This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32342d3234203d3e203234343239.roa
File:                     3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (raw, json)
Hash identifier:          s7xt6atAlnuk0NCp/3UKrnkCS/YpsE7vKEiGKhHlUBE=
Subject key identifier:   F1:34:6C:90:78:02:A4:5E:F3:55:8B:5D:9F:79:D8:AE:83:FE:C5:2E
Certificate issuer:       /CN=2D0745D26E59440CB71FAFE996834493DA753248
Certificate serial:       66E93BAE1B8467F43ECAF8A4CD08D6921DA8BB24
Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32342d3234203d3e203234343239.roa
Signing time:             Tue 30 Dec 2025 17:02:30 +0000
ROA not before:           Tue 30 Dec 2025 16:57:30 +0000
ROA not after:            Tue 29 Dec 2026 17:02:30 +0000
asID:                     24429
IP address blocks:        103.73.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl
                          rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e9:3b:ae:1b:84:67:f4:3e:ca:f8:a4:cd:08:d6:92:1d:a8:bb:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248
        Validity
            Not Before: Dec 30 16:57:30 2025 GMT
            Not After : Dec 29 17:02:30 2026 GMT
        Subject: CN=F1346C907802A45EF3558B5D9F79D8AE83FEC52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:5c:ed:5d:32:56:87:cf:93:1d:c9:49:62:
                    81:f8:6a:74:f1:88:50:12:f2:26:c7:fc:42:e5:75:
                    bf:68:ac:90:04:8a:37:67:dc:ae:59:f0:4d:57:04:
                    f9:4d:24:39:53:38:21:b8:a4:10:7d:10:86:08:ad:
                    b0:52:cd:07:01:26:fa:69:69:a8:14:8f:46:f7:a5:
                    8c:ed:43:94:76:7a:fb:21:0b:1a:74:8f:60:f4:2b:
                    e2:a5:ea:58:56:25:4d:f6:7f:7f:d9:dd:a1:bd:12:
                    31:5b:ff:1c:2a:ab:d8:c9:22:5a:64:a7:b2:eb:32:
                    dc:2f:a6:a8:d0:32:10:0d:96:30:d6:8d:3f:3b:39:
                    4b:94:81:9e:11:b7:01:1a:1e:9a:a7:23:fc:f1:71:
                    f2:37:e5:c7:39:fe:ee:11:b6:8f:62:c4:15:9d:58:
                    32:12:66:ee:d5:49:37:c4:ed:1b:82:32:d4:3c:6f:
                    7d:6c:d5:55:f5:4a:f6:dc:ef:09:bc:ff:ea:87:da:
                    0e:2f:9e:f4:94:de:73:81:0d:f1:61:ca:18:b6:f7:
                    cd:5a:b4:15:af:ea:c9:29:39:b8:fe:44:f0:28:fa:
                    47:16:94:02:15:a9:d2:f3:f2:20:ba:51:35:82:2c:
                    20:92:69:a4:d9:53:7a:32:eb:57:26:d0:b8:b5:8e:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:6C:90:78:02:A4:5E:F3:55:8B:5D:9F:79:D8:AE:83:FE:C5:2E
            X509v3 Authority Key Identifier:
                keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/3130332e37332e3135382e302f32342d3234203d3e203234343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:07:41:e4:66:3c:2b:d1:01:69:ff:8c:45:67:ed:65:bc:26:
         9b:f0:b5:c6:58:fb:7b:66:4b:41:b9:eb:f3:ec:04:c9:7e:b6:
         44:34:47:65:e0:1e:ef:89:0d:8a:59:d3:50:ee:d3:64:89:9e:
         2a:a6:32:cb:08:4c:39:6e:cd:3c:0b:0d:0c:53:b7:40:72:4e:
         8b:03:90:76:6f:dd:bc:03:d6:94:d7:10:fc:12:8c:fc:e3:55:
         0c:3e:17:ed:cf:c4:fe:0c:0f:8d:e9:d8:31:04:91:ff:e0:9c:
         72:97:da:3c:d5:3a:c6:fe:44:14:af:17:d5:24:e6:87:54:5b:
         4d:2f:0b:d1:0e:35:49:0f:e1:cc:08:f6:74:ff:8d:19:34:cf:
         b3:18:18:c9:dd:0a:4e:5a:ce:6b:8a:eb:8d:07:fc:a3:36:5f:
         85:f8:40:77:c6:b8:bb:61:be:4d:a8:67:12:1d:34:06:00:d0:
         e0:9c:5d:fd:cf:70:8d:cf:dc:64:a3:72:fb:0c:6a:92:34:77:
         c5:de:30:de:a0:45:ee:52:7c:45:bf:8a:cf:cc:27:a2:c7:68:
         2c:1b:60:60:c2:ec:f4:e2:d9:cf:4f:2a:37:37:d3:ee:06:9e:
         03:f3:43:9b:ac:95:b4:97:a8:ec:a2:01:b0:27:40:8e:84:e9:
         9b:7a:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:08 2026 by rpki-client