This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
File:                     3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa (raw, json)
Hash identifier:          H1YJopF0jR3qbbFBf67x3xHiCTJIJCzCPaxyU4NRgn4=
Subject key identifier:   5C:E5:4C:1F:82:39:1D:19:31:37:87:AD:23:92:BE:1F:A3:1A:F5:93
Certificate issuer:       /CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
Certificate serial:       674CC2281595131C55D5FC88661C1E9B548082BC
Authority key identifier: 94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa
Signing time:             Fri 26 Dec 2025 03:00:02 +0000
ROA not before:           Fri 26 Dec 2025 02:55:02 +0000
ROA not after:            Fri 25 Dec 2026 03:00:02 +0000
asID:                     137343
IP address blocks:        103.113.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl
                          rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 23:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:c2:28:15:95:13:1c:55:d5:fc:88:66:1c:1e:9b:54:80:82:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F6C26027B9F72AA8701D1296627FA57809A6F3
        Validity
            Not Before: Dec 26 02:55:02 2025 GMT
            Not After : Dec 25 03:00:02 2026 GMT
        Subject: CN=5CE54C1F82391D19313787AD2392BE1FA31AF593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:f7:10:31:f0:90:92:47:03:34:4a:6c:25:
                    72:5b:b0:5c:ae:01:bf:36:7e:d3:09:07:03:48:77:
                    43:01:0a:7b:e1:73:dc:e2:5f:bd:b7:4b:8d:2a:53:
                    ab:fa:cf:c5:8b:7e:74:44:2c:24:0f:95:11:ca:b6:
                    c2:94:91:40:79:ce:57:8f:c0:7a:c7:07:a7:9f:1a:
                    c3:c8:63:31:b6:a5:ee:7e:57:86:19:5c:a4:9e:6a:
                    b8:1d:dd:9d:31:ce:0a:d5:24:b7:1b:16:4e:e3:58:
                    07:d6:64:34:28:f0:84:07:12:95:e5:6c:14:30:fa:
                    b8:5f:80:ba:dd:10:2e:a1:81:e4:c0:ed:ff:bc:03:
                    a8:28:7f:80:97:9a:34:f9:33:03:20:de:a3:d9:b7:
                    72:4b:08:fa:ea:44:9e:15:1a:25:43:be:b4:95:e2:
                    19:65:d4:e9:a9:df:fa:df:8b:30:75:87:04:28:10:
                    f7:d9:f1:6a:bd:07:93:a7:1f:72:6c:45:40:64:76:
                    9f:81:2d:0d:e4:59:84:58:3c:8e:d8:15:23:0b:22:
                    95:d0:3e:52:7a:4a:25:85:f6:d5:67:65:39:db:36:
                    65:93:c0:de:fe:67:af:da:3f:7f:4b:03:1a:9e:5f:
                    e4:01:e8:7b:fb:bd:e4:88:bf:6c:00:1c:d9:46:c5:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E5:4C:1F:82:39:1D:19:31:37:87:AD:23:92:BE:1F:A3:1A:F5:93
            X509v3 Authority Key Identifier:
                keyid:94:F6:C2:60:27:B9:F7:2A:A8:70:1D:12:96:62:7F:A5:78:09:A6:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/94F6C26027B9F72AA8701D1296627FA57809A6F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F6C26027B9F72AA8701D1296627FA57809A6F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50d00718-5210-4438-b64d-62ec1f3ebcd0/0/3130332e3131332e3132342e302f32342d3234203d3e20313337333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:85:d0:67:2b:5d:31:78:b5:44:81:0d:1a:11:02:0d:72:
         34:47:35:cf:8c:26:36:71:05:2a:3f:f0:a2:93:0b:ca:6d:68:
         04:fe:c5:fd:c6:23:f3:10:ab:c4:f9:39:c9:77:59:9e:5a:ef:
         30:27:fc:0f:aa:99:e9:40:38:cd:0e:29:fd:69:72:57:57:43:
         99:5f:d0:94:3d:42:35:5c:24:aa:b1:8d:43:45:47:06:d9:35:
         e0:f1:03:e3:c2:fa:42:5d:86:bf:66:93:4d:50:42:77:ad:74:
         98:bc:cb:00:55:91:12:89:4c:cc:ae:60:fc:57:5e:97:41:41:
         43:3b:83:0d:46:5e:c2:79:3b:4c:25:63:d5:ec:d7:1e:47:52:
         2a:ca:fa:aa:62:e4:c4:7b:75:b7:83:9f:10:60:1f:a6:ed:bd:
         eb:69:37:47:64:3f:bb:44:c4:06:2f:eb:88:3b:a2:d4:13:f6:
         24:fc:2d:f7:e8:96:38:45:7e:b3:8e:66:d7:eb:aa:0e:fd:01:
         dd:6b:6c:03:d7:55:07:8f:8b:ae:19:ca:44:f4:cb:78:95:c8:
         f3:c1:19:ee:95:0f:e8:71:83:85:05:4f:49:91:db:51:74:95:
         23:a9:86:d5:9d:54:a5:f0:a7:9b:9c:bd:93:1e:8a:47:db:6e:
         fa:f1:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:40:26 2026 by rpki-client