This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa
File:                     3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=
Subject key identifier:   81:33:68:1C:A7:94:33:67:3C:FE:1E:77:52:30:BE:F4:96:E2:6F:DD
Certificate issuer:       /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Certificate serial:       235D5BBCC1AE6E1E66BCC2DD6569AD64618B561A
Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa
Signing time:             Mon 26 Jan 2026 02:00:00 +0000
ROA not before:           Mon 26 Jan 2026 01:55:00 +0000
ROA not after:            Mon 25 Jan 2027 02:00:00 +0000
asID:                     151000
IP address blocks:        103.179.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl
                          rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5d:5b:bc:c1:ae:6e:1e:66:bc:c2:dd:65:69:ad:64:61:8b:56:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
        Validity
            Not Before: Jan 26 01:55:00 2026 GMT
            Not After : Jan 25 02:00:00 2027 GMT
        Subject: CN=8133681CA79433673CFE1E775230BEF496E26FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:d1:6b:ea:5a:84:b9:5b:f8:6f:38:89:d7:
                    64:32:8b:cd:e1:10:29:6d:55:ca:7f:85:a6:63:1c:
                    c8:6d:7c:ee:d4:42:95:42:62:57:0f:a3:22:46:8c:
                    ff:44:52:39:64:cb:a3:70:90:b9:56:ba:b7:73:4a:
                    85:96:87:e4:a0:ed:13:c5:2f:33:7f:83:b6:0b:c0:
                    ef:5d:b0:f1:70:c5:29:9b:2c:fd:42:98:d9:1d:4f:
                    a8:94:12:af:90:d9:68:67:f3:e0:df:14:a0:b3:32:
                    93:67:2b:da:3e:5b:8f:16:2a:c7:c9:e4:c9:93:19:
                    06:71:8e:4c:e8:f2:7f:aa:a3:54:47:cc:4d:62:bf:
                    e0:81:95:61:08:37:fd:e2:c0:97:ba:58:b5:5f:0f:
                    86:3e:db:51:d1:43:17:d0:be:3f:9e:5c:4f:c0:0f:
                    3a:c6:f0:74:71:6a:3a:8d:c7:2b:61:56:0b:31:c7:
                    e5:89:22:94:9c:63:53:54:7a:53:c7:ba:2e:e6:b6:
                    9d:ee:68:5c:33:f4:83:4c:c4:c9:cb:94:ec:ce:56:
                    38:83:f3:f6:f5:32:b4:ad:43:75:37:74:8a:4b:5b:
                    c2:09:70:95:8a:bf:43:86:e0:f9:3e:86:f1:24:33:
                    ff:9e:3a:4a:5c:29:23:63:0d:b7:92:36:a0:e2:f2:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:33:68:1C:A7:94:33:67:3C:FE:1E:77:52:30:BE:F4:96:E2:6F:DD
            X509v3 Authority Key Identifier:
                keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:21:c7:e0:30:a3:ab:f6:14:a9:6f:ef:a6:1b:ea:2c:bf:20:
         3a:22:a7:3f:e3:b7:db:2e:aa:6f:ba:e7:88:4e:0d:71:53:84:
         68:70:09:da:7d:c5:86:88:46:f1:31:bd:ec:5e:2d:9f:cc:a3:
         33:3c:ce:3f:98:64:96:58:97:50:fc:b7:a8:f7:93:e0:f6:6c:
         d0:af:52:3a:38:bf:a4:56:27:f1:d4:f2:47:e6:3c:df:81:0e:
         13:0a:56:b3:22:7e:18:d7:c9:c2:8b:31:9e:89:f5:5a:84:e4:
         f1:26:37:ce:b0:dd:09:25:91:22:61:2d:2b:7b:0e:6a:c0:bd:
         a5:33:aa:50:59:8b:8e:93:25:6b:75:ae:be:0e:34:f0:d4:ee:
         10:0f:88:eb:2b:8f:87:7a:60:45:c6:63:07:0d:57:aa:75:76:
         9a:a8:9d:44:0a:f2:b4:f6:83:cb:40:03:0f:55:1d:c6:9e:b4:
         d7:ca:d3:23:cf:60:80:66:ff:13:e2:0a:24:ef:e0:6e:04:93:
         ff:2f:02:dd:31:ba:68:f2:1a:84:a4:60:76:d3:9c:8d:ef:30:
         76:52:39:c1:c1:f7:85:31:05:01:be:b5:15:5f:a0:ae:53:7b:
         b1:60:4a:c5:cc:2e:79:63:6f:79:51:f9:39:3c:d8:b3:1a:ca:
         2e:55:d0:59
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUI11bvMGubh5mvMLdZWmtZGGLVhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4
RTMyQUI0MzAeFw0yNjAxMjYwMTU1MDBaFw0yNzAxMjUwMjAwMDBaMDMxMTAvBgNV
BAMTKDgxMzM2ODFDQTc5NDMzNjczQ0ZFMUU3NzUyMzBCRUY0OTZFMjZGREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCltdFr6lqEuVv4bziJ12Qyi83h
ECltVcp/haZjHMhtfO7UQpVCYlcPoyJGjP9EUjlky6NwkLlWurdzSoWWh+Sg7RPF
LzN/g7YLwO9dsPFwxSmbLP1CmNkdT6iUEq+Q2Whn8+DfFKCzMpNnK9o+W48WKsfJ
5MmTGQZxjkzo8n+qo1RHzE1iv+CBlWEIN/3iwJe6WLVfD4Y+21HRQxfQvj+eXE/A
DzrG8HRxajqNxythVgsxx+WJIpScY1NUelPHui7mtp3uaFwz9INMxMnLlOzOVjiD
8/b1MrStQ3U3dIpLW8IJcJWKv0OG4Pk+hvEkM/+eOkpcKSNjDbeSNqDi8s/vAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUgTNoHKeUM2c8/h53UjC+9Jbib90wHwYDVR0j
BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1
QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy
QUI0My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiM2RmNmFmLWQ5ZWUtNDA3Ni04
MWE0LTI2NDg3Mjc0ODk3MC8wLzMxMzAzMzJlMzEzNzM5MmUzMTMzMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns4YwDQYJ
KoZIhvcNAQELBQADggEBADIhx+Awo6v2FKlv76Yb6iy/IDoipz/jt9suqm+654hO
DXFThGhwCdp9xYaIRvExvexeLZ/MozM8zj+YZJZYl1D8t6j3k+D2bNCvUjo4v6RW
J/HU8kfmPN+BDhMKVrMifhjXycKLMZ6J9VqE5PEmN86w3QklkSJhLSt7DmrAvaUz
qlBZi46TJWt1rr4ONPDU7hAPiOsrj4d6YEXGYwcNV6p1dpqonUQK8rT2g8tAAw9V
HcaetNfK0yPPYIBm/xPiCiTv4G4Ek/8vAt0xumjyGoSkYHbTnI3vMHZSOcHB94Ux
BQG+tRVfoK5Te7FgSsXMLnljb3lR+Tk82LMayi5V0Fk=
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:52:39 2026 by rpki-client