This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
File:                     3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (raw, json)
Hash identifier:          ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=
Subject key identifier:   9D:BB:17:CB:49:EA:16:1D:F5:4B:0D:BA:99:BA:0F:74:44:85:46:4F
Certificate issuer:       /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
Certificate serial:       1903711019C83B5947EFF69BBF0567BB8EBD9B0D
Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
Signing time:             Fri 24 Oct 2025 18:00:01 +0000
ROA not before:           Fri 24 Oct 2025 17:55:01 +0000
ROA not after:            Fri 23 Oct 2026 18:00:01 +0000
asID:                     149335
IP address blocks:        103.179.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl
                          rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 21:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:03:71:10:19:c8:3b:59:47:ef:f6:9b:bf:05:67:bb:8e:bd:9b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205
        Validity
            Not Before: Oct 24 17:55:01 2025 GMT
            Not After : Oct 23 18:00:01 2026 GMT
        Subject: CN=9DBB17CB49EA161DF54B0DBA99BA0F744485464F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ad:6a:b1:23:e5:08:b2:d4:68:61:46:cd:5b:
                    b6:10:6f:b5:95:ce:3d:65:a9:da:51:86:c5:78:40:
                    81:47:b4:4a:40:d7:bd:70:a3:78:89:4f:b1:b9:df:
                    ff:b1:c3:a4:5d:ae:4d:87:00:69:2e:2d:a1:b9:55:
                    84:47:19:74:da:b7:a8:3c:fb:1a:fd:4d:e7:1c:29:
                    a3:50:07:de:10:ef:ed:b7:1a:44:b5:be:64:7c:2e:
                    61:d4:f2:a4:3f:4c:d6:c2:f0:e0:3c:c1:31:91:80:
                    b6:03:16:1f:c6:73:20:46:93:a6:06:91:45:df:a3:
                    41:94:18:fc:c0:69:0a:c5:96:7d:a8:37:10:90:91:
                    fc:c0:0a:14:3b:d8:51:4b:08:49:d2:27:4c:7b:9e:
                    4a:70:b2:99:b0:9b:ca:a8:05:d4:5a:0d:c3:e5:9d:
                    b0:27:ed:0c:62:ea:9e:a9:5e:17:b6:d3:95:61:50:
                    cc:74:56:51:21:6d:f9:0e:c0:1c:09:cb:ff:13:68:
                    47:39:2a:5d:91:bd:22:85:0f:83:64:b1:2c:6c:43:
                    eb:17:29:41:41:f2:81:36:dc:dc:1e:c6:85:f9:09:
                    70:19:53:37:29:ee:48:8c:28:6d:1d:fb:8b:3b:f9:
                    42:d4:a5:57:b4:9e:2a:4a:c4:1b:8d:ea:23:5c:33:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:17:CB:49:EA:16:1D:F5:4B:0D:BA:99:BA:0F:74:44:85:46:4F
            X509v3 Authority Key Identifier:
                keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:5a:48:0d:11:6b:24:42:9b:08:0a:30:c8:0a:8a:cf:9c:
         97:db:e9:24:00:f9:8a:b4:8a:68:c6:9d:48:43:0d:45:f1:0c:
         80:dc:62:b4:97:7e:ab:76:c9:91:97:26:e4:d9:2b:7e:88:c5:
         c9:39:6e:aa:47:ce:ac:99:1b:48:fb:93:c9:c1:25:a7:ff:0b:
         39:7b:f3:41:64:db:76:0e:bc:88:cd:13:c1:60:dc:40:2f:95:
         1d:18:ee:17:bb:ca:e7:75:af:b1:54:58:73:a9:33:a2:67:b3:
         dd:1a:52:0f:af:24:3e:24:f2:80:fa:c1:84:53:5d:99:76:af:
         8b:59:cf:b3:31:01:72:76:af:70:70:05:b8:ff:7f:28:8e:7e:
         3d:f1:2c:f7:c4:c3:25:ef:16:9f:bb:c9:ad:be:c5:75:bc:42:
         dd:2d:2e:3f:79:26:97:ce:16:44:56:4c:df:4b:08:ce:d5:ca:
         d1:e8:25:04:5d:16:68:ea:03:f5:ab:ae:26:c6:e3:94:b3:e8:
         06:fc:0a:96:02:1a:6f:d0:86:77:2f:cd:7e:35:ac:73:6e:d1:
         7a:b1:7e:2d:d4:03:40:04:d6:c7:f2:4b:79:4b:f6:2a:f4:19:
         f4:60:ac:51:11:5e:0b:6b:3c:0a:50:37:a8:fb:60:08:34:97:
         95:6b:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:21:16 2025 by rpki-client