This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa
File:                     3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa (raw, json)
Hash identifier:          Im9caE29LrIEyyw1N4Depx5/vTj8Y8+2ed9BSKso6Pk=
Subject key identifier:   C2:6C:51:0D:25:77:7A:25:17:7F:92:A6:85:13:AB:80:68:CE:0F:B0
Certificate issuer:       /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF
Certificate serial:       307C59EE35C679B8EEFDBC57B4A12C895169F22D
Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa
Signing time:             Thu 11 Dec 2025 06:58:11 +0000
ROA not before:           Thu 11 Dec 2025 06:53:11 +0000
ROA not after:            Thu 10 Dec 2026 06:58:11 +0000
asID:                     140416
IP address blocks:        103.148.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl
                          rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 02:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7c:59:ee:35:c6:79:b8:ee:fd:bc:57:b4:a1:2c:89:51:69:f2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF
        Validity
            Not Before: Dec 11 06:53:11 2025 GMT
            Not After : Dec 10 06:58:11 2026 GMT
        Subject: CN=C26C510D25777A25177F92A68513AB8068CE0FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4c:58:e1:bf:42:f8:9f:eb:1e:0e:f7:ba:d2:
                    d3:ba:28:3a:57:74:76:67:2e:10:f9:02:ca:f2:eb:
                    ba:6e:8a:6d:2c:d8:af:16:db:22:ee:8c:86:49:8c:
                    3f:dd:08:0a:9f:c8:c8:36:b9:42:df:e2:a5:2b:03:
                    fa:24:72:ef:91:06:ff:09:df:d0:3d:98:0e:b7:4b:
                    fd:fe:1e:21:10:26:5c:39:b3:4c:46:97:7d:24:01:
                    ba:27:8b:be:44:17:00:99:3b:33:d6:91:fe:a6:ab:
                    09:08:22:39:d8:01:8e:9d:00:2f:af:ba:21:8c:65:
                    c0:8b:b7:e3:ef:fd:4c:8b:e7:da:ff:ce:f3:8d:20:
                    d0:48:7a:fa:cc:18:97:1d:e5:06:c1:3c:c7:3b:31:
                    45:0d:c1:04:ff:f5:a5:e8:31:d6:bd:c5:45:78:cc:
                    bd:c2:cd:75:b4:87:ff:f1:7c:ca:f1:67:d1:d1:0c:
                    c6:85:9e:a5:cf:7d:5f:f5:c9:e0:86:c9:20:b6:c7:
                    f8:60:ab:f5:17:f4:9a:dd:de:77:92:8d:5e:b8:2c:
                    2a:02:bf:4f:27:5b:e1:f3:1d:3e:98:c7:79:a9:a6:
                    c1:35:53:91:b6:08:cf:83:2f:0f:ce:be:69:cd:57:
                    22:20:92:e9:2d:7a:3b:cf:78:12:b6:d3:52:42:84:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6C:51:0D:25:77:7A:25:17:7F:92:A6:85:13:AB:80:68:CE:0F:B0
            X509v3 Authority Key Identifier:
                keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/3130332e3134382e38362e302f32332d3234203d3e20313430343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:84:cb:59:2b:4f:05:42:7c:30:d3:aa:b6:c7:7d:c2:82:
         a1:ea:61:e1:01:6f:8d:03:4d:f7:8f:db:93:85:d6:05:07:dc:
         c2:6c:be:4f:2c:fe:1b:9f:c2:b7:88:c7:7b:10:0c:3b:af:11:
         63:83:98:d0:5f:bf:34:4f:ad:53:20:cc:7f:f7:17:ad:ed:92:
         c0:48:96:0d:85:5c:f3:61:5c:25:b4:93:60:06:91:99:e3:d4:
         81:3f:4d:ee:dd:20:73:ad:6f:fd:9c:db:77:36:5d:0b:9a:4c:
         65:96:dc:b3:3c:44:75:68:d7:e7:0b:bc:db:6e:1f:ff:24:9c:
         b9:ff:45:3a:6e:24:d0:d2:51:1c:60:cf:46:a9:c8:79:c1:8f:
         35:12:96:9c:44:87:84:40:c4:79:60:c2:3e:88:13:9e:bc:d4:
         74:2e:87:4e:ec:75:1f:7e:74:c6:6f:6d:1c:97:4e:b2:51:af:
         d2:7f:74:a8:ca:25:d5:d0:4a:af:3c:7c:6c:71:16:13:81:92:
         2c:13:45:1f:d7:80:4e:71:82:c6:50:70:91:da:fc:33:74:31:
         00:c6:22:32:3f:5f:d6:d0:08:0b:e9:61:25:18:e4:c3:65:01:
         63:a5:c9:2e:40:fa:fb:3e:3c:83:51:1d:c7:a4:50:aa:92:24:
         81:49:07:7d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMHxZ7jXGebju/bxXtKEsiVFp8i0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz
NkZCQjZBRjAeFw0yNTEyMTEwNjUzMTFaFw0yNjEyMTAwNjU4MTFaMDMxMTAvBgNV
BAMTKEMyNkM1MTBEMjU3NzdBMjUxNzdGOTJBNjg1MTNBQjgwNjhDRTBGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTFjhv0L4n+seDve60tO6KDpX
dHZnLhD5Asry67puim0s2K8W2yLujIZJjD/dCAqfyMg2uULf4qUrA/okcu+RBv8J
39A9mA63S/3+HiEQJlw5s0xGl30kAboni75EFwCZOzPWkf6mqwkIIjnYAY6dAC+v
uiGMZcCLt+Pv/UyL59r/zvONINBIevrMGJcd5QbBPMc7MUUNwQT/9aXoMda9xUV4
zL3CzXW0h//xfMrxZ9HRDMaFnqXPfV/1yeCGySC2x/hgq/UX9Jrd3neSjV64LCoC
v08nW+HzHT6Yx3mppsE1U5G2CM+DLw/OvmnNVyIgkuktejvPeBK201JChBELAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwmxRDSV3eiUXf5KmhROrgGjOD7AwHwYDVR0j
BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0
NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC
QjZBRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MThkZWEyLWE4OTEtNDllZi1h
MDZmLWZlN2YyYzgzMjU4Yi8wLzMxMzAzMzJlMzEzNDM4MmUzODM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5RWMA0GCSqG
SIb3DQEBCwUAA4IBAQA9O4TLWStPBUJ8MNOqtsd9woKh6mHhAW+NA033j9uThdYF
B9zCbL5PLP4bn8K3iMd7EAw7rxFjg5jQX780T61TIMx/9xet7ZLASJYNhVzzYVwl
tJNgBpGZ49SBP03u3SBzrW/9nNt3Nl0LmkxlltyzPER1aNfnC7zbbh//JJy5/0U6
biTQ0lEcYM9Gqch5wY81EpacRIeEQMR5YMI+iBOevNR0LodO7HUffnTGb20cl06y
Ua/Sf3SoyiXV0EqvPHxscRYTgZIsE0Uf14BOcYLGUHCR2vwzdDEAxiIyP1/W0AgL
6WElGOTDZQFjpckuQPr7PjyDUR3HpFCqkiSBSQd9
-----END CERTIFICATE-----
Generated at Mon Dec 15 09:06:37 2025 by rpki-client