This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa
File:                     3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          JoAF/8JHzRpOjvTyFawR/Mq5uYGbOZSLU2u9ylGcQ5c=
Subject key identifier:   01:86:18:FB:A6:BF:25:B4:9D:5A:50:1E:6D:7C:82:0B:E1:8C:26:57
Certificate issuer:       /CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
Certificate serial:       42E9C483C0B59583EC9A487D3CD7CBAD27EF88F9
Authority key identifier: C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa
Signing time:             Tue 20 Jan 2026 09:00:01 +0000
ROA not before:           Tue 20 Jan 2026 08:55:01 +0000
ROA not after:            Tue 19 Jan 2027 09:00:01 +0000
asID:                     58495
IP address blocks:        103.146.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl
                          rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 08:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e9:c4:83:c0:b5:95:83:ec:9a:48:7d:3c:d7:cb:ad:27:ef:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C005531488F38475CA53CB4A7ABCEC0C32F75962
        Validity
            Not Before: Jan 20 08:55:01 2026 GMT
            Not After : Jan 19 09:00:01 2027 GMT
        Subject: CN=018618FBA6BF25B49D5A501E6D7C820BE18C2657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:72:77:93:f6:b0:91:a7:b4:32:f6:7b:29:b5:
                    99:c0:6a:9d:00:d4:9e:c3:cc:de:95:51:15:3f:1b:
                    b4:9d:96:0a:9c:a2:d8:bc:18:e7:08:cb:3d:bf:dd:
                    d2:07:64:39:7a:6c:24:bf:55:80:1e:e9:b7:ab:ab:
                    85:b7:50:de:5a:f9:3b:aa:23:cb:d2:c1:70:f3:36:
                    95:c3:1e:db:ed:15:27:77:04:dd:37:b1:51:42:e3:
                    93:2b:0d:f6:ec:99:63:ca:3f:44:11:35:27:07:29:
                    88:45:d2:ea:ac:2e:e7:9b:e5:c5:c1:d9:21:b8:ca:
                    95:2b:6d:d5:37:8a:c3:a3:a3:a8:af:57:93:64:b5:
                    f8:94:fb:ce:d1:90:72:15:1f:17:04:e6:e1:ad:6b:
                    7a:ff:6f:f9:40:25:8f:f4:fb:b8:6a:05:5a:7c:a0:
                    e5:6a:03:02:8e:e9:b2:d0:ac:dd:91:6d:cc:aa:06:
                    7c:c9:c7:a2:e8:2e:ad:fa:cb:70:96:a4:60:04:f3:
                    da:c0:05:1b:ad:a5:c7:38:7b:6c:f5:e3:db:4b:8c:
                    dc:e0:f7:44:e6:8c:0c:35:31:53:8b:8e:4c:18:41:
                    70:bd:69:bd:a7:f9:0e:e5:39:5e:04:85:e8:29:1a:
                    34:75:40:08:d5:f0:10:ed:d1:36:2b:2e:5f:cb:97:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:86:18:FB:A6:BF:25:B4:9D:5A:50:1E:6D:7C:82:0B:E1:8C:26:57
            X509v3 Authority Key Identifier:
                keyid:C0:05:53:14:88:F3:84:75:CA:53:CB:4A:7A:BC:EC:0C:32:F7:59:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/C005531488F38475CA53CB4A7ABCEC0C32F75962.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C005531488F38475CA53CB4A7ABCEC0C32F75962.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:66:59:81:88:56:79:a2:4c:0d:05:79:e0:ab:17:d2:e0:bb:
         0d:6f:b6:7b:fd:51:dc:22:c5:e6:41:03:8f:42:2f:4e:dc:47:
         e0:69:0d:08:0b:62:bc:98:46:d6:90:0f:e8:b8:69:66:e7:9c:
         59:69:ec:a5:b0:a1:d9:7e:e8:72:5f:3f:fc:62:1d:bd:be:c8:
         c0:5d:71:31:50:f9:7c:e2:87:bb:a4:7d:94:f7:a1:77:97:58:
         d1:74:a6:63:ab:d7:66:c2:64:3d:ca:1e:a6:ed:f0:d0:86:1b:
         97:c0:ed:2b:5a:27:a8:88:75:82:e5:05:a4:44:98:dc:54:a8:
         79:c2:37:5a:d0:51:99:9a:06:66:be:40:60:a1:65:fd:50:59:
         64:b5:4e:4b:4a:50:95:59:7d:36:e0:ac:f5:e8:99:2d:87:b1:
         9c:11:7f:d0:3f:98:01:37:c7:97:4b:ae:21:63:27:23:97:22:
         2a:43:00:77:45:7d:58:4e:4b:19:2a:27:0c:57:dd:d1:dd:0d:
         0a:9c:de:80:43:9f:4c:1b:3a:d7:e9:e3:98:fa:b9:50:8e:af:
         62:b4:a5:11:0c:5c:19:e3:7d:99:af:92:9d:2a:97:64:b7:b0:
         f1:76:28:cd:70:2e:db:0d:85:1b:04:b9:5d:51:b6:42:47:ac:
         6e:0f:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:10 2026 by rpki-client