This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa
File:                     3130332e31362e37392e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier:          2+21cgS9YAYcOp19nxMBI5CX1Jc0yGks8hyoPNdCeDQ=
Subject key identifier:   5F:8A:93:90:1A:C5:E1:D0:A2:08:BC:7B:8B:98:6B:C4:A1:3A:09:C7
Certificate issuer:       /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Certificate serial:       7161C915A985583031E372375022C457C0840DC9
Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa
Signing time:             Sat 03 Jan 2026 12:00:02 +0000
ROA not before:           Sat 03 Jan 2026 11:55:02 +0000
ROA not after:            Sat 02 Jan 2027 12:00:02 +0000
asID:                     131785
IP address blocks:        103.16.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
                          rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:c9:15:a9:85:58:30:31:e3:72:37:50:22:c4:57:c0:84:0d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
        Validity
            Not Before: Jan  3 11:55:02 2026 GMT
            Not After : Jan  2 12:00:02 2027 GMT
        Subject: CN=5F8A93901AC5E1D0A208BC7B8B986BC4A13A09C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:31:8b:da:37:eb:61:ba:fd:67:c4:57:0a:
                    a6:46:1f:f9:c5:fe:b2:84:f3:13:91:b3:3e:e0:f0:
                    f8:7b:60:49:a5:39:b5:88:f6:67:a0:83:6a:54:91:
                    d4:80:b2:fb:6e:77:33:40:a0:bc:b4:0d:69:45:a0:
                    cb:24:56:83:cf:40:79:43:0f:d8:b0:42:20:3b:f4:
                    e8:d5:46:87:5a:4e:5b:74:6a:8c:c1:d2:4a:fd:db:
                    17:00:7c:67:ec:10:e7:b4:ae:ca:9a:4a:48:18:12:
                    41:d8:42:05:aa:d2:8f:86:11:01:1c:91:d0:3a:fc:
                    e8:ff:ab:4d:17:dc:c9:7b:9e:2a:b2:e3:49:2c:ab:
                    97:14:f7:90:0f:00:76:e6:a2:e6:32:a9:76:87:3c:
                    56:e7:fa:d2:5c:1c:22:94:a8:db:ca:67:85:7c:6e:
                    4d:06:9b:d1:6c:0e:1d:a0:88:f8:a1:bc:a4:94:3a:
                    dd:2f:82:7b:24:02:87:27:81:b0:29:a0:0c:80:de:
                    dc:90:53:13:15:09:75:11:5d:75:56:da:ed:f6:1d:
                    43:f6:eb:4c:6d:42:c4:6c:35:b4:b3:08:8e:97:18:
                    d4:32:06:99:cf:33:7f:58:48:4d:b0:91:70:01:b3:
                    4b:87:e7:e6:48:68:3b:81:4d:de:1a:1c:bd:29:82:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:93:90:1A:C5:E1:D0:A2:08:BC:7B:8B:98:6B:C4:A1:3A:09:C7
            X509v3 Authority Key Identifier:
                keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e31362e37392e302f32342d3234203d3e20313331373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:e1:3b:df:3d:4f:eb:3f:20:35:0b:37:55:f7:ae:c2:e2:
         2a:40:b2:80:9c:99:fb:40:39:8e:81:f7:33:8f:8c:0d:8a:7e:
         6f:1e:a7:75:16:8a:a9:8b:75:a4:8f:47:4a:a0:fe:30:ac:fd:
         0d:a6:32:48:03:a8:a4:df:fb:fd:91:33:bf:e1:5d:0d:ec:58:
         68:04:8b:b7:54:73:c9:06:fb:e4:0c:27:1d:05:2a:ce:7e:a8:
         b6:98:0a:cb:3f:90:30:cf:47:44:a8:5e:4b:a2:1e:45:60:10:
         fb:d6:42:0c:51:ff:1e:b1:e6:35:d2:73:3e:1c:ec:0b:21:ae:
         a4:df:00:62:98:f1:d3:03:0d:d2:f6:a6:39:6f:99:24:0f:7d:
         74:95:74:34:d8:f3:c3:f4:49:c5:20:00:a9:3d:45:57:98:b3:
         cc:74:bd:d3:55:fc:4c:e1:d0:35:87:95:f8:e0:4f:b4:5c:56:
         2a:d4:e8:73:38:56:d2:b0:ff:f7:fe:5d:f5:63:45:1d:fb:68:
         9e:34:57:44:56:e1:2c:c9:ca:2c:55:8e:72:e9:34:83:85:b1:
         fb:6d:60:91:2f:f6:47:90:08:32:17:1d:17:e3:54:72:a4:10:
         a7:08:eb:39:27:1c:50:4e:48:83:bc:66:a5:08:58:a3:3f:9a:
         e4:5d:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:26 2026 by rpki-client