This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa
File:                     3130332e39372e342e302f32322d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          cSbzW37UFSp4uDE4SjobLjyIHBQEPum3WY749moxuxA=
Subject key identifier:   76:3C:C4:7A:D6:31:45:D2:3F:00:E7:17:D7:DD:48:F7:59:11:F5:CE
Certificate issuer:       /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial:       13D624147512C0F11AEDD9BB27FF7F85A9D8D81E
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa
Signing time:             Sat 17 Jan 2026 08:02:35 +0000
ROA not before:           Sat 17 Jan 2026 07:57:35 +0000
ROA not after:            Sat 16 Jan 2027 08:02:35 +0000
asID:                     136127
IP address blocks:        103.97.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
                          rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 12:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d6:24:14:75:12:c0:f1:1a:ed:d9:bb:27:ff:7f:85:a9:d8:d8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Validity
            Not Before: Jan 17 07:57:35 2026 GMT
            Not After : Jan 16 08:02:35 2027 GMT
        Subject: CN=763CC47AD63145D23F00E717D7DD48F75911F5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:da:2c:3f:73:f2:4d:df:3a:d2:85:21:53:
                    40:d4:3a:44:eb:45:ab:8c:cb:f5:71:83:9c:13:ce:
                    53:c5:38:b2:48:5e:3e:93:2b:30:d6:f4:ef:ee:06:
                    e4:80:47:03:f6:c0:6e:6f:9e:0a:b4:08:70:78:a8:
                    8f:01:1c:52:89:69:2d:77:f0:81:7a:51:26:34:00:
                    81:f3:48:aa:e4:3b:7f:bc:0b:9a:a6:4a:0d:c3:d3:
                    16:ec:65:1d:50:db:f6:04:11:ac:c7:e2:55:3f:91:
                    05:e0:6a:18:9c:38:da:52:98:d6:ba:f2:22:67:9e:
                    f9:34:82:4b:01:08:8d:ee:71:d4:c6:de:52:11:38:
                    8b:ae:a1:42:b1:e2:4a:d3:12:04:03:47:55:6d:9b:
                    58:7c:8c:3a:57:9f:6f:72:1d:02:e8:f7:7e:19:c2:
                    9f:6e:1d:02:d9:05:0e:21:16:59:8a:a7:63:f7:fa:
                    57:44:09:29:d2:ac:26:e9:5d:81:b0:bf:0b:1d:c5:
                    f7:2f:8c:52:c1:c3:4e:33:31:fe:43:d6:c1:c9:06:
                    52:56:c6:9d:e0:d7:2f:18:1e:67:d0:8e:72:7f:9a:
                    3e:22:a4:56:a7:8c:bf:d6:e5:13:fd:d4:53:b3:42:
                    00:d0:32:8c:71:6d:cd:ab:6f:f5:69:21:da:66:b1:
                    e2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3C:C4:7A:D6:31:45:D2:3F:00:E7:17:D7:DD:48:F7:59:11:F5:CE
            X509v3 Authority Key Identifier:
                keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e342e302f32322d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:45:d9:4b:15:f1:49:8f:ff:83:7e:53:69:51:5a:e2:2b:
         08:23:ad:3b:a1:59:f8:84:fe:93:87:fb:4b:2d:27:fc:b2:d1:
         76:31:88:cb:47:38:1f:68:1c:52:13:a5:a3:cc:09:d5:5c:a5:
         d1:98:33:03:0a:a6:70:31:fa:ea:34:be:be:10:56:bb:11:48:
         6e:6d:dd:fa:fb:db:34:06:02:84:fc:1a:2c:90:b3:cd:09:99:
         a1:cb:32:60:35:d1:98:ee:10:7e:18:79:ee:09:72:df:ed:dc:
         8f:48:29:8c:19:4b:a4:3d:8c:4e:5e:03:30:61:3f:43:d1:3a:
         2a:ac:17:46:a0:fb:11:75:7e:9b:85:2b:8a:1f:35:dc:3a:1c:
         1d:2c:8d:1e:ad:fe:61:4b:7f:e5:2c:4e:b5:ca:7a:8a:e0:4a:
         89:ef:d6:4a:5a:e0:99:dd:fd:ef:83:b6:54:fe:26:84:62:73:
         8f:03:8e:fa:69:68:17:3d:bd:5d:9d:7f:a3:23:5f:73:52:a2:
         1d:dd:16:49:d1:fa:ce:c1:b8:1b:dd:4d:44:8d:08:c3:32:52:
         b1:a1:21:84:d5:de:9a:ee:09:aa:7a:54:2e:12:fc:51:90:30:
         08:31:36:4f:81:54:b5:58:20:9a:b8:7f:57:44:bb:87:de:de:
         f0:ff:72:01
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUE9YkFHUSwPEa7dm7J/9/hanY2B4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0
NjNBMUEyMjAeFw0yNjAxMTcwNzU3MzVaFw0yNzAxMTYwODAyMzVaMDMxMTAvBgNV
BAMTKDc2M0NDNDdBRDYzMTQ1RDIzRjAwRTcxN0Q3REQ0OEY3NTkxMUY1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqNosP3PyTd860oUhU0DUOkTr
RauMy/Vxg5wTzlPFOLJIXj6TKzDW9O/uBuSARwP2wG5vngq0CHB4qI8BHFKJaS13
8IF6USY0AIHzSKrkO3+8C5qmSg3D0xbsZR1Q2/YEEazH4lU/kQXgahicONpSmNa6
8iJnnvk0gksBCI3ucdTG3lIROIuuoUKx4krTEgQDR1Vtm1h8jDpXn29yHQLo934Z
wp9uHQLZBQ4hFlmKp2P3+ldECSnSrCbpXYGwvwsdxfcvjFLBw04zMf5D1sHJBlJW
xp3g1y8YHmfQjnJ/mj4ipFanjL/W5RP91FOzQgDQMoxxbc2rb/VpIdpmseL3AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUdjzEetYxRdI/AOcX191I91kR9c4wHwYDVR0j
BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1
ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB
MUEyMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0YjI3MzAzLTllM2QtNGQ0Mi1h
ZjI1LTZhMGYxMTgwOGYyNy8wLzMxMzAzMzJlMzkzNzJlMzQyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMTMzMzYzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnYQQwDQYJKoZIhvcN
AQELBQADggEBAAyQRdlLFfFJj/+DflNpUVriKwgjrTuhWfiE/pOH+0stJ/yy0XYx
iMtHOB9oHFITpaPMCdVcpdGYMwMKpnAx+uo0vr4QVrsRSG5t3fr72zQGAoT8GiyQ
s80JmaHLMmA10ZjuEH4Yee4Jct/t3I9IKYwZS6Q9jE5eAzBhP0PROiqsF0ag+xF1
fpuFK4ofNdw6HB0sjR6t/mFLf+UsTrXKeorgSonv1kpa4Jnd/e+DtlT+JoRic48D
jvppaBc9vV2df6MjX3NSoh3dFknR+s7BuBvdTUSNCMMyUrGhIYTV3pruCap6VC4S
/FGQMAgxNk+BVLVYIJq4f1dEu4fe3vD/cgE=
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:26 2026 by rpki-client