53:09:65:09:6d:b8:a8:d5:6e:e5:40:bb:4f:75:c1:6c:
         9f:4d:85:45:27:39:7b:f0:71:7c:54:f8:9a:2e:01:1c:cf:f6:
         49:39:e5:48:98:74:15:d1:bf:ba:58:9b:50:7f:23:e4:10:ea:
         19:01:3f:66:d4:17:16:d4:f3:09:31:91:56:9a:74:49:3f:3f:
         89:46:88:24:dc:a7:bd:b9:e3:0d:a5:13:8a:2f:10:fa:61:94:
         ea:a3:1a:6e:6a:32:c3:11:60:aa:89:1b:31:a3:af:01:1a:cf:
         3d:48:eb:8f:02:ed:f1:db:ab:af:4c:9d:a2:78:c0:1f:22:70:
         3e:39:b0:9d:0d:7c:31:31:b9:4e:06:ac:e2:e7:50:be:86:22:
         26:24:68:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:28 2025 by rpki-client