This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa
File:                     3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (raw, json)
Hash identifier:          u7eiIUnffNPdeqqP/VglXdzrnbj56dfexEAIJFCuTP0=
Subject key identifier:   28:D1:3D:DF:9F:B1:D9:2B:B7:4C:03:F0:21:43:D7:DD:BB:48:DC:BC
Certificate issuer:       /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
Certificate serial:       7702FC5D9A8B8B3A3AD6DE068E9B329B340D6613
Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa
Signing time:             Sat 27 Dec 2025 04:00:02 +0000
ROA not before:           Sat 27 Dec 2025 03:55:02 +0000
ROA not after:            Sat 26 Dec 2026 04:00:02 +0000
asID:                     150282
IP address blocks:        103.43.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl
                          rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 07:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:02:fc:5d:9a:8b:8b:3a:3a:d6:de:06:8e:9b:32:9b:34:0d:66:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F
        Validity
            Not Before: Dec 27 03:55:02 2025 GMT
            Not After : Dec 26 04:00:02 2026 GMT
        Subject: CN=28D13DDF9FB1D92BB74C03F02143D7DDBB48DCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:8b:15:e2:2a:fd:90:b0:6a:70:6c:b1:87:
                    c2:00:62:7a:bb:b9:0a:6b:c6:da:b2:d8:2b:b1:52:
                    0e:bf:7a:2a:be:e5:fd:82:9b:76:98:09:90:bc:e1:
                    6c:36:c2:13:8b:1e:26:a2:43:87:04:bc:72:13:78:
                    ad:cd:61:a6:df:72:61:cf:1c:55:e4:21:7a:81:61:
                    44:ce:3b:fd:4b:01:62:9c:12:41:a5:50:b3:97:9d:
                    47:64:c2:dd:46:80:5a:63:9b:56:e7:d3:7b:b2:1a:
                    9c:00:ba:ac:40:35:7f:fa:b5:00:04:33:a8:1e:35:
                    c3:56:80:91:54:01:34:24:b4:2b:29:0f:f6:77:05:
                    55:ea:1b:a6:29:ac:0f:1f:4d:f4:f3:76:02:0f:33:
                    88:39:2d:00:95:a6:f8:ff:b3:dc:6b:5d:0a:72:b5:
                    62:07:3f:a3:f3:94:73:26:0b:ad:46:06:bc:3d:d4:
                    09:24:cd:97:3f:6b:8d:4b:26:6a:0a:2c:bf:c0:11:
                    d6:e8:76:61:0d:b9:9a:7e:4a:fc:35:e9:6e:ea:80:
                    ca:0c:c3:70:2c:3f:c7:7f:05:13:73:1e:7d:f5:df:
                    0f:c7:75:38:0b:7a:70:8b:9d:c0:93:51:19:9f:70:
                    e0:97:6d:ae:2d:c8:b8:0c:00:ac:75:9c:7b:81:be:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D1:3D:DF:9F:B1:D9:2B:B7:4C:03:F0:21:43:D7:DD:BB:48:DC:BC
            X509v3 Authority Key Identifier:
                keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/3130332e34332e32362e302f32342d3234203d3e20313530323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:42:25:af:6e:a3:c6:38:86:f6:ff:ca:17:b0:0d:92:9e:
         27:93:eb:c4:ba:e2:be:57:09:76:8d:c9:cf:30:cf:b7:2a:c8:
         34:82:dc:3c:75:b9:8a:a9:2f:fd:4e:a1:b0:fe:df:bc:ab:af:
         0b:8d:eb:b1:7c:2b:bc:8d:26:d2:e5:b2:ab:84:ac:f9:fa:f3:
         6c:b6:6c:8b:70:bc:9b:2b:9b:70:9f:8c:51:81:27:cf:fd:64:
         63:52:d2:19:66:71:cb:83:71:f5:77:37:2d:dc:cd:2f:4e:45:
         21:1c:9f:e8:db:98:76:ec:7f:9e:bd:db:f1:0e:49:3b:b5:31:
         5f:ad:93:61:4a:8f:ac:5a:2a:fe:3f:ca:21:9b:68:e8:3a:2d:
         fb:fa:7a:b8:38:71:2a:1d:a3:e9:24:8b:ad:b7:3b:59:bc:86:
         a0:bc:f0:3d:b4:57:53:8f:a6:ed:17:c8:0b:d9:47:9c:b8:8c:
         d6:b3:3c:b6:55:df:3f:22:63:53:be:ec:19:cb:68:91:32:3e:
         b8:14:80:a1:5e:04:08:87:3a:12:6b:19:fc:4d:3c:8e:18:58:
         ed:62:89:70:ba:ba:ad:02:37:3f:01:4b:6e:8f:7e:32:cc:74:
         26:fd:54:91:53:67:a9:9e:92:df:06:f8:64:01:cc:88:f9:7f:
         8a:15:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:09:47 2026 by rpki-client