This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa
File:                     3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa (raw, json)
Hash identifier:          zh95BFBdCbv/H0EiAO2kNQNsmpUEe+0QlQtPZIBdZcE=
Subject key identifier:   E5:18:CD:68:7A:CD:58:B5:B9:6C:BC:14:74:5A:E2:58:AF:FC:A5:E9
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       7A5E15ACE5642CDEEB2EE74572449FC39C1D0E1F
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa
Signing time:             Thu 22 Jan 2026 12:50:44 +0000
ROA not before:           Thu 22 Jan 2026 12:45:44 +0000
ROA not after:            Thu 21 Jan 2027 12:50:44 +0000
asID:                     151043
IP address blocks:        103.112.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 08:57:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5e:15:ac:e5:64:2c:de:eb:2e:e7:45:72:44:9f:c3:9c:1d:0e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Jan 22 12:45:44 2026 GMT
            Not After : Jan 21 12:50:44 2027 GMT
        Subject: CN=E518CD687ACD58B5B96CBC14745AE258AFFCA5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:18:c5:8a:a5:25:f1:1f:27:65:a4:38:3e:
                    d8:d4:33:e0:77:91:0e:80:ae:e0:68:99:b1:2e:34:
                    7f:24:3b:41:a1:5f:32:d4:4d:d3:a9:8b:6f:50:09:
                    9d:d2:35:41:38:b1:ac:eb:39:7c:4a:b8:25:23:36:
                    38:74:bb:c7:b7:0c:d0:82:f3:3e:76:4f:4c:c7:f8:
                    80:03:ab:86:2c:1a:d7:5f:dd:6b:99:21:27:d0:27:
                    79:2b:76:ec:ef:2e:64:0a:5d:62:63:78:c6:a9:a7:
                    e2:3e:8b:99:2c:7f:fc:ee:95:12:08:13:e8:4e:cb:
                    71:47:e6:a2:53:b3:45:90:77:b4:11:73:f8:ca:d1:
                    50:af:9f:50:22:e7:7c:1a:4c:e5:2f:b6:ed:dd:36:
                    a4:e3:a5:2f:02:be:45:71:43:09:ef:18:9d:0b:1b:
                    9f:2d:39:40:7a:f7:be:27:87:d1:57:10:d1:10:c2:
                    a9:9b:5c:cc:e3:a2:a2:a7:20:4d:b5:00:61:92:48:
                    c8:41:bb:66:dd:62:e3:b5:03:d6:e8:44:d5:8b:10:
                    21:d8:b9:15:04:fd:67:54:97:7e:cb:e2:07:24:81:
                    cc:bc:f7:5e:2f:81:33:50:80:45:f4:4a:33:13:d4:
                    c6:b2:f5:5a:c0:ee:ef:21:d1:58:26:f8:ce:6c:55:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:18:CD:68:7A:CD:58:B5:B9:6C:BC:14:74:5A:E2:58:AF:FC:A5:E9
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133382e302f32342d3234203d3e20313531303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:95:06:ed:02:d3:4b:8b:32:38:a2:98:9c:ca:f7:67:7a:
         50:1e:4b:0b:52:a2:bd:5b:e2:eb:4a:57:a5:cd:a5:c6:f6:71:
         ea:3c:b9:f9:f7:6e:24:3b:91:00:25:02:6b:2f:fe:bd:5b:6e:
         5d:65:6f:b8:a9:d8:4a:ac:f7:89:db:31:8a:ee:7e:7d:6a:03:
         f8:b0:38:b7:01:5d:58:90:3a:16:6c:30:43:12:fd:36:38:13:
         d7:da:f8:f5:fc:cb:4b:92:ad:f3:68:d2:ee:5d:9f:b0:26:aa:
         9f:fc:8b:24:36:92:fa:48:f3:06:9e:8e:c6:05:dc:5d:94:01:
         ff:83:b3:12:c4:07:55:f9:81:57:22:0c:92:79:27:f7:03:72:
         70:05:59:95:4a:b9:2b:0e:d0:3c:06:86:0d:91:8c:ac:c6:cb:
         a1:05:b5:03:f8:dc:4b:8e:e4:1c:fe:40:81:49:03:96:73:04:
         b7:af:31:16:6c:a7:af:a2:a2:27:a7:d9:d9:3f:f3:30:9e:9f:
         41:7c:85:4b:e7:de:52:fd:1a:08:31:81:7c:b1:6e:99:24:33:
         2e:0e:6e:8d:eb:c1:f5:c2:d3:69:d0:2c:fd:28:3e:ef:8e:f3:
         58:2d:ec:72:e6:8f:01:f1:b5:9a:72:74:0a:07:2a:37:8b:2e:
         eb:63:8f:b2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUel4VrOVkLN7rLudFckSfw5wdDh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yNjAxMjIxMjQ1NDRaFw0yNzAxMjExMjUwNDRaMDMxMTAvBgNV
BAMTKEU1MThDRDY4N0FDRDU4QjVCOTZDQkMxNDc0NUFFMjU4QUZGQ0E1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrExjFiqUl8R8nZaQ4PtjUM+B3
kQ6AruBombEuNH8kO0GhXzLUTdOpi29QCZ3SNUE4sazrOXxKuCUjNjh0u8e3DNCC
8z52T0zH+IADq4YsGtdf3WuZISfQJ3krduzvLmQKXWJjeMapp+I+i5ksf/zulRII
E+hOy3FH5qJTs0WQd7QRc/jK0VCvn1Ai53waTOUvtu3dNqTjpS8CvkVxQwnvGJ0L
G58tOUB6974nh9FXENEQwqmbXMzjoqKnIE21AGGSSMhBu2bdYuO1A9boRNWLECHY
uRUE/WdUl37L4gckgcy8914vgTNQgEX0SjMT1May9VrA7u8h0Vgm+M5sVSPVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU5RjNaHrNWLW5bLwUdFriWK/8pekwHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04
N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIowDQYJ
KoZIhvcNAQELBQADggEBAEVLlQbtAtNLizI4opicyvdnelAeSwtSor1b4utKV6XN
pcb2ceo8ufn3biQ7kQAlAmsv/r1bbl1lb7ip2Eqs94nbMYrufn1qA/iwOLcBXViQ
OhZsMEMS/TY4E9fa+PX8y0uSrfNo0u5dn7Amqp/8iyQ2kvpI8waejsYF3F2UAf+D
sxLEB1X5gVciDJJ5J/cDcnAFWZVKuSsO0DwGhg2RjKzGy6EFtQP43EuO5Bz+QIFJ
A5ZzBLevMRZsp6+ioien2dk/8zCen0F8hUvn3lL9GggxgXyxbpkkMy4Obo3rwfXC
02nQLP0oPu+O81gt7HLmjwHxtZpydAoHKjeLLutjj7I=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:20 2026 by rpki-client