This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa
File:                     3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (raw, json)
Hash identifier:          B1GpwqVmx/ho+gLDfNNDsbyOOI8aLnzd82hh+EFezgY=
Subject key identifier:   C6:C0:F4:15:40:BD:59:46:FA:9F:EC:2E:E0:2B:0E:A6:24:B5:5E:AD
Certificate issuer:       /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial:       7C0F904002D45892773C0307C7E260A9E676C8E9
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa
Signing time:             Thu 25 Dec 2025 03:00:04 +0000
ROA not before:           Thu 25 Dec 2025 02:55:04 +0000
ROA not after:            Thu 24 Dec 2026 03:00:04 +0000
asID:                     147090
IP address blocks:        103.173.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
                          rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 11:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:90:40:02:d4:58:92:77:3c:03:07:c7:e2:60:a9:e6:76:c8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
        Validity
            Not Before: Dec 25 02:55:04 2025 GMT
            Not After : Dec 24 03:00:04 2026 GMT
        Subject: CN=C6C0F41540BD5946FA9FEC2EE02B0EA624B55EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:4f:be:b7:20:33:37:1f:20:0e:b3:1d:40:
                    d8:0f:82:86:2d:47:08:dc:fe:c2:11:c2:71:a2:6a:
                    1b:15:6e:ec:02:1d:98:11:ea:39:77:2e:67:d3:57:
                    93:12:02:74:34:a8:d5:b0:14:25:95:e0:c0:ff:68:
                    6a:d8:ee:0e:e2:ba:12:93:d1:12:9d:55:c6:66:3e:
                    a9:b6:69:fc:95:07:96:47:38:9b:71:98:38:57:d8:
                    52:ca:34:4e:2a:75:f8:a3:ee:fc:f1:fe:42:a9:39:
                    e7:f9:fa:cb:a6:b9:38:52:cc:99:58:3c:8f:40:35:
                    28:4b:08:04:59:4a:c8:02:24:32:e2:3d:5d:9e:3c:
                    93:bf:7f:e7:e8:5d:aa:4a:72:3b:f8:44:43:29:ff:
                    84:45:58:79:d9:37:c2:cc:e0:c2:df:ec:d6:9c:ae:
                    0c:9c:b1:28:81:f5:71:f0:02:b8:92:c7:d2:12:b4:
                    05:a7:79:6a:08:c2:94:86:45:d1:3e:46:cb:f8:45:
                    5f:9c:3b:1e:03:a7:ce:f3:81:1f:a9:e0:d2:3f:97:
                    8a:2e:27:46:24:ba:c0:46:be:22:09:29:5a:78:9d:
                    ff:73:c0:5a:d4:ed:d1:fc:b6:4e:a4:fc:bb:cd:e5:
                    30:4a:8a:72:7e:75:d1:5f:b8:fc:08:f6:41:63:80:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:F4:15:40:BD:59:46:FA:9F:EC:2E:E0:2B:0E:A6:24:B5:5E:AD
            X509v3 Authority Key Identifier:
                keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:67:07:02:5b:30:bd:31:d7:58:e9:49:0d:01:44:f1:b2:4c:
         8c:ad:44:46:89:6a:f4:b9:48:6d:6e:1f:3a:07:ab:de:f7:39:
         d7:03:73:5b:48:50:31:1c:99:a3:f5:86:7f:f6:9a:03:ee:22:
         43:81:01:09:8b:c8:02:ae:ff:47:69:73:34:6b:54:0d:5f:02:
         e9:75:58:fe:e0:bd:f6:2b:de:5f:d3:4e:71:72:93:fd:35:13:
         23:64:99:2a:09:bd:86:79:d3:7e:b6:bb:53:ce:3b:24:ac:38:
         e9:5b:22:1a:51:a2:bf:18:69:d5:2a:ba:b0:3c:29:31:37:d5:
         11:ff:83:6c:39:68:61:42:77:84:3e:e5:ff:be:39:a6:2f:3a:
         12:63:26:53:b7:04:68:b3:8e:1a:af:e0:67:14:2f:14:2e:f9:
         0e:93:36:be:3f:bb:f2:8e:96:ee:73:f1:d4:91:d2:8c:ec:38:
         70:2f:7e:22:2a:74:86:50:38:2e:b7:fe:7f:92:f3:2c:a3:ba:
         01:ff:7f:e6:c4:f1:b2:82:37:ee:ea:7a:68:91:be:4f:26:93:
         bf:7b:d1:66:50:dd:e0:12:3d:ec:bf:20:02:f0:52:fe:0b:25:
         b4:01:cb:3e:54:d1:5c:a2:dd:03:25:2f:24:16:d1:56:5e:89:
         f5:10:28:a7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUfA+QQALUWJJ3PAMHx+JgqeZ2yOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVF
NEYyOEI5NjAeFw0yNTEyMjUwMjU1MDRaFw0yNjEyMjQwMzAwMDRaMDMxMTAvBgNV
BAMTKEM2QzBGNDE1NDBCRDU5NDZGQTlGRUMyRUUwMkIwRUE2MjRCNTVFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAE++tyAzNx8gDrMdQNgPgoYt
Rwjc/sIRwnGiahsVbuwCHZgR6jl3LmfTV5MSAnQ0qNWwFCWV4MD/aGrY7g7iuhKT
0RKdVcZmPqm2afyVB5ZHOJtxmDhX2FLKNE4qdfij7vzx/kKpOef5+sumuThSzJlY
PI9ANShLCARZSsgCJDLiPV2ePJO/f+foXapKcjv4REMp/4RFWHnZN8LM4MLf7Nac
rgycsSiB9XHwAriSx9IStAWneWoIwpSGRdE+Rsv4RV+cOx4Dp87zgR+p4NI/l4ou
J0YkusBGviIJKVp4nf9zwFrU7dH8tk6k/LvN5TBKinJ+ddFfuPwI9kFjgBfTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxsD0FUC9WUb6n+wu4CsOpiS1Xq0wHwYDVR0j
BBgwFoAURRVHKAbdAbWXFUEBA9UcBeTyi5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NGYxMzcyYy00M2E2LTRmZGEtYjUwZS1kMDFlYjQyYzY4OWYvMC80NTE1NDcyODA2
REQwMUI1OTcxNTQxMDEwM0Q1MUMwNUU0RjI4Qjk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVFNEYy
OEI5Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0ZjEzNzJjLTQzYTYtNGZkYS1i
NTBlLWQwMWViNDJjNjg5Zi8wLzMxMzAzMzJlMzEzNzMzMmUzMTM0MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzczMDM5MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrY4wDQYJ
KoZIhvcNAQELBQADggEBAFlnBwJbML0x11jpSQ0BRPGyTIytREaJavS5SG1uHzoH
q973OdcDc1tIUDEcmaP1hn/2mgPuIkOBAQmLyAKu/0dpczRrVA1fAul1WP7gvfYr
3l/TTnFyk/01EyNkmSoJvYZ50362u1POOySsOOlbIhpRor8YadUqurA8KTE31RH/
g2w5aGFCd4Q+5f++OaYvOhJjJlO3BGizjhqv4GcULxQu+Q6TNr4/u/KOlu5z8dSR
0ozsOHAvfiIqdIZQOC63/n+S8yyjugH/f+bE8bKCN+7qemiRvk8mk7970WZQ3eAS
Pey/IALwUv4LJbQByz5U0Vyi3QMlLyQW0VZeifUQKKc=
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:49:49 2026 by rpki-client