This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa
File:                     3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (raw, json)
Hash identifier:          UWEmni5SiUDfWBGShl48lbgoCd8oAI+lOk/JRAr7L3s=
Subject key identifier:   68:33:30:2E:AB:F1:6E:24:BB:9C:1D:2E:62:7C:3B:E4:DE:1A:B9:5E
Certificate issuer:       /CN=1D5FBED26611C99226941DBD91139C594B399F46
Certificate serial:       28D7151DB7B03E23717EAFB9D99C9E0974BF2BA3
Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa
Signing time:             Sat 24 Jan 2026 16:00:02 +0000
ROA not before:           Sat 24 Jan 2026 15:55:02 +0000
ROA not after:            Sat 23 Jan 2027 16:00:02 +0000
asID:                     147134
IP address blocks:        103.176.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl
                          rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 21:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d7:15:1d:b7:b0:3e:23:71:7e:af:b9:d9:9c:9e:09:74:bf:2b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46
        Validity
            Not Before: Jan 24 15:55:02 2026 GMT
            Not After : Jan 23 16:00:02 2027 GMT
        Subject: CN=6833302EABF16E24BB9C1D2E627C3BE4DE1AB95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c1:21:18:a6:a0:ac:02:97:b7:42:b6:be:e7:
                    5e:48:4f:2f:e7:3b:8f:d3:35:c5:f6:9b:d5:b8:cf:
                    8c:18:af:fa:c9:46:f4:f8:4d:4d:67:d3:0b:a1:ed:
                    11:15:b3:09:18:60:a7:7a:3e:f6:a0:d0:e1:24:11:
                    c9:cd:06:3b:cc:00:21:fb:cd:8d:18:d8:cf:d9:64:
                    97:3e:7b:f7:08:81:2b:e1:82:ee:e1:1c:30:fa:93:
                    90:fe:31:fc:fe:88:49:62:68:85:fd:d4:df:af:56:
                    ca:66:f5:0f:09:90:0d:b8:43:ed:84:b8:1f:77:8a:
                    fb:28:72:90:46:8a:8f:5d:52:c7:47:91:86:ff:0d:
                    59:de:b9:9e:c9:b2:64:77:4a:9e:ce:32:b0:59:72:
                    fa:2c:8f:25:d5:d4:a5:8f:36:39:57:29:81:09:f9:
                    2d:41:47:f7:e4:fe:54:83:28:1f:ef:7a:63:3f:d9:
                    20:b4:32:0e:13:c1:8e:83:42:09:68:5d:95:76:77:
                    75:24:ed:72:3b:21:68:ba:a0:da:94:f7:70:5e:ba:
                    9e:55:8c:b1:ba:ed:b8:53:84:f2:bd:b2:e9:3f:39:
                    82:c6:bf:61:87:15:27:b7:ec:07:e3:5d:c6:5b:16:
                    f4:48:c9:cc:32:f0:46:61:98:9c:64:ed:a6:d1:5b:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:33:30:2E:AB:F1:6E:24:BB:9C:1D:2E:62:7C:3B:E4:DE:1A:B9:5E
            X509v3 Authority Key Identifier:
                keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:17:ae:16:35:af:04:1f:82:a6:b5:f3:3c:7b:fd:9c:96:d6:
         87:67:55:c2:fb:db:e7:6c:f8:da:07:5a:88:ed:7d:86:a2:9e:
         0b:8b:6c:ce:1f:cc:ac:9b:1d:5d:68:3d:ad:29:de:0d:0e:58:
         7a:fc:17:33:2b:1c:07:bb:6a:5d:81:5a:80:17:e5:af:b8:9b:
         a7:da:cb:92:7c:7f:bc:1e:37:e7:e8:1b:54:bf:f8:58:58:0b:
         99:87:f9:1a:25:e0:d8:13:ac:cf:e2:5e:ad:af:2e:fc:bb:cc:
         54:cf:c5:65:a9:22:fd:60:18:df:6b:23:08:5f:99:33:d2:3a:
         18:b5:c7:a3:32:ab:7f:d2:5f:e0:16:ca:d4:83:be:3d:d0:62:
         4a:c3:2f:1a:7e:02:06:b7:79:ed:f8:66:3d:c1:51:a2:b6:e1:
         c1:be:f1:e0:92:e0:f5:f7:03:81:c5:67:49:a7:35:98:0c:10:
         d4:e0:bd:18:13:c8:33:24:da:1e:8e:59:e2:56:6c:94:17:e4:
         db:64:e5:6b:59:65:1e:92:fc:24:42:9a:3a:e5:bd:66:b7:94:
         c2:a2:66:72:f2:1d:69:30:41:d2:4a:cc:4a:18:b4:be:82:50:
         02:d0:24:78:e8:81:1a:8a:63:38:56:2e:ef:c9:a2:1c:44:6f:
         6a:74:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:52:40 2026 by rpki-client