This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa
File:                     3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (raw, json)
Hash identifier:          McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=
Subject key identifier:   5D:13:ED:F8:1A:72:66:34:8A:C8:87:B3:1B:F4:31:82:3A:34:46:D0
Certificate issuer:       /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D
Certificate serial:       2092642AAD330BD5014D71956872CF404C71595B
Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa
Signing time:             Thu 15 Jan 2026 10:00:02 +0000
ROA not before:           Thu 15 Jan 2026 09:55:02 +0000
ROA not after:            Thu 14 Jan 2027 10:00:02 +0000
asID:                     140470
IP address blocks:        103.159.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl
                          rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:92:64:2a:ad:33:0b:d5:01:4d:71:95:68:72:cf:40:4c:71:59:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D
        Validity
            Not Before: Jan 15 09:55:02 2026 GMT
            Not After : Jan 14 10:00:02 2027 GMT
        Subject: CN=5D13EDF81A7266348AC887B31BF431823A3446D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:58:a7:cf:cd:87:d8:65:24:a6:4b:5e:b9:
                    84:27:c4:94:b2:2d:58:f9:1d:b7:9b:13:a1:14:97:
                    38:70:55:75:91:12:ce:c9:e1:35:7d:96:b8:e8:40:
                    3f:f1:e3:ef:bf:f6:06:01:2d:5b:70:0b:b4:5b:f7:
                    f2:27:23:18:8e:3f:e0:ed:10:85:5d:4d:35:33:2b:
                    ea:58:a4:9e:37:e3:d0:96:77:74:4e:cd:86:0b:06:
                    6b:6d:67:c6:c8:23:18:43:55:ce:52:0e:02:a6:e2:
                    8d:a5:34:da:7a:a6:c1:81:0d:a7:0f:e2:39:25:f9:
                    e9:d3:5b:53:af:56:7d:70:b7:5d:84:4d:0e:04:2c:
                    2d:d4:f7:19:b5:7f:ab:a0:d1:ad:7f:64:2b:aa:d9:
                    70:c7:8f:3b:2c:35:d9:ea:05:56:ae:59:19:f1:28:
                    eb:4d:d6:fa:9d:92:6d:cf:7f:f7:c1:b8:c0:fd:5b:
                    66:e4:17:85:e7:b9:65:07:b5:85:fa:f2:25:27:70:
                    69:31:9b:82:ff:99:8b:24:8e:68:74:79:83:e2:b9:
                    4a:c5:07:c6:6e:41:59:8b:35:cb:3d:b9:62:1a:13:
                    28:67:c4:24:e3:68:61:d5:f6:92:c1:89:e3:4f:c9:
                    44:f2:cf:cb:e1:60:1e:16:e0:96:8b:99:ff:ab:91:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:13:ED:F8:1A:72:66:34:8A:C8:87:B3:1B:F4:31:82:3A:34:46:D0
            X509v3 Authority Key Identifier:
                keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:13:11:85:d0:3b:64:45:ff:cf:86:29:a7:f5:19:5b:d2:
         9f:8c:5b:24:9e:d2:9e:a9:c7:62:be:f9:e4:5d:6d:cc:3d:4f:
         f6:cf:2d:0f:a0:29:1d:c2:ee:46:5f:b7:91:8d:a4:35:4e:8c:
         8a:c5:32:af:95:90:30:0e:b6:03:49:46:e6:08:c9:b4:b2:ca:
         b6:0f:32:aa:a0:62:43:a0:e8:be:6b:9c:35:a5:0e:f1:05:0c:
         6d:61:4a:94:58:1f:6b:0c:46:1f:d5:ee:9e:79:59:a9:9f:5c:
         86:f1:6e:ca:eb:35:f2:ef:90:37:97:ca:52:85:01:2d:cc:01:
         e9:41:27:b4:d4:e2:8b:65:25:2b:d1:b5:30:4c:65:1e:07:6a:
         2f:bd:14:bd:cf:a4:41:1a:ee:76:19:fc:c5:11:34:ed:b2:78:
         29:7e:60:1f:20:e9:49:7b:81:44:93:41:a3:aa:2e:e8:6a:d5:
         81:80:05:65:58:09:02:4b:d8:2c:c7:f7:79:78:45:04:22:ff:
         16:c9:fc:33:0e:dd:34:c6:3b:b9:77:b8:dc:7f:c7:07:f6:29:
         3d:c1:ec:5d:19:53:cd:a8:a3:97:26:bc:d3:20:dd:89:29:83:
         5e:3f:b6:c1:24:65:25:64:71:80:35:47:66:ae:6b:9d:17:df:
         74:4c:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:54:00 2026 by rpki-client