This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa
File:                     3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (raw, json)
Hash identifier:          bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=
Subject key identifier:   5E:05:21:F6:96:CA:DC:51:CA:4F:AE:CA:AC:FF:01:30:9A:2E:E9:28
Certificate issuer:       /CN=01DF4BADDE0B23C16F941DC3468443771C193624
Certificate serial:       787FFDC50ECCE4224A4B6DC2FC934A91A8F89601
Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa
Signing time:             Mon 17 Nov 2025 15:12:48 +0000
ROA not before:           Mon 17 Nov 2025 15:07:48 +0000
ROA not after:            Mon 16 Nov 2026 15:12:48 +0000
asID:                     153111
IP address blocks:        103.184.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl
                          rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:fd:c5:0e:cc:e4:22:4a:4b:6d:c2:fc:93:4a:91:a8:f8:96:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624
        Validity
            Not Before: Nov 17 15:07:48 2025 GMT
            Not After : Nov 16 15:12:48 2026 GMT
        Subject: CN=5E0521F696CADC51CA4FAECAACFF01309A2EE928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:74:78:98:24:32:3c:79:ba:69:37:3f:9f:
                    13:e6:4f:9b:b4:5a:82:9d:69:1e:8d:e8:03:31:bb:
                    e0:4f:ad:e2:5e:bf:1c:57:6f:fb:54:3c:8f:0e:69:
                    71:fe:d9:df:de:b5:5b:45:b7:0a:e1:fe:f5:80:45:
                    08:9f:eb:d1:45:5f:7e:da:29:60:d9:a2:3f:05:07:
                    70:c7:be:e4:2c:18:ce:db:64:cf:fb:e7:54:14:eb:
                    52:dc:36:58:f0:c6:0c:36:b9:1f:8f:1a:43:9d:75:
                    11:42:9d:71:e9:9b:0d:c2:37:cc:44:d1:94:5d:31:
                    ce:9b:df:df:89:ae:ec:e3:9e:75:8b:e1:88:f2:ff:
                    26:40:34:d8:c1:75:e2:f5:b4:ad:86:31:ec:85:ea:
                    89:4b:f8:ef:b0:a4:20:21:a5:ce:ab:a5:27:1f:47:
                    d7:e6:d1:d2:39:ce:1c:cc:71:04:5e:4e:b8:7f:86:
                    6c:43:83:6d:05:91:eb:30:e7:b1:ae:c1:31:c3:28:
                    b4:0c:d5:8a:58:45:92:e3:88:83:5b:ff:46:66:74:
                    f3:35:98:03:e4:de:99:33:5f:d3:28:8b:e6:93:f7:
                    d9:19:de:af:3d:79:b0:d7:d9:95:07:4c:34:9b:74:
                    4e:09:09:b9:a2:d9:52:ad:59:e7:72:3b:64:73:1b:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:05:21:F6:96:CA:DC:51:CA:4F:AE:CA:AC:FF:01:30:9A:2E:E9:28
            X509v3 Authority Key Identifier:
                keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:44:fc:de:6b:14:24:cb:b4:5f:ba:32:aa:06:c5:35:30:7d:
         55:b8:1d:56:6e:1a:71:f4:51:8f:5e:cf:9f:ca:36:c7:05:44:
         11:3d:92:4e:60:2f:37:2c:a7:81:a0:e1:5b:07:9a:06:92:34:
         69:06:63:77:ba:64:1b:f2:8a:ef:c7:c3:f4:6c:85:34:5a:ac:
         ef:a7:51:66:72:7e:5f:72:a3:89:ff:63:8a:ba:5c:ac:66:ed:
         8f:1b:4f:bc:39:c7:7c:7d:d4:f4:53:1b:15:66:fe:e2:29:4f:
         b2:98:24:1e:d9:e2:16:61:3b:6a:92:a9:0f:9f:c2:99:3d:5b:
         7e:4e:99:3d:87:2a:30:b1:e9:d7:5d:2e:f4:8e:f4:2d:c9:b5:
         a9:89:71:59:b3:2a:94:5c:37:f2:2a:a7:5d:59:75:78:f6:2b:
         dd:42:df:28:d0:89:43:1c:d5:51:5b:d1:8d:93:30:1a:a3:b0:
         7e:3d:61:65:4e:54:ba:e7:0b:4d:d3:46:62:26:28:b5:3e:1f:
         9c:04:90:60:a2:c2:bc:db:4d:47:c7:9c:f2:4e:85:7a:87:1d:
         46:49:19:44:68:ae:a8:bb:48:eb:1c:0c:d2:23:ff:da:95:59:
         4d:e5:12:72:56:f4:7d:90:90:75:3e:ce:84:75:29:8e:15:25:
         be:fc:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:27 2025 by rpki-client