This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/3130332e36372e38322e302f32332d3234203d3e20313532303131.roa
File:                     3130332e36372e38322e302f32332d3234203d3e20313532303131.roa (raw, json)
Hash identifier:          xozAiF19qdvD8L8pC2OGg0/fqZR+yELFs8DYCAlXKWU=
Subject key identifier:   20:1A:F9:67:5E:CF:B0:AB:4A:7A:41:13:AB:3B:AE:E6:98:7B:09:4C
Certificate issuer:       /CN=629890514AA221B57B4953527F103DA692ECA8E7
Certificate serial:       5D998DC20662C27044968ED9845EC342EAFEB9E8
Authority key identifier: 62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/3130332e36372e38322e302f32332d3234203d3e20313532303131.roa
Signing time:             Mon 22 Sep 2025 16:00:01 +0000
ROA not before:           Mon 22 Sep 2025 15:55:01 +0000
ROA not after:            Mon 21 Sep 2026 16:00:01 +0000
asID:                     152011
IP address blocks:        103.67.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl
                          rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:99:8d:c2:06:62:c2:70:44:96:8e:d9:84:5e:c3:42:ea:fe:b9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=629890514AA221B57B4953527F103DA692ECA8E7
        Validity
            Not Before: Sep 22 15:55:01 2025 GMT
            Not After : Sep 21 16:00:01 2026 GMT
        Subject: CN=201AF9675ECFB0AB4A7A4113AB3BAEE6987B094C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:cf:b8:f5:dd:bf:51:bf:20:bc:a1:47:8c:
                    98:05:e2:ab:37:5e:69:56:69:e0:18:7c:ef:23:04:
                    05:de:5d:93:e0:39:dc:21:7c:b1:27:62:57:87:91:
                    42:d9:b7:26:86:be:23:d4:c4:f2:79:b7:54:15:8e:
                    55:7d:c9:94:79:cf:15:be:be:1c:b5:c5:36:8f:42:
                    bc:59:18:27:b2:fa:44:3e:ef:26:11:ae:8a:ce:e6:
                    72:91:45:f2:be:c6:7c:7b:0a:94:39:7b:54:9a:19:
                    be:93:cd:b5:04:46:16:1a:f2:00:b7:16:25:6d:f6:
                    67:66:3c:f0:0e:53:62:3f:18:94:64:0e:c6:4e:8d:
                    db:01:eb:2f:8b:54:6e:b3:e3:5a:d5:f6:31:b6:7b:
                    6c:08:a1:2b:19:48:77:8b:5d:96:a2:09:70:52:13:
                    a9:32:4b:5b:11:e7:ab:92:e9:f0:6a:af:e7:cd:c0:
                    f9:51:5c:59:0e:e3:4b:18:35:cf:51:60:20:13:ab:
                    e8:4d:af:ad:dd:7b:d8:e3:94:db:bb:12:6b:2a:44:
                    0d:a9:51:59:44:0a:2a:dc:36:34:4c:14:57:f1:00:
                    6a:8a:ea:83:5f:1e:33:93:9b:6e:61:05:9d:25:fb:
                    ff:64:ea:bb:ae:0e:23:ce:09:4d:e9:d4:20:c4:7a:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1A:F9:67:5E:CF:B0:AB:4A:7A:41:13:AB:3B:AE:E6:98:7B:09:4C
            X509v3 Authority Key Identifier:
                keyid:62:98:90:51:4A:A2:21:B5:7B:49:53:52:7F:10:3D:A6:92:EC:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/629890514AA221B57B4953527F103DA692ECA8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/629890514AA221B57B4953527F103DA692ECA8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd6e147f-1304-4e69-951c-89310dfe859e/0/3130332e36372e38322e302f32332d3234203d3e20313532303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e1:d4:7a:af:3d:d4:eb:87:c4:09:25:33:b7:af:7d:b6:56:41:
         04:5c:58:ef:98:60:b8:13:49:f6:8a:00:7f:a1:cf:e0:a8:fb:
         f9:f7:b0:84:7e:bd:3a:13:c8:57:8f:1e:f5:35:6e:88:76:d0:
         4f:dc:3e:2c:e5:1f:ba:61:a7:79:81:ac:a8:f5:fd:f8:f8:b9:
         22:c9:7c:b2:3c:64:ea:73:b0:3e:59:36:59:5d:da:96:0d:61:
         13:3f:51:90:01:e9:d8:40:de:20:c6:e3:ce:9f:80:82:c2:d8:
         e0:f2:0d:12:07:a8:87:4f:12:33:ca:4b:09:76:40:07:3c:28:
         b5:76:17:d1:c3:8c:08:3d:83:fc:e6:75:7e:5e:58:d3:dd:3a:
         c6:08:a0:f1:e9:64:11:58:8d:bc:22:24:ed:fc:bf:9f:8c:68:
         fd:f4:e3:d4:56:c3:b5:17:9c:0a:94:7f:f7:e9:7b:2c:5e:27:
         4c:7a:c8:3d:ee:46:61:2e:31:80:6b:6c:f9:19:4b:dc:90:70:
         bb:57:5f:6a:4c:37:92:66:53:cd:43:ee:2c:c3:21:67:80:1b:
         6e:fa:49:48:03:2e:99:49:91:95:45:87:f9:17:3a:6c:7f:a4:
         9a:46:9e:6b:48:4b:dc:95:5f:7a:5d:ae:b7:b1:f4:ef:31:04:
         69:76:3a:33
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXZmNwgZiwnBElo7ZhF7DQur+uegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5
MkVDQThFNzAeFw0yNTA5MjIxNTU1MDFaFw0yNjA5MjExNjAwMDFaMDMxMTAvBgNV
BAMTKDIwMUFGOTY3NUVDRkIwQUI0QTdBNDExM0FCM0JBRUU2OTg3QjA5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yM+49d2/Ub8gvKFHjJgF4qs3
XmlWaeAYfO8jBAXeXZPgOdwhfLEnYleHkULZtyaGviPUxPJ5t1QVjlV9yZR5zxW+
vhy1xTaPQrxZGCey+kQ+7yYRrorO5nKRRfK+xnx7CpQ5e1SaGb6TzbUERhYa8gC3
FiVt9mdmPPAOU2I/GJRkDsZOjdsB6y+LVG6z41rV9jG2e2wIoSsZSHeLXZaiCXBS
E6kyS1sR56uS6fBqr+fNwPlRXFkO40sYNc9RYCATq+hNr63de9jjlNu7EmsqRA2p
UVlECircNjRMFFfxAGqK6oNfHjOTm25hBZ0l+/9k6ruuDiPOCU3p1CDEes9jAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUIBr5Z17PsKtKekETqzuu5ph7CUwwHwYDVR0j
BBgwFoAUYpiQUUqiIbV7SVNSfxA9ppLsqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZDZlMTQ3Zi0xMzA0LTRlNjktOTUxYy04OTMxMGRmZTg1OWUvMC82Mjk4OTA1MTRB
QTIyMUI1N0I0OTUzNTI3RjEwM0RBNjkyRUNBOEU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjI5ODkwNTE0QUEyMjFCNTdCNDk1MzUyN0YxMDNEQTY5MkVD
QThFNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkNmUxNDdmLTEzMDQtNGU2OS05
NTFjLTg5MzEwZGZlODU5ZS8wLzMxMzAzMzJlMzYzNzJlMzgzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdDUjANBgkqhkiG
9w0BAQsFAAOCAQEA4dR6rz3U64fECSUzt699tlZBBFxY75hguBNJ9ooAf6HP4Kj7
+fewhH69OhPIV48e9TVuiHbQT9w+LOUfumGneYGsqPX9+Pi5Isl8sjxk6nOwPlk2
WV3alg1hEz9RkAHp2EDeIMbjzp+AgsLY4PINEgeoh08SM8pLCXZABzwotXYX0cOM
CD2D/OZ1fl5Y0906xgig8elkEViNvCIk7fy/n4xo/fTj1FbDtRecCpR/9+l7LF4n
THrIPe5GYS4xgGts+RlL3JBwu1dfakw3kmZTzUPuLMMhZ4AbbvpJSAMumUmRlUWH
+Rc6bH+kmkaea0hL3JVfel2ut7H07zEEaXY6Mw==
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:44:09 2025 by rpki-client