This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
File:                     3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (raw, json)
Hash identifier:          ZQvUbXHu4oitDR8z2M5lRxDV5Dfgz07kS0tfmIPrPQU=
Subject key identifier:   F0:1D:90:CB:01:AC:58:03:9B:77:AF:89:A9:9E:BA:A6:9E:23:1F:D8
Certificate issuer:       /CN=EB6A398D686553919657E094022E843191F4573E
Certificate serial:       081AEDB6730990C21C456C3BC31724E7C172E595
Authority key identifier: EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
Signing time:             Sun 21 Dec 2025 04:00:00 +0000
ROA not before:           Sun 21 Dec 2025 03:55:00 +0000
ROA not after:            Sun 20 Dec 2026 04:00:00 +0000
asID:                     149400
IP address blocks:        103.181.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl
                          rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:ed:b6:73:09:90:c2:1c:45:6c:3b:c3:17:24:e7:c1:72:e5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB6A398D686553919657E094022E843191F4573E
        Validity
            Not Before: Dec 21 03:55:00 2025 GMT
            Not After : Dec 20 04:00:00 2026 GMT
        Subject: CN=F01D90CB01AC58039B77AF89A99EBAA69E231FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:84:49:c8:1a:1c:c4:af:dd:cd:21:da:0a:
                    c9:47:42:a7:b5:9e:94:dd:1d:66:82:f4:6d:40:7a:
                    d1:e5:5f:70:ea:d5:01:7f:d8:6e:a9:99:cb:0c:ea:
                    b9:d6:12:89:66:20:8e:f8:a4:6e:4e:f0:db:6e:3f:
                    6a:e1:0a:34:b0:9c:44:13:e9:b3:b1:d4:66:f8:e8:
                    e1:84:d0:8d:cc:d4:ca:b9:f9:4c:e4:43:58:12:86:
                    8e:0f:29:b1:a5:8b:05:af:55:a6:25:5f:ca:a1:60:
                    8e:1f:22:34:a0:3b:72:aa:e1:3b:d5:f0:3c:1d:26:
                    a2:33:f6:e9:9a:af:e9:7a:51:fd:3c:2c:86:c1:61:
                    5c:90:6b:60:6e:45:c6:7e:14:fb:81:29:a5:af:ea:
                    52:0e:5b:d8:ef:c3:d5:e8:76:4c:6b:1d:0e:69:30:
                    a1:27:bf:06:03:8e:b9:37:61:92:f6:0c:38:34:93:
                    be:29:e4:6b:62:86:83:c5:76:dd:09:ca:dd:aa:fb:
                    c5:35:3b:07:93:14:47:8b:34:c8:dd:31:21:8f:be:
                    cb:97:40:a9:79:2b:a0:ab:9b:7f:8f:e0:9a:45:2d:
                    a0:b0:58:19:d8:a4:b5:66:25:94:52:ce:95:f8:5d:
                    38:30:a4:30:8d:91:2c:b2:a2:57:a4:19:51:29:40:
                    43:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:90:CB:01:AC:58:03:9B:77:AF:89:A9:9E:BA:A6:9E:23:1F:D8
            X509v3 Authority Key Identifier:
                keyid:EB:6A:39:8D:68:65:53:91:96:57:E0:94:02:2E:84:31:91:F4:57:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/EB6A398D686553919657E094022E843191F4573E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB6A398D686553919657E094022E843191F4573E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:e5:30:42:01:ab:64:86:16:74:bc:e8:b4:d7:8f:25:4b:
         8f:6d:bc:8e:b1:ef:08:c3:8c:e0:31:8d:e2:eb:09:c0:d5:77:
         fa:04:62:a9:a2:7b:0e:44:65:56:09:43:4f:73:8a:f5:f1:7d:
         2c:36:eb:ba:cb:c8:35:0d:55:38:d2:6b:9c:ef:71:c7:bd:ee:
         3c:da:10:a5:3b:c3:b1:e9:d3:52:77:b6:7b:63:d4:e6:37:09:
         d7:3b:78:8b:58:14:0c:ec:af:ab:1c:1b:16:a7:fe:8f:b2:a5:
         07:60:1f:d5:8e:9a:d1:58:f5:38:78:06:75:52:6a:8e:e1:3d:
         01:24:1f:b4:90:e2:30:bd:14:57:43:92:f6:b6:20:c6:bb:0e:
         5d:b1:c6:e4:e6:92:c8:38:f5:ea:ab:34:ec:bf:72:ff:a9:33:
         ef:d0:4a:3b:8d:17:6c:3a:68:18:4a:58:8c:63:5b:08:38:43:
         33:d8:4c:81:ca:d0:7a:23:54:fd:5b:2c:70:13:40:94:ed:c6:
         d0:29:ff:70:46:e9:82:1a:f1:d3:22:38:13:04:56:59:ff:e2:
         1a:27:3c:bc:5c:18:d2:ef:30:05:aa:3b:1b:fc:f0:35:2b:a0:
         9b:41:d5:47:3e:d6:a5:3b:d7:ae:2b:bb:3d:81:62:bb:8c:7a:
         f4:87:8c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:26:53 2026 by rpki-client