This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=
Subject key identifier:   78:0A:05:8B:84:A4:64:F3:24:FF:36:94:00:89:7D:93:51:53:80:28
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       4E2A2B95323E0B3596301D09D66B7B9121C1D9CB
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa
Signing time:             Wed 29 Oct 2025 03:02:55 +0000
ROA not before:           Wed 29 Oct 2025 02:57:55 +0000
ROA not after:            Wed 28 Oct 2026 03:02:55 +0000
asID:                     136878
IP address blocks:        103.105.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 15:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2a:2b:95:32:3e:0b:35:96:30:1d:09:d6:6b:7b:91:21:c1:d9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Oct 29 02:57:55 2025 GMT
            Not After : Oct 28 03:02:55 2026 GMT
        Subject: CN=780A058B84A464F324FF369400897D9351538028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:43:4f:5b:df:60:dd:8b:9d:fb:31:3b:9a:5e:
                    16:4d:75:0c:bd:02:05:19:09:ea:37:d6:e6:4f:c0:
                    97:c3:9a:7e:13:20:c5:1f:70:6c:fa:18:92:87:e4:
                    3d:b1:49:8f:17:e6:43:5b:eb:ce:ce:ba:4a:ce:28:
                    4c:d0:c2:79:28:55:ec:47:2b:7a:f7:e9:27:7c:ad:
                    d5:f4:7f:62:ff:b9:2c:9a:f2:f6:ea:8d:2e:33:5a:
                    63:d7:1a:39:c3:8a:cb:0f:12:30:66:e4:8a:a9:e1:
                    dd:2e:b0:85:70:a2:20:9c:4d:65:85:25:c3:e0:f8:
                    00:43:71:10:4d:ad:42:e3:8b:42:f3:bc:8d:ce:99:
                    b6:fc:3f:4d:6d:79:3b:5d:c7:b5:db:73:c9:82:fd:
                    49:20:2e:67:9c:5e:80:f6:f9:14:33:91:d7:ce:ee:
                    99:2c:04:cd:70:f2:ff:96:d1:54:df:f4:5f:c6:d0:
                    3d:38:be:d4:80:a2:d9:bc:31:d8:c1:4b:9d:e8:02:
                    0e:87:64:eb:ec:a5:87:3a:5e:46:c3:da:28:22:dc:
                    93:50:1e:69:6d:05:53:2d:b0:8d:a7:34:43:f9:78:
                    7d:f1:7e:c8:61:ef:74:90:eb:fd:fa:f4:be:1e:97:
                    9f:85:cc:44:06:0b:96:e7:0a:45:c5:da:ec:27:b7:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0A:05:8B:84:A4:64:F3:24:FF:36:94:00:89:7D:93:51:53:80:28
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f0:73:e9:78:23:3e:bc:3d:da:c2:52:ac:b0:b7:6c:e9:57:
         d6:c9:63:66:38:bd:59:12:29:67:0d:3d:f9:9d:17:54:b1:1c:
         81:19:91:51:b5:64:d2:11:0d:fe:20:b3:0a:fa:a5:8f:85:4d:
         14:30:dc:fe:9b:c5:98:4e:de:08:54:9c:a3:ff:83:ad:a4:77:
         de:d7:ca:ea:c6:e2:4d:10:bb:2a:0b:5f:7e:84:e9:18:89:77:
         f9:e2:d4:8a:59:46:6d:5c:df:90:71:0b:b1:24:95:b4:1b:ec:
         1b:07:f7:93:ce:14:89:44:b8:5e:fb:5b:54:e5:6f:35:54:d2:
         0d:29:de:8f:45:e5:49:c9:77:66:f9:4b:d3:0b:69:5e:69:c8:
         47:22:04:84:80:a3:cc:4d:26:bf:63:f4:03:7f:27:45:63:c6:
         c3:e3:db:e0:ad:9c:46:cb:2d:7f:8c:9e:38:db:db:db:b8:1d:
         d5:49:45:81:16:d7:6f:ec:c0:81:9a:4d:04:31:bb:bb:9a:ba:
         ba:54:fd:c0:1d:79:16:62:9a:e4:c0:da:46:bb:4c:a0:95:d6:
         21:4f:7a:48:86:cd:81:af:31:b7:b7:f2:c0:0b:61:bf:7f:4a:
         fc:0c:76:6c:e9:ad:82:57:69:b4:5e:b4:5b:ad:2f:84:a2:8a:
         64:a8:5d:b8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTiorlTI+CzWWMB0J1mt7kSHB2cswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0
NzQyNDRCMTAeFw0yNTEwMjkwMjU3NTVaFw0yNjEwMjgwMzAyNTVaMDMxMTAvBgNV
BAMTKDc4MEEwNThCODRBNDY0RjMyNEZGMzY5NDAwODk3RDkzNTE1MzgwMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQ09b32Ddi537MTuaXhZNdQy9
AgUZCeo31uZPwJfDmn4TIMUfcGz6GJKH5D2xSY8X5kNb687OukrOKEzQwnkoVexH
K3r36Sd8rdX0f2L/uSya8vbqjS4zWmPXGjnDissPEjBm5Iqp4d0usIVwoiCcTWWF
JcPg+ABDcRBNrULji0LzvI3Ombb8P01teTtdx7Xbc8mC/UkgLmecXoD2+RQzkdfO
7pksBM1w8v+W0VTf9F/G0D04vtSAotm8MdjBS53oAg6HZOvspYc6XkbD2igi3JNQ
HmltBVMtsI2nNEP5eH3xfshh73SQ6/369L4el5+FzEQGC5bnCkXF2uwntzizAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUeAoFi4SkZPMk/zaUAIl9k1FTgCgwHwYDVR0j
BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG
RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy
NDRCMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MjRmYTlhLWU1ZjMtNDI2NS05
ZTFkLTg0ZTQ1MzU5NjFkMC8wLzMxMzAzMzJlMzEzMDM1MmUzMTM5MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnacMwDQYJ
KoZIhvcNAQELBQADggEBAL7wc+l4Iz68PdrCUqywt2zpV9bJY2Y4vVkSKWcNPfmd
F1SxHIEZkVG1ZNIRDf4gswr6pY+FTRQw3P6bxZhO3ghUnKP/g62kd97XyurG4k0Q
uyoLX36E6RiJd/ni1IpZRm1c35BxC7EklbQb7BsH95POFIlEuF77W1TlbzVU0g0p
3o9F5UnJd2b5S9MLaV5pyEciBISAo8xNJr9j9AN/J0VjxsPj2+CtnEbLLX+Mnjjb
29u4HdVJRYEW12/swIGaTQQxu7uaurpU/cAdeRZimuTA2ka7TKCV1iFPekiGzYGv
Mbe38sALYb9/SvwMdmzprYJXabRetFutL4SiimSoXbg=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:43 2025 by rpki-client