This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa
File:                     3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa (raw, json)
Hash identifier:          02HM7GscUCusvpAfXhQDEcc8ZOiBFbCmHDfQadfKtFE=
Subject key identifier:   4F:CB:B3:C7:D6:C8:E3:57:E3:10:D6:B2:C3:68:12:17:A1:BA:EA:43
Certificate issuer:       /CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
Certificate serial:       1FFA5CF31A3346E5299927285F289F45EEED31AB
Authority key identifier: EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa
Signing time:             Wed 12 Nov 2025 05:00:00 +0000
ROA not before:           Wed 12 Nov 2025 04:55:00 +0000
ROA not after:            Wed 11 Nov 2026 05:00:00 +0000
asID:                     136081
IP address blocks:        103.147.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl
                          rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 21:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:5c:f3:1a:33:46:e5:29:99:27:28:5f:28:9f:45:ee:ed:31:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9
        Validity
            Not Before: Nov 12 04:55:00 2025 GMT
            Not After : Nov 11 05:00:00 2026 GMT
        Subject: CN=4FCBB3C7D6C8E357E310D6B2C3681217A1BAEA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:82:94:53:97:78:ff:ba:ab:25:74:6d:f6:
                    78:ca:2f:df:56:64:51:f4:58:9b:64:3c:1e:a0:e2:
                    24:fb:75:2a:15:73:91:5d:fb:9d:4a:41:6a:a0:db:
                    61:ac:e4:2c:cc:85:7c:71:4b:ae:70:45:33:5d:41:
                    1a:db:a9:35:80:e4:f3:21:92:ae:37:1c:ce:63:ce:
                    74:5e:86:87:cc:e3:71:e8:a2:fa:b7:03:cc:e8:cf:
                    55:66:7b:4d:95:67:7c:4f:4a:6e:7f:e7:10:07:9d:
                    61:80:d0:15:b9:16:6a:35:67:c3:c7:f2:8c:c3:28:
                    e3:a9:79:b0:8d:d9:c1:c9:1c:53:f0:a6:62:99:d1:
                    6d:6e:b5:b6:e2:22:f9:18:f7:87:97:e7:c4:93:5b:
                    27:72:c1:13:f6:f8:3e:73:9b:7f:c4:df:df:9a:d9:
                    1f:6d:39:c0:06:ca:4b:a2:33:8f:63:f0:5c:45:11:
                    63:9f:b6:08:41:29:a1:d3:c9:09:ab:aa:8e:e1:f5:
                    cb:10:0d:9b:27:bc:4c:0b:fa:3b:a5:fd:d4:9c:2e:
                    40:06:05:d9:34:8b:11:97:0e:05:69:79:e7:b7:c2:
                    f8:fc:70:30:4b:9e:81:5c:ca:eb:89:db:dc:b1:c7:
                    7b:e8:e6:dc:b1:81:a7:82:d7:49:1a:14:42:1d:47:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CB:B3:C7:D6:C8:E3:57:E3:10:D6:B2:C3:68:12:17:A1:BA:EA:43
            X509v3 Authority Key Identifier:
                keyid:EB:17:E4:6A:BC:B7:8A:51:E4:C5:B9:A1:4B:D7:81:7F:CC:60:92:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB17E46ABCB78A51E4C5B9A14BD7817FCC6092F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f260586d-b027-4656-b631-05896b543782/0/3130332e3134372e3231382e302f32342d3234203d3e20313336303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:79:eb:cf:2d:5f:01:14:b7:b3:d8:dc:ba:5e:d8:50:fe:
         ae:a1:49:da:a2:91:a2:e1:e1:d3:89:2d:ac:b8:67:1b:8a:e7:
         9f:c0:2b:0c:01:6a:9f:dc:05:d4:84:19:51:e5:92:8f:e5:1f:
         f8:b9:bf:ed:86:e2:63:9d:09:a8:13:60:a4:d2:e0:79:57:f2:
         33:7b:f2:68:44:36:c4:78:2e:a2:d8:5e:2f:12:6c:bb:57:5e:
         fc:76:8a:22:8d:e8:68:7d:3d:9d:4c:75:78:a4:e6:1f:2b:b0:
         fc:ca:f8:f7:c8:0c:13:f3:73:71:d7:c1:58:5a:25:12:e9:7f:
         d6:19:6f:ed:01:af:ce:c7:25:50:1e:8f:44:63:f1:b3:56:ce:
         e2:b2:2f:74:d4:7d:d7:08:36:de:cc:04:3f:7b:53:87:94:20:
         a7:5f:cf:d6:51:a6:21:6b:2b:3f:22:c2:ab:32:0f:61:eb:98:
         30:41:47:a3:bf:80:75:18:81:d1:07:e9:d3:ac:d3:e4:0a:9a:
         1e:ee:e3:42:69:de:fb:5a:30:bc:f1:73:3a:e8:b5:1a:b9:e8:
         3a:7e:93:06:98:94:8d:bb:d1:69:9f:22:4b:1e:7b:b8:57:a1:
         90:dd:8d:35:d7:39:7d:f6:27:3b:55:b5:0a:d7:95:cd:83:53:
         21:2d:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:52 2025 by rpki-client