This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa
File:                     3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (raw, json)
Hash identifier:          FB2w9FFq9iyYkttvd+v5WHr2UrftQkkwfLGbohLA45o=
Subject key identifier:   99:2D:BB:B8:E1:31:1F:8B:51:EB:AD:23:F7:DF:0C:F9:4A:9F:77:5E
Certificate issuer:       /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial:       78330D0F27AD30D96292B55641413B8E05EA4969
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa
Signing time:             Thu 25 Dec 2025 02:00:00 +0000
ROA not before:           Thu 25 Dec 2025 01:55:00 +0000
ROA not after:            Thu 24 Dec 2026 02:00:00 +0000
asID:                     147090
IP address blocks:        103.173.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
                          rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 11:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:33:0d:0f:27:ad:30:d9:62:92:b5:56:41:41:3b:8e:05:ea:49:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
        Validity
            Not Before: Dec 25 01:55:00 2025 GMT
            Not After : Dec 24 02:00:00 2026 GMT
        Subject: CN=992DBBB8E1311F8B51EBAD23F7DF0CF94A9F775E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:e2:d1:55:bc:9e:ca:da:88:a7:d0:4d:42:
                    e9:06:31:e1:0e:44:89:b1:83:6d:17:1e:e3:dd:f5:
                    35:1f:74:97:2a:e2:b9:86:52:b5:20:3d:e0:63:a4:
                    00:7d:5d:e6:b8:2a:b6:40:c4:cd:2a:d3:db:c3:a9:
                    81:68:eb:77:72:8b:69:d8:c2:c4:4d:63:54:47:f4:
                    34:0f:54:e2:67:32:88:a0:e3:8f:e5:7d:4e:f0:8d:
                    5f:88:02:3e:0c:48:55:6b:72:4c:48:94:66:9d:b7:
                    96:c7:4b:19:b3:91:4e:ca:ff:44:4c:ea:07:e8:e0:
                    4d:e2:8c:c7:4d:70:06:75:47:5b:70:89:15:73:73:
                    4e:4a:ed:3f:8d:cc:ee:04:77:05:a8:d6:0f:a9:82:
                    45:67:a0:51:64:5a:5e:10:29:3b:19:c4:f6:26:65:
                    f9:51:a5:7e:d5:b9:59:76:58:fd:5e:0c:5b:03:19:
                    4b:d9:01:3b:7d:43:f5:66:d6:3b:94:26:c3:93:23:
                    72:96:ec:c9:63:96:65:09:f1:6f:99:1f:86:58:32:
                    b7:4f:23:e1:fb:ab:e0:88:8d:b7:9e:ef:05:1b:5c:
                    ca:eb:59:cb:9f:f0:93:5a:2e:83:03:d0:ba:67:d7:
                    ea:89:6c:a4:f7:dc:be:a7:01:b3:e8:33:e2:b7:f2:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2D:BB:B8:E1:31:1F:8B:51:EB:AD:23:F7:DF:0C:F9:4A:9F:77:5E
            X509v3 Authority Key Identifier:
                keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:8b:c9:6b:b6:de:7d:6d:97:d5:7c:a8:f4:f9:75:90:d1:
         9d:cd:6c:fa:e2:48:59:af:10:c5:ad:3a:2f:8c:ba:77:3b:b2:
         20:c7:26:13:90:7a:53:c1:6e:82:ee:ef:ee:bb:b5:ba:bc:f4:
         a9:b3:b4:57:79:bf:55:06:c8:62:dd:6d:46:db:4b:90:72:60:
         22:17:0e:18:14:13:6f:d2:ef:be:49:b7:24:09:0b:90:7c:d0:
         c3:04:53:a4:99:7b:5b:94:27:ca:24:82:b5:24:55:2f:4a:68:
         f7:54:eb:fe:28:b2:55:2e:d3:94:95:0d:90:00:ec:e6:0b:8e:
         36:e4:4f:75:6f:3d:c1:7f:1f:07:1b:55:cc:fa:67:40:3a:05:
         23:36:c8:d6:97:3a:35:ff:3d:b1:96:5d:5f:33:0e:65:b4:17:
         19:76:c8:4c:05:a9:74:17:62:07:a9:d9:a5:ef:99:ec:99:89:
         5f:41:07:cf:c2:3d:6b:81:98:10:64:64:98:61:73:02:48:30:
         52:b3:67:3c:02:f7:ab:3b:63:95:ce:98:1d:77:d8:52:3f:8a:
         ba:ce:1e:e3:2f:7f:d3:99:98:82:02:28:1c:20:a0:95:8c:2a:
         d6:e5:af:6c:bd:ad:ed:a8:0a:f3:b0:19:e7:5f:65:9d:5d:03:
         c2:1f:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:52:37 2026 by rpki-client