This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa
File:                     AS135457.roa (raw, json)
Hash identifier:          mets9wGAfFgpWdv6mbdX5do/lpd7VUlbp3mPEVeZduw=
Subject key identifier:   9A:82:1C:0B:43:60:86:37:A4:76:A3:EE:80:B9:A6:98:B3:40:CD:96
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       16D0ABE39621F1270DCA581F47D69C83782EE213
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa
Signing time:             Mon 08 Dec 2025 03:49:25 +0000
ROA not before:           Mon 08 Dec 2025 03:44:25 +0000
ROA not after:            Mon 07 Dec 2026 03:49:25 +0000
asID:                     135457
IP address blocks:        203.191.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 09:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d0:ab:e3:96:21:f1:27:0d:ca:58:1f:47:d6:9c:83:78:2e:e2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Dec  8 03:44:25 2025 GMT
            Not After : Dec  7 03:49:25 2026 GMT
        Subject: CN=9A821C0B43608637A476A3EE80B9A698B340CD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:1e:a1:01:c8:72:93:ab:cc:db:48:ca:02:
                    0a:97:1f:00:98:5c:1f:e0:03:b2:f9:73:d5:23:66:
                    2f:3d:ea:25:39:3d:b8:17:19:6a:f7:65:2c:0c:2f:
                    24:c8:7c:b4:87:f0:d3:f7:9a:a7:f0:97:2b:78:a7:
                    72:7d:95:ac:8f:09:38:96:57:13:f0:44:f2:e5:68:
                    ab:cb:fc:9e:84:4a:e4:8f:81:c5:66:c7:d9:2d:4a:
                    7f:09:55:9f:b0:6a:d7:77:17:d4:53:47:54:59:05:
                    95:84:0f:3a:bb:7a:9c:a3:0e:5b:ac:5a:7e:e3:c2:
                    39:01:db:ee:87:49:86:e2:a2:3a:b0:95:47:02:ae:
                    96:a7:03:9c:fa:71:5e:3f:a9:df:6a:a1:50:88:c2:
                    86:ab:03:f5:01:55:de:40:a6:0f:99:a7:cc:73:0b:
                    72:3f:9e:f2:07:ae:ca:ab:79:d3:ea:94:19:cf:8e:
                    f9:8a:fb:d9:0a:52:cd:3f:2a:ec:08:0c:fc:25:61:
                    67:74:ed:69:36:ac:c9:a2:45:84:84:98:4b:f5:20:
                    3b:df:5c:a5:80:70:d4:c9:3f:9f:9e:f3:8b:2c:ce:
                    20:33:f0:18:22:c6:7d:e2:a0:9a:b4:54:94:72:9e:
                    7c:c5:9c:c2:08:5a:cd:59:74:9e:0f:61:b4:20:0c:
                    b0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:82:1C:0B:43:60:86:37:A4:76:A3:EE:80:B9:A6:98:B3:40:CD:96
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/AS135457.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a7:cd:2b:74:ad:6f:d1:ca:ea:e6:b9:2d:4e:cb:1c:f8:b8:
         c4:1f:1a:55:f9:20:62:bc:5a:dc:05:98:73:62:0e:3a:ea:4a:
         b1:18:54:67:6b:d5:7d:f2:96:73:da:d7:65:45:cd:0f:1d:14:
         3f:81:3b:64:1c:5e:53:f4:21:47:6d:fd:91:15:74:08:b8:8d:
         a7:a3:d0:73:0b:8c:db:5b:c6:3f:87:8c:dd:93:cd:6b:08:95:
         27:a7:cd:f5:73:6a:61:73:ef:ae:32:55:7f:1e:d6:e4:d8:a1:
         41:2d:b7:fc:4c:dc:fd:4f:ec:17:7e:97:0b:cd:78:a7:f9:cb:
         2b:e2:e9:4e:c5:18:5e:f8:e0:46:7d:fc:87:7d:71:0a:23:52:
         64:0f:5f:fe:45:ce:4b:70:28:f0:3f:3a:a1:51:ee:4f:b6:4e:
         80:dc:18:6c:02:71:9c:f3:7d:ee:86:40:0c:9c:56:21:71:0e:
         41:5d:c6:88:16:f4:08:67:73:cc:da:d0:48:68:1c:34:09:c8:
         b4:50:ff:bd:1a:b4:42:d1:cf:3c:f3:3e:0b:a4:ed:db:a7:2f:
         85:19:cd:99:62:ea:53:c1:4d:87:65:af:e7:48:07:ba:e4:df:
         e2:c5:81:53:e5:89:4d:93:30:ec:6b:f8:dc:46:df:51:83:7b:
         2d:79:34:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 03:43:27 2025 by rpki-client