This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=
Subject key identifier:   D3:46:CA:E2:0E:8D:92:30:37:52:56:D3:72:65:0D:45:2E:8B:17:40
Certificate issuer:       /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
Certificate serial:       01ACCB31C45B100511520E989F7CF384D2027173
Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 05 Nov 2025 10:03:02 +0000
ROA not before:           Wed 05 Nov 2025 09:58:02 +0000
ROA not after:            Wed 04 Nov 2026 10:03:02 +0000
asID:                     135478
IP address blocks:        103.129.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl
                          rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 07:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:cb:31:c4:5b:10:05:11:52:0e:98:9f:7c:f3:84:d2:02:71:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3
        Validity
            Not Before: Nov  5 09:58:02 2025 GMT
            Not After : Nov  4 10:03:02 2026 GMT
        Subject: CN=D346CAE20E8D9230375256D372650D452E8B1740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:11:40:37:da:48:51:9b:3e:ae:55:7e:fa:
                    7d:b7:e7:45:7a:78:58:46:3b:dc:2d:c4:94:2e:0a:
                    73:c1:9a:ba:87:f2:ad:1f:37:a6:23:a0:e6:ad:37:
                    c3:04:10:3c:b2:62:12:3f:c1:38:c9:ba:29:cf:17:
                    fe:59:4a:49:2e:99:7d:08:9f:20:4c:8b:b6:65:5a:
                    bb:19:93:7a:c4:33:9b:e4:e7:4a:a5:b7:4c:c9:12:
                    c8:5a:ec:cd:ed:70:32:56:69:a2:3a:e1:be:be:0a:
                    49:05:b7:3b:7e:4a:13:ee:39:7a:8a:ab:49:aa:fc:
                    96:75:da:b7:98:c6:ba:df:80:61:98:ee:c0:3c:51:
                    06:33:a5:d8:c3:d0:46:cb:06:0f:3d:30:01:3d:7d:
                    f1:3e:d3:cf:86:02:d4:93:97:c1:cb:ca:9f:19:dc:
                    0d:38:2b:94:f1:1f:cf:bc:ae:80:8f:cf:ba:7e:88:
                    26:59:5e:3c:a3:17:0b:d0:f7:d8:8b:bd:4b:5f:10:
                    90:f8:6f:cd:62:6a:50:39:5c:9a:3c:c4:e2:73:ff:
                    9b:d3:c8:22:07:7d:c6:07:14:2d:cd:2a:a1:c9:07:
                    7d:86:06:75:66:80:ba:4b:4c:fc:88:23:c3:69:30:
                    dc:85:6e:06:4d:bf:bc:07:a1:3f:6d:43:24:e0:b6:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:46:CA:E2:0E:8D:92:30:37:52:56:D3:72:65:0D:45:2E:8B:17:40
            X509v3 Authority Key Identifier:
                keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:67:19:6e:01:c2:26:2b:37:3f:28:84:5b:a5:4e:1d:65:
         c0:e9:65:63:c2:fd:3d:43:69:ed:14:6d:f7:5f:91:b8:22:1a:
         59:c2:26:2e:7e:f6:aa:7e:86:76:7e:e8:74:e1:61:7a:0e:d5:
         1a:89:2a:6c:0a:ee:2b:8a:01:b4:73:f2:0d:12:c9:26:f6:fb:
         d6:4c:dd:9b:22:ff:1e:2a:ea:79:34:02:7e:2c:56:f6:5c:b1:
         b4:43:e4:41:e2:06:53:91:51:2b:46:4d:6e:76:e5:c8:31:01:
         10:a5:c8:c0:ff:28:de:a6:83:ee:60:1f:dc:2b:88:03:13:e0:
         97:65:b1:62:87:96:65:30:5a:a3:f4:66:ca:fb:b5:fc:4e:06:
         10:c7:71:30:a5:85:a3:6b:57:22:60:f6:a4:8a:63:eb:1d:ff:
         07:8d:7d:7d:3c:c9:20:12:88:1e:ed:bb:55:7e:af:4f:f7:6d:
         56:ca:df:a4:90:d4:fc:39:e5:8d:9e:67:f8:ca:9d:75:e5:d3:
         d2:ea:0f:40:ae:00:80:65:07:ec:84:e8:34:81:37:21:86:27:
         42:bc:1e:67:bf:3c:4a:15:6d:e5:31:77:11:c5:93:61:29:6c:
         de:53:b2:13:a2:e3:f9:3f:54:fa:36:30:83:a2:89:83:6e:50:
         5c:15:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:48:32 2025 by rpki-client