This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa
File:                     3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa (raw, json)
Hash identifier:          ChY3ilufuzDt2M3sKZA8AjK4T57K+5mOlYRLYaVsNtA=
Subject key identifier:   CB:80:92:41:04:7E:BC:11:95:27:34:D1:62:14:B4:F1:E2:F2:49:68
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       2A6BE4123056E7EC6FC43356AFA7897C534C5230
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa
Signing time:             Fri 26 Dec 2025 03:00:02 +0000
ROA not before:           Fri 26 Dec 2025 02:55:02 +0000
ROA not after:            Fri 25 Dec 2026 03:00:02 +0000
asID:                     137343
IP address blocks:        103.113.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6b:e4:12:30:56:e7:ec:6f:c4:33:56:af:a7:89:7c:53:4c:52:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Dec 26 02:55:02 2025 GMT
            Not After : Dec 25 03:00:02 2026 GMT
        Subject: CN=CB809241047EBC11952734D16214B4F1E2F24968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:ce:68:3b:4f:ed:1a:86:60:ed:c8:0f:01:
                    12:bf:d8:31:b8:6e:b7:d3:e8:65:4f:09:a7:e9:17:
                    fc:0c:29:00:de:36:eb:0a:f6:19:54:00:2a:a4:d1:
                    21:cb:0b:af:05:d4:c4:29:e2:9f:a5:a5:6b:d4:49:
                    0f:6e:85:2f:c1:ae:83:4c:1c:00:9d:2f:0d:87:8a:
                    38:7e:a1:9d:a9:1d:2c:46:64:27:cd:dc:3a:33:9a:
                    86:e7:74:0a:81:90:ff:14:ed:30:b8:55:ad:be:4f:
                    0c:0e:7d:df:04:b7:b2:33:74:6b:d2:84:68:e8:48:
                    67:63:1b:e6:56:dd:97:e4:fa:cb:63:ca:cc:ba:af:
                    e3:20:2c:2a:05:ea:bf:e6:ac:c7:fe:51:45:e8:cc:
                    c0:22:f3:d6:93:54:8b:38:8a:5e:55:6e:a2:4c:3e:
                    70:43:21:89:84:49:40:f3:72:d6:e4:8a:a1:62:70:
                    75:db:24:8b:9f:d3:86:74:a0:ce:75:16:e7:dc:37:
                    7a:c2:7e:7c:9d:1e:a9:d6:d1:d0:f0:2c:33:70:80:
                    04:c2:ee:d2:41:33:26:4a:9a:98:10:c9:b4:06:44:
                    f7:91:81:f4:95:d7:49:f6:ff:19:13:b9:ab:be:fd:
                    a6:77:87:bf:4e:9a:d0:00:d6:f5:96:02:08:52:e8:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:92:41:04:7E:BC:11:95:27:34:D1:62:14:B4:F1:E2:F2:49:68
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32322d3234203d3e20313337333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:8f:27:e7:0a:c0:e4:c7:df:ed:e5:61:e3:70:d0:98:3d:
         27:a4:3f:47:d7:81:01:8a:79:43:01:52:53:82:50:00:0a:b8:
         5f:d2:f6:97:56:33:56:0f:24:a7:bb:99:31:05:6d:b4:1c:2b:
         25:81:10:72:80:7d:94:82:c3:d5:5a:99:ce:8a:a4:bc:e8:07:
         aa:d8:17:c5:a7:94:d0:ed:13:b3:3c:19:ec:3c:11:34:31:14:
         92:93:a7:a9:db:53:3d:ad:f9:a7:14:83:00:84:ea:75:20:e9:
         4a:9f:e2:ac:03:7a:36:e0:a6:98:db:46:76:60:ff:0c:09:6f:
         7d:1e:90:5e:f3:a3:d1:a8:74:72:77:b3:79:2a:26:b1:66:59:
         50:9a:a4:a4:47:bf:35:45:f3:bf:42:e8:e0:34:08:36:30:14:
         e1:ae:bc:b2:54:24:64:32:d7:54:8a:d1:72:1f:c3:7a:28:25:
         69:52:aa:58:86:bb:16:11:05:dc:08:9d:37:dc:82:15:df:11:
         69:ee:f4:9f:96:90:f6:a7:ca:42:54:16:50:6b:ca:40:60:2c:
         0b:02:3b:45:83:27:55:ca:fe:a1:a2:10:3e:70:1e:62:99:5a:
         f3:2e:76:c5:83:74:59:65:3c:8d:ce:a2:ef:d3:8d:7d:05:dc:
         94:c1:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:28:02 2026 by rpki-client