This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=
Subject key identifier:   A9:D4:B5:21:5B:98:AC:A1:1C:8D:07:00:B8:B9:F5:C6:D7:2B:12:D8
Certificate issuer:       /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
Certificate serial:       5043B0DA4B9A1A8851782D5B6A842B2ACCFB0825
Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:29:11 +0000
ROA not before:           Thu 08 Jan 2026 21:24:11 +0000
ROA not after:            Thu 07 Jan 2027 21:29:11 +0000
asID:                     154410
IP address blocks:        103.164.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl
                          rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:43:b0:da:4b:9a:1a:88:51:78:2d:5b:6a:84:2b:2a:cc:fb:08:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D
        Validity
            Not Before: Jan  8 21:24:11 2026 GMT
            Not After : Jan  7 21:29:11 2027 GMT
        Subject: CN=A9D4B5215B98ACA11C8D0700B8B9F5C6D72B12D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:92:77:47:3d:bd:d8:a1:53:6e:73:1f:ee:
                    10:70:43:b5:98:81:07:95:3d:39:02:03:d8:e7:aa:
                    d0:84:08:68:7e:33:2d:9d:13:3b:ab:76:30:c9:a5:
                    29:8b:61:58:f7:26:54:56:cc:59:00:af:41:4f:68:
                    e7:03:d5:84:4e:bf:1d:9d:2c:7e:f3:f3:c7:7c:39:
                    61:05:7c:ed:ca:3f:12:d1:28:d2:05:bc:0a:e2:5c:
                    be:12:30:80:11:db:35:a3:bb:c5:8e:5c:e9:d3:fe:
                    23:30:0b:86:d4:43:5e:84:bc:ce:07:01:c9:e4:fd:
                    cd:43:c8:3a:73:73:7b:7d:cd:25:38:de:89:48:5a:
                    41:f9:99:15:5e:cc:bf:77:db:f7:f1:63:38:3b:62:
                    fc:80:dd:0d:7d:c3:b2:16:ad:25:3d:15:1d:1f:0f:
                    d5:2f:57:32:8b:7c:73:a9:24:b0:96:64:49:db:3e:
                    64:d3:64:0d:8b:55:15:4b:87:fb:fa:07:b7:6b:4a:
                    3c:c1:37:4e:eb:41:9a:3f:1f:af:9b:c6:43:09:44:
                    49:4d:6c:cc:3d:b9:fb:b4:d3:06:a4:d5:6b:c2:af:
                    52:d3:50:95:9a:3c:77:ba:ce:3a:2f:c6:7d:a1:7f:
                    46:cb:4d:1b:17:7a:0b:ad:e9:f0:10:4e:bc:0c:32:
                    91:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D4:B5:21:5B:98:AC:A1:1C:8D:07:00:B8:B9:F5:C6:D7:2B:12:D8
            X509v3 Authority Key Identifier:
                keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:29:d8:b1:77:3e:5d:9a:98:32:7a:c4:09:98:81:d3:b5:6f:
         d7:39:46:73:9d:e2:b5:d2:3f:8d:f6:94:2a:85:ba:ce:ee:45:
         52:44:11:c9:74:1e:0b:b7:32:59:74:35:51:10:6a:53:b0:5d:
         bf:91:ed:8f:56:1b:c6:7d:b7:b7:33:f1:9a:4c:64:3d:88:99:
         d6:65:1b:ef:68:70:56:38:83:2f:23:48:ca:4e:34:7b:34:72:
         93:ca:a6:b4:50:d5:dd:09:3a:7a:86:df:a5:d9:94:31:92:49:
         fa:47:13:54:57:44:04:26:53:d5:84:4d:ce:a1:60:18:c0:02:
         99:23:57:09:3e:fd:f6:0b:17:21:2c:8a:90:1f:aa:ee:19:73:
         d5:a0:ac:f5:5b:30:57:00:59:9c:1e:00:be:49:8c:5b:78:95:
         68:8d:d3:6d:16:34:31:66:f2:76:1f:82:69:14:8a:6f:d2:b1:
         b5:00:c9:ab:fd:67:a9:80:ee:ac:8e:7e:2c:8b:62:f9:80:d9:
         a8:5a:74:7e:94:f7:c3:84:cc:e2:70:83:1c:a0:c6:e9:95:40:
         a3:ac:ea:f8:52:8b:16:af:57:52:90:0b:c5:f5:06:2d:cf:32:
         27:12:4a:9c:9a:9f:9a:07:78:ac:4a:1a:0f:10:37:e3:07:56:
         05:17:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:51:50 2026 by rpki-client