This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa
File:                     3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa (raw, json)
Hash identifier:          VuqhCvHg0aRp2P2az+FjtyS65zQrJLw9rZ63VjIOBJg=
Subject key identifier:   FB:5F:09:B5:55:4B:E5:F8:9A:B0:79:03:58:B0:D9:32:BA:4A:63:3D
Certificate issuer:       /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial:       45FAE80B3FBE68E1807A97F4485620B2F4312B8C
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa
Signing time:             Fri 23 Jan 2026 08:00:02 +0000
ROA not before:           Fri 23 Jan 2026 07:55:02 +0000
ROA not after:            Fri 22 Jan 2027 08:00:02 +0000
asID:                     149315
IP address blocks:        103.186.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
                          rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 12:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:fa:e8:0b:3f:be:68:e1:80:7a:97:f4:48:56:20:b2:f4:31:2b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
        Validity
            Not Before: Jan 23 07:55:02 2026 GMT
            Not After : Jan 22 08:00:02 2027 GMT
        Subject: CN=FB5F09B5554BE5F89AB0790358B0D932BA4A633D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:1c:00:8d:88:de:9c:06:e5:ee:ee:3b:4a:
                    fd:62:b4:9c:c1:dc:0b:2d:6c:1a:80:34:86:ec:c8:
                    e2:3b:c0:c6:6c:3e:85:23:0b:8e:64:18:8b:6a:fe:
                    99:18:6e:63:c2:c8:ef:5d:bf:78:66:37:65:82:ae:
                    3a:ac:f1:48:7f:93:36:8d:a2:9d:2d:21:de:a3:60:
                    10:7b:f2:1f:bf:fd:53:3e:bd:46:38:3f:c9:88:50:
                    4d:de:ee:5b:0e:ba:d5:ef:3c:8d:36:a5:2a:d1:a2:
                    64:ec:a4:0d:c6:1f:75:58:24:25:74:a8:bd:84:3d:
                    00:37:3a:78:9d:5f:f5:98:a4:f0:f0:76:1b:9d:3c:
                    5a:31:71:89:01:a5:7f:6e:31:16:64:77:32:e8:32:
                    57:43:8a:92:28:ce:c2:29:fc:a6:05:20:a9:14:d3:
                    fb:3f:90:1e:c3:c9:c2:5b:06:10:ee:d9:62:1e:28:
                    20:ed:87:6a:d6:49:7c:16:16:f1:05:e5:0d:d5:6d:
                    48:5a:73:1e:59:54:59:b1:d2:d1:dc:43:f5:56:6c:
                    dd:3b:9e:58:dc:e5:13:32:62:ce:fd:20:3e:b7:f6:
                    0d:7c:a9:e0:9a:f3:c2:a3:70:06:97:5c:df:b8:8d:
                    ac:99:09:c9:1a:f3:99:80:75:0a:6c:62:f8:9a:34:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5F:09:B5:55:4B:E5:F8:9A:B0:79:03:58:B0:D9:32:BA:4A:63:3D
            X509v3 Authority Key Identifier:
                keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136392e302f32342d3234203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:69:2a:14:7d:10:65:37:38:74:38:55:72:73:f9:fb:5b:18:
         83:5b:f6:33:58:c7:98:4a:d2:03:a5:5c:09:1a:ab:12:a3:1d:
         6f:91:34:2b:1d:3d:39:12:1d:a0:81:e4:45:b7:4e:f5:c5:47:
         3c:56:e8:04:cf:98:db:41:69:e2:e0:9e:40:80:ef:f8:52:dc:
         30:3b:54:71:a5:9e:7e:9e:3a:bd:02:de:02:74:e8:63:52:e7:
         f3:5b:b4:57:ca:ff:a2:2f:94:72:8e:f2:15:a3:6a:74:1b:d0:
         9a:42:7d:b2:3c:f1:11:29:42:dd:47:4b:61:26:de:a3:86:cb:
         30:48:05:a4:3e:bb:e7:86:4a:30:19:5a:11:b5:12:e1:8c:c5:
         c0:26:36:fe:f9:ff:93:e8:ae:c4:4f:5f:9f:70:e1:af:cb:f3:
         0c:7e:b4:dd:47:fe:cc:35:b8:ec:c5:d1:ed:5d:d8:32:cc:63:
         ef:08:8d:dc:6f:41:b4:d9:8b:da:04:8f:50:8b:f2:e2:10:8d:
         ff:48:27:f1:e3:8c:3c:6a:0a:61:ae:fc:50:c5:56:a4:10:99:
         40:7c:6b:07:0a:7c:cb:c0:24:67:e7:32:c6:02:b6:dd:7e:80:
         a0:cb:ad:d1:02:b9:70:47:7c:5d:78:89:38:36:08:88:71:73:
         19:87:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:21 2026 by rpki-client