This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa
File:                     3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (raw, json)
Hash identifier:          rlPDCVNSf12GT3UB6JNKAKIcKwQhkdo/IHpQgzId5qI=
Subject key identifier:   68:2A:3F:C7:5C:93:77:D8:B1:9D:18:97:94:E6:6F:24:E1:ED:4C:CF
Certificate issuer:       /CN=22504F83E378CE066AD31D32EB24280CB0F6E560
Certificate serial:       D0767831617E8DB8FA081263E8B8D5E22EEAEF
Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa
Signing time:             Mon 17 Nov 2025 08:33:51 +0000
ROA not before:           Mon 17 Nov 2025 08:28:51 +0000
ROA not after:            Mon 16 Nov 2026 08:33:51 +0000
asID:                     150462
IP address blocks:        103.46.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl
                          rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Dec 2025 13:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d0:76:78:31:61:7e:8d:b8:fa:08:12:63:e8:b8:d5:e2:2e:ea:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560
        Validity
            Not Before: Nov 17 08:28:51 2025 GMT
            Not After : Nov 16 08:33:51 2026 GMT
        Subject: CN=682A3FC75C9377D8B19D189794E66F24E1ED4CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:f4:62:a7:e9:df:87:f3:50:1a:bb:c8:93:
                    ba:ed:f1:0c:51:40:f3:48:3c:8d:96:ee:c8:cb:4a:
                    ff:3d:57:41:05:30:d0:0c:94:4f:6c:6c:ad:b0:e9:
                    2e:8d:fb:1e:33:30:d8:ca:7b:6e:6c:ee:a8:f0:cf:
                    c5:de:cd:93:41:2e:5f:15:cb:c8:78:98:60:d1:58:
                    6a:91:a4:6d:45:ab:39:f6:c9:88:2c:1c:ff:1c:8d:
                    0c:18:f0:ec:9c:fc:34:b1:24:40:ae:65:ad:0c:d3:
                    5b:cb:ec:74:64:db:2f:69:1f:f5:62:e8:82:8f:1e:
                    4e:84:dc:ba:15:1e:00:9e:9b:69:8c:36:43:ea:08:
                    6b:c0:3d:1a:b0:00:d7:5a:2f:0a:06:a9:b6:83:bd:
                    e8:d9:e1:c3:55:cc:60:f3:55:07:69:00:25:6c:7b:
                    d8:82:4f:7c:fc:9d:ca:e9:17:fa:e3:37:31:f5:03:
                    4f:82:8a:56:f4:de:e9:97:91:f6:0e:b8:d2:ad:ac:
                    ef:b1:31:0b:c7:61:f8:02:2b:d7:c2:df:36:30:79:
                    16:cb:c4:41:dc:64:da:da:ac:65:2e:e1:51:6e:58:
                    3e:7c:01:7d:3c:89:a4:cc:76:3c:2f:08:32:55:c9:
                    28:85:0a:f6:75:3c:dd:96:3f:7f:08:76:f8:78:26:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2A:3F:C7:5C:93:77:D8:B1:9D:18:97:94:E6:6F:24:E1:ED:4C:CF
            X509v3 Authority Key Identifier:
                keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:16:9b:32:70:96:8f:fa:d8:73:b6:d5:5f:b9:71:4c:55:01:
         18:58:d1:26:49:b1:c3:3d:1d:c4:e8:b0:1a:6e:ed:e8:63:de:
         3c:7b:88:45:c6:e7:45:6b:63:30:86:0e:33:42:a0:4b:38:67:
         f8:1a:49:7f:7c:75:44:e0:d0:bb:99:01:e2:4b:b1:bf:20:27:
         c9:bc:ef:65:3b:cd:91:5d:cd:90:da:7d:36:d0:af:27:95:8b:
         8c:36:8c:3c:ff:ba:93:42:46:5c:52:00:fd:59:b2:6c:d6:1a:
         e9:31:7a:1b:e2:7a:7e:67:a8:e3:d1:64:e9:39:eb:0b:b9:fb:
         9c:01:ac:78:a8:8d:43:a9:3a:fc:0a:e9:24:4c:87:22:d9:8e:
         b9:7b:12:ab:91:0e:b4:d6:ed:e2:5c:c6:f9:d1:34:ad:d3:f2:
         c7:d8:e2:bb:ab:9b:e6:71:1f:7f:59:19:dc:a5:f3:9b:40:33:
         bf:77:bf:ab:a4:9f:39:b4:78:21:19:fc:59:33:94:0f:f7:93:
         f1:7b:86:2e:ef:33:8c:1a:32:5a:f9:c1:dc:e5:3c:f0:bc:61:
         97:53:0e:9a:cf:1a:ee:5d:37:b3:29:55:e5:45:a8:2a:79:46:
         31:dd:b8:c3:5a:21:fe:d6:82:39:a5:9b:4b:ea:38:45:f6:dc:
         15:26:44:cf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUANB2eDFhfo24+ggSY+i41eIu6u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC
MEY2RTU2MDAeFw0yNTExMTcwODI4NTFaFw0yNjExMTYwODMzNTFaMDMxMTAvBgNV
BAMTKDY4MkEzRkM3NUM5Mzc3RDhCMTlEMTg5Nzk0RTY2RjI0RTFFRDRDQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEfRip+nfh/NQGrvIk7rt8QxR
QPNIPI2W7sjLSv89V0EFMNAMlE9sbK2w6S6N+x4zMNjKe25s7qjwz8XezZNBLl8V
y8h4mGDRWGqRpG1Fqzn2yYgsHP8cjQwY8Oyc/DSxJECuZa0M01vL7HRk2y9pH/Vi
6IKPHk6E3LoVHgCem2mMNkPqCGvAPRqwANdaLwoGqbaDvejZ4cNVzGDzVQdpACVs
e9iCT3z8ncrpF/rjNzH1A0+Cilb03umXkfYOuNKtrO+xMQvHYfgCK9fC3zYweRbL
xEHcZNrarGUu4VFuWD58AX08iaTMdjwvCDJVySiFCvZ1PN2WP38Idvh4Jh+NAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUaCo/x1yTd9ixnRiXlOZvJOHtTM8wHwYDVR0j
BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz
NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2
RTU2MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDMyNDFiLWNmZDEtNGNiYi05
MjE5LWM3YTM2MjM3YzE0OC8wLzMxMzAzMzJlMzQzNjJlMzEzODM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzQzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZy66MA0GCSqG
SIb3DQEBCwUAA4IBAQBBFpsycJaP+thzttVfuXFMVQEYWNEmSbHDPR3E6LAabu3o
Y948e4hFxudFa2Mwhg4zQqBLOGf4Gkl/fHVE4NC7mQHiS7G/ICfJvO9lO82RXc2Q
2n020K8nlYuMNow8/7qTQkZcUgD9WbJs1hrpMXob4np+Z6jj0WTpOesLufucAax4
qI1DqTr8CukkTIci2Y65exKrkQ601u3iXMb50TSt0/LH2OK7q5vmcR9/WRncpfOb
QDO/d7+rpJ85tHghGfxZM5QP95Pxe4Yu7zOMGjJa+cHc5TzwvGGXUw6azxruXTez
KVXlRagqeUYx3bjDWiH+1oI5pZtL6jhF9twVJkTP
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:47:05 2025 by rpki-client