This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa
File:                     3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          YSf7tTcq2YBd3VoXe5ADd93qTcdEqoHYWIyKTfCU3yg=
Subject key identifier:   7A:A5:08:15:97:7E:3B:8E:57:27:CD:03:9E:36:62:91:A0:1A:75:DD
Certificate issuer:       /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
Certificate serial:       19F9E5B8AAB2461725726766B3F2EDA3AF1673CD
Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa
Signing time:             Fri 02 Jan 2026 15:00:01 +0000
ROA not before:           Fri 02 Jan 2026 14:55:01 +0000
ROA not after:            Fri 01 Jan 2027 15:00:01 +0000
asID:                     135477
IP address blocks:        103.122.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl
                          rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f9:e5:b8:aa:b2:46:17:25:72:67:66:b3:f2:ed:a3:af:16:73:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
        Validity
            Not Before: Jan  2 14:55:01 2026 GMT
            Not After : Jan  1 15:00:01 2027 GMT
        Subject: CN=7AA50815977E3B8E5727CD039E366291A01A75DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:eb:a2:1d:3b:fa:cc:ef:43:9e:d3:3a:cb:
                    37:63:19:7e:f7:5c:26:69:b4:a7:a8:f4:7e:d2:50:
                    5d:47:7b:a5:17:12:44:f1:6c:8a:7e:de:27:53:f3:
                    42:c2:66:54:ff:d8:55:7e:1b:9b:db:d2:30:34:44:
                    05:2c:37:23:73:34:1f:19:f2:59:08:53:be:7f:51:
                    09:43:04:b3:b9:3b:52:bd:d7:55:8b:bc:b7:af:a4:
                    cc:33:88:63:86:d8:f3:c9:19:33:b0:f8:72:30:77:
                    d2:f8:9a:8e:ce:41:4d:9f:29:ef:28:b7:48:e4:c3:
                    28:1c:6d:42:bc:ac:e2:68:1a:23:10:97:7d:5d:a8:
                    0c:5c:96:c2:d4:6c:b9:0c:e0:71:2c:cd:8a:2d:94:
                    94:8f:de:3a:b2:55:46:a4:db:f4:73:3a:35:48:d5:
                    bc:98:cb:8c:b6:2d:ad:ec:bd:41:d3:ae:6b:29:9a:
                    3e:1e:74:56:c7:fa:f8:35:1e:95:49:86:b8:7b:8f:
                    2f:60:86:82:0b:08:aa:8b:46:60:11:78:fb:28:8e:
                    92:53:33:a6:00:a8:8d:f9:e9:24:30:f8:e5:39:00:
                    3c:49:e5:60:94:1e:f7:dc:46:a0:3f:e6:96:46:82:
                    e3:93:f0:d1:c1:51:7a:49:3d:f0:50:ec:78:2c:3e:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A5:08:15:97:7E:3B:8E:57:27:CD:03:9E:36:62:91:A0:1A:75:DD
            X509v3 Authority Key Identifier:
                keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:6b:36:d2:99:3d:64:49:84:82:24:de:a2:2a:98:99:7c:
         f6:d7:21:1f:9a:ab:e2:f0:70:5d:c6:1e:89:ab:28:f2:57:02:
         c8:d7:cf:c9:77:f4:ed:14:7a:ec:7d:39:d2:31:5f:9d:0d:3c:
         5f:87:bf:ae:6a:a3:0d:38:93:22:7a:30:20:e1:06:ac:91:28:
         eb:ff:f9:ed:73:90:02:e6:ac:4c:fa:d6:0a:7d:a2:7c:96:1c:
         dd:ab:c9:0b:54:bb:de:35:dd:05:f0:15:44:f6:7b:65:db:f5:
         8f:25:2e:cb:2b:c4:f5:66:84:63:72:24:db:21:b4:07:91:cd:
         26:ca:9b:42:a9:d7:d0:fa:3f:fc:d9:2b:87:0b:39:6b:2f:99:
         bb:b3:e0:32:4b:56:de:f4:5c:90:1b:b6:d5:dc:eb:6e:e1:bd:
         a2:44:58:e2:35:9e:51:f2:e8:f4:75:a9:1a:ad:09:9c:7a:16:
         50:84:05:2b:87:8c:b5:2d:aa:13:8c:f1:e7:6b:d0:31:b4:b8:
         1f:d5:c7:53:62:9b:51:e6:9d:16:ff:06:f4:c8:ef:da:f9:3a:
         13:66:54:9c:83:49:ed:f8:4f:d1:f3:a4:d0:48:06:b5:59:fb:
         a7:bf:24:a3:bb:36:2f:c8:7b:91:64:d4:e4:3e:00:a7:6b:0f:
         a8:83:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:59 2026 by rpki-client