This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=
Subject key identifier:   7A:2A:E6:60:80:62:4B:4E:40:92:46:A1:62:6F:E7:6D:FF:0B:26:F6
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       51E1085A865E3645C1186BBF894AE942E97F00BB
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa
Signing time:             Wed 29 Oct 2025 03:02:54 +0000
ROA not before:           Wed 29 Oct 2025 02:57:54 +0000
ROA not after:            Wed 28 Oct 2026 03:02:54 +0000
asID:                     136878
IP address blocks:        103.105.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 15:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:08:5a:86:5e:36:45:c1:18:6b:bf:89:4a:e9:42:e9:7f:00:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Oct 29 02:57:54 2025 GMT
            Not After : Oct 28 03:02:54 2026 GMT
        Subject: CN=7A2AE66080624B4E409246A1626FE76DFF0B26F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:82:15:bf:f0:59:c3:b1:40:c8:e0:33:2d:
                    3e:ce:56:5f:49:6c:1b:ce:89:8b:d7:6f:0e:a2:c4:
                    85:82:52:18:9b:a6:81:76:d1:f3:17:68:38:34:3d:
                    36:5e:51:79:48:c2:ea:36:f0:45:84:e6:95:1b:b7:
                    38:c6:cb:d4:69:ad:77:78:e6:e3:8c:89:09:ec:83:
                    91:0c:63:ae:8d:ee:1a:c3:1c:87:ac:1d:71:69:14:
                    3a:ab:6f:07:24:c6:c0:e2:37:3e:b9:7a:3d:1d:d0:
                    8d:1d:24:0b:b4:df:96:19:81:84:85:a8:73:44:cd:
                    92:b8:f4:49:09:db:9f:f4:aa:e0:4a:47:b0:84:8c:
                    75:2e:75:d6:6b:df:62:9a:56:30:d6:87:a6:34:96:
                    b9:41:f8:66:c8:62:3d:96:10:7a:6d:9e:f0:47:27:
                    b8:24:57:40:86:73:ac:2a:35:31:0e:d2:0d:a9:50:
                    36:fc:ca:df:de:e7:7c:f0:f7:18:12:6e:9d:14:a8:
                    bc:ea:4c:65:a7:b0:4f:77:ff:b5:9f:63:ac:75:86:
                    65:66:df:8b:32:ad:f8:d0:b3:06:37:1c:1c:f5:68:
                    1f:5b:a3:28:fe:0e:4e:20:40:00:eb:f7:fc:c1:f7:
                    76:fa:92:de:ad:f2:76:90:9e:f5:36:4e:a3:1c:96:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:E6:60:80:62:4B:4E:40:92:46:A1:62:6F:E7:6D:FF:0B:26:F6
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:27:99:66:64:2e:a7:f6:04:9f:dd:3d:63:02:45:c9:66:
         37:75:17:5e:df:3c:c5:75:12:67:5a:62:8c:f6:34:63:fd:bb:
         8d:25:3e:54:3e:9d:7a:83:76:7f:33:d8:17:df:5e:28:17:0f:
         b0:f7:47:1c:4b:ae:c3:c3:9a:db:3b:6a:92:76:94:1b:e9:45:
         3b:8b:f5:be:4a:3f:b9:5f:b5:79:48:23:46:18:3b:c6:3c:20:
         58:92:c8:91:e1:49:d8:93:cd:98:b3:5c:34:2d:f5:a9:14:c8:
         e2:0d:3c:85:b3:c5:0a:65:54:ad:14:53:52:e5:51:70:5e:06:
         1b:bb:ac:09:68:e1:40:94:f6:9d:ad:a9:84:1c:55:87:60:5b:
         30:99:aa:10:c7:81:14:e5:55:9d:57:2a:44:ed:29:16:0f:ca:
         ef:48:dd:b6:bc:2d:e5:2b:78:fb:f1:18:56:05:2f:2d:83:4d:
         a9:e9:5c:c0:e8:fb:11:f4:fc:af:86:d1:8d:3b:6c:46:46:4a:
         cf:27:d8:81:9f:cc:6d:50:37:58:d3:51:ce:1c:e7:bd:84:c0:
         18:eb:8f:84:b4:0f:e4:1c:f6:b5:11:dc:e3:65:a8:64:0b:c9:
         61:57:45:7b:01:98:3a:5f:cf:18:dc:0a:3f:02:3d:6c:54:93:
         bd:43:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:57:34 2025 by rpki-client