This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa
File:                     3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=
Subject key identifier:   6C:B7:C9:D1:4F:1C:D7:61:8E:B3:F9:F0:CD:F5:D1:AF:6A:5B:F8:BA
Certificate issuer:       /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
Certificate serial:       5879F1036810DF995761FE3CAC9470FE04F95F6B
Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa
Signing time:             Thu 13 Nov 2025 05:00:01 +0000
ROA not before:           Thu 13 Nov 2025 04:55:01 +0000
ROA not after:            Thu 12 Nov 2026 05:00:01 +0000
asID:                     140443
IP address blocks:        103.79.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl
                          rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 02:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:79:f1:03:68:10:df:99:57:61:fe:3c:ac:94:70:fe:04:f9:5f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0
        Validity
            Not Before: Nov 13 04:55:01 2025 GMT
            Not After : Nov 12 05:00:01 2026 GMT
        Subject: CN=6CB7C9D14F1CD7618EB3F9F0CDF5D1AF6A5BF8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:97:a0:af:b6:59:ab:66:60:e1:77:5e:22:3b:
                    81:07:15:54:ca:5c:78:45:17:b0:09:51:0c:91:65:
                    1b:47:5d:b8:ad:75:7a:30:cd:c3:14:f2:f6:17:01:
                    51:05:34:4d:d9:d4:a0:51:03:3d:2a:0b:2a:d0:56:
                    d4:a9:41:c4:dc:02:dc:6e:74:6d:45:a7:18:1b:eb:
                    5f:e1:d4:46:42:60:6e:d3:b1:c8:22:ec:94:9b:78:
                    0b:ae:87:28:04:bf:0f:aa:85:9a:1f:64:54:08:f6:
                    66:2b:90:c0:b1:9c:c0:e5:b4:8f:56:63:ea:60:8f:
                    4b:99:a6:bf:10:12:9b:36:5a:05:20:af:4d:63:ad:
                    da:e4:b4:07:94:5b:18:39:29:50:27:c6:e8:ae:ee:
                    7a:d6:4a:e6:9d:eb:cd:2d:36:58:20:93:c0:89:a0:
                    4a:06:bc:9e:d9:28:52:c8:21:c7:9a:a9:a9:70:d4:
                    69:25:92:6c:2a:8c:fb:d0:62:6c:62:fc:a1:a2:c7:
                    35:de:bd:e9:41:a6:20:70:c5:7c:0d:cb:b6:73:ee:
                    9b:d7:21:21:01:fe:47:bb:c0:5e:a4:f8:e9:46:39:
                    aa:30:1c:d6:a1:51:20:72:1d:31:6b:42:5d:4d:45:
                    d6:1e:90:2c:81:04:3a:8b:8f:df:5e:25:55:b6:39:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B7:C9:D1:4F:1C:D7:61:8E:B3:F9:F0:CD:F5:D1:AF:6A:5B:F8:BA
            X509v3 Authority Key Identifier:
                keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:6a:f3:f1:d9:9e:fe:dd:59:2d:0f:87:4a:84:09:a4:96:
         ae:ce:67:87:8d:de:62:60:d8:7b:02:d9:79:88:de:72:85:40:
         d3:4b:6a:6b:a3:60:1b:e1:03:e7:7f:55:da:3c:1b:c2:3e:a3:
         a3:a4:42:cf:96:52:ea:5b:bf:dd:f6:aa:ad:f4:28:95:66:a3:
         74:24:67:70:c0:38:98:b5:b6:aa:e5:9e:9f:4f:c6:58:81:25:
         7d:6f:b2:46:23:97:e4:52:8a:6b:27:c9:26:27:e1:ed:26:80:
         cd:76:f1:5a:4f:94:f8:46:4f:d9:66:af:cc:dc:b1:e1:99:f8:
         1a:0e:d4:70:b0:0f:79:9c:cc:fb:79:f4:02:be:a2:0d:bf:3c:
         72:51:10:75:f5:a8:fa:26:ab:80:ff:16:f1:5f:be:da:22:ee:
         c2:9c:8b:50:8f:1d:a1:39:4c:c9:71:75:f2:73:cf:aa:ef:af:
         0b:d9:6c:7a:99:2b:87:0a:49:2a:41:71:a7:94:fc:45:2a:0d:
         bf:71:bf:5f:04:53:45:ed:7f:a3:88:a0:5c:54:a1:6f:6e:af:
         2f:e7:82:78:af:ba:df:93:88:0c:ab:00:a2:c6:69:f3:57:47:
         db:25:7f:28:8c:96:9d:bf:0b:84:2f:35:34:e1:39:4f:a0:a3:
         46:50:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:29:00 2025 by rpki-client