This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa
File:                     3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=
Subject key identifier:   07:71:3C:C3:79:1E:47:88:38:7D:7D:C9:90:97:5D:AA:1A:19:89:4C
Certificate issuer:       /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial:       6CEBE75D230B57FF62FABC2D26789D3D4FF76CDA
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa
Signing time:             Thu 22 Jan 2026 03:43:23 +0000
ROA not before:           Thu 22 Jan 2026 03:38:23 +0000
ROA not after:            Thu 21 Jan 2027 03:43:23 +0000
asID:                     202736
IP address blocks:        103.120.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
                          rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:eb:e7:5d:23:0b:57:ff:62:fa:bc:2d:26:78:9d:3d:4f:f7:6c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
        Validity
            Not Before: Jan 22 03:38:23 2026 GMT
            Not After : Jan 21 03:43:23 2027 GMT
        Subject: CN=07713CC3791E4788387D7DC990975DAA1A19894C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f4:42:5f:6e:2d:e0:0f:47:38:fe:45:d2:c8:
                    f2:35:20:a9:3a:06:0b:01:1a:b8:de:cc:cc:83:85:
                    62:31:ef:51:b6:43:bf:4c:90:4d:a2:cc:11:2f:2f:
                    0d:bf:79:24:42:04:d2:5d:b6:d2:4b:58:ec:98:99:
                    a4:af:75:c4:92:0f:dc:f9:30:44:92:57:d0:7d:a4:
                    51:ed:3c:2d:e9:76:09:10:79:d2:01:15:98:ac:cd:
                    2c:ad:43:07:01:3b:54:59:c2:99:c1:8c:1b:37:94:
                    09:e6:a2:68:38:21:b2:0a:77:f7:87:8c:d7:f9:56:
                    d3:e7:7f:3f:96:da:84:b3:2a:c0:b0:73:b3:95:fa:
                    55:d4:8f:02:59:06:ea:0a:34:b8:83:3d:35:2b:82:
                    94:ad:5c:05:8c:fe:b6:3c:73:a5:93:05:6e:b0:a2:
                    46:7f:c7:f1:0d:01:65:cf:3f:13:62:c0:fc:1a:57:
                    16:bb:a7:16:e8:e0:71:67:87:85:ad:23:70:91:e5:
                    fe:3e:88:83:38:3f:fd:83:c2:62:f7:63:54:61:c0:
                    47:ab:2a:d7:f8:fe:0a:96:5b:4d:64:cd:59:03:3a:
                    02:a4:32:f5:39:66:fb:e3:a7:3d:15:75:3b:2b:ec:
                    c2:1d:af:6e:d8:76:70:ed:a2:c9:4e:03:6d:aa:c7:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:3C:C3:79:1E:47:88:38:7D:7D:C9:90:97:5D:AA:1A:19:89:4C
            X509v3 Authority Key Identifier:
                keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e3:76:4b:0a:ee:a0:95:e8:f6:9e:d1:ab:67:08:54:34:a4:
         06:ab:ce:b1:f1:7c:72:7e:4d:12:3b:8a:25:36:0f:11:cf:9c:
         71:e0:70:f8:fe:21:89:44:e6:23:8b:01:e0:a1:b4:9e:55:8d:
         23:6f:54:21:59:ac:ad:e4:85:e9:9e:ed:66:97:07:f2:19:7a:
         4a:f6:db:63:cf:2b:00:94:50:0c:03:c4:2a:77:f4:cb:5f:ef:
         67:5a:03:38:65:1b:15:52:92:12:77:24:a1:b7:d0:d4:6f:81:
         0d:9e:3c:75:4d:4d:45:9c:f4:35:05:10:ed:89:3e:03:32:ee:
         fe:11:12:45:48:d8:80:88:75:ab:05:6c:f2:7e:72:c2:66:f0:
         a7:09:29:6b:19:c1:78:1f:3a:85:8c:94:35:a7:be:bc:00:1a:
         96:6d:aa:dc:92:b9:bd:3a:6d:3f:b2:bf:24:54:43:91:be:50:
         98:67:b5:f5:13:b1:5d:d8:66:80:91:ab:57:84:ba:98:7c:6b:
         6e:16:33:10:17:7c:d4:3e:d5:0c:27:23:23:66:8d:ab:49:93:
         0f:a5:b8:1d:88:6e:83:c7:8f:d8:d8:fa:b3:ea:a8:b0:77:fc:
         c2:bd:13:00:a8:a4:2b:bb:2f:7d:ca:c0:c8:38:03:bd:cd:94:
         76:44:48:b6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbOvnXSMLV/9i+rwtJnidPU/3bNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy
ODk2RTZERTAeFw0yNjAxMjIwMzM4MjNaFw0yNzAxMjEwMzQzMjNaMDMxMTAvBgNV
BAMTKDA3NzEzQ0MzNzkxRTQ3ODgzODdEN0RDOTkwOTc1REFBMUExOTg5NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9EJfbi3gD0c4/kXSyPI1IKk6
BgsBGrjezMyDhWIx71G2Q79MkE2izBEvLw2/eSRCBNJdttJLWOyYmaSvdcSSD9z5
MESSV9B9pFHtPC3pdgkQedIBFZiszSytQwcBO1RZwpnBjBs3lAnmomg4IbIKd/eH
jNf5VtPnfz+W2oSzKsCwc7OV+lXUjwJZBuoKNLiDPTUrgpStXAWM/rY8c6WTBW6w
okZ/x/ENAWXPPxNiwPwaVxa7pxbo4HFnh4WtI3CR5f4+iIM4P/2DwmL3Y1RhwEer
Ktf4/gqWW01kzVkDOgKkMvU5Zvvjpz0VdTsr7MIdr27YdnDtoslOA22qx9PvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUB3E8w3keR4g4fX3JkJddqhoZiUwwHwYDVR0j
BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3
QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2
RTZERS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i
M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNzMzMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneMwwDQYJ
KoZIhvcNAQELBQADggEBAELjdksK7qCV6Pae0atnCFQ0pAarzrHxfHJ+TRI7iiU2
DxHPnHHgcPj+IYlE5iOLAeChtJ5VjSNvVCFZrK3kheme7WaXB/IZekr222PPKwCU
UAwDxCp39Mtf72daAzhlGxVSkhJ3JKG30NRvgQ2ePHVNTUWc9DUFEO2JPgMy7v4R
EkVI2ICIdasFbPJ+csJm8KcJKWsZwXgfOoWMlDWnvrwAGpZtqtySub06bT+yvyRU
Q5G+UJhntfUTsV3YZoCRq1eEuph8a24WMxAXfNQ+1QwnIyNmjatJkw+luB2IboPH
j9jY+rPqqLB3/MK9EwCopCu7L33KwMg4A73NlHZESLY=
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:11:47 2026 by rpki-client