This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          mw/3oGCmZT108E8Q0g0zeYGFegTybaMOkZzsMlFtGQ8=
Subject key identifier:   4F:7E:20:DB:EA:DE:F6:B9:A7:81:74:88:4F:D8:C5:C6:4F:77:18:18
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       38A38238A6DFBE4B600D241B015EB76756D55D9A
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
Signing time:             Wed 14 Jan 2026 16:00:02 +0000
ROA not before:           Wed 14 Jan 2026 15:55:02 +0000
ROA not after:            Wed 13 Jan 2027 16:00:02 +0000
asID:                     142364
IP address blocks:        103.170.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 02:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a3:82:38:a6:df:be:4b:60:0d:24:1b:01:5e:b7:67:56:d5:5d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: Jan 14 15:55:02 2026 GMT
            Not After : Jan 13 16:00:02 2027 GMT
        Subject: CN=4F7E20DBEADEF6B9A78174884FD8C5C64F771818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:cf:5b:90:e8:dc:8c:f2:9b:bf:f7:f5:95:
                    5e:a0:c9:f7:16:30:3d:17:8c:a7:ce:c1:68:d4:33:
                    6f:43:70:ff:71:92:1d:81:a6:fb:b2:98:e2:f3:82:
                    ae:74:38:17:72:b2:c7:fc:94:65:52:aa:71:06:c1:
                    3c:4a:e3:e4:a7:31:55:91:75:84:bc:6a:09:39:54:
                    e9:85:0c:9e:90:bf:87:fc:3a:22:13:d6:67:09:ff:
                    e6:39:6e:9d:01:54:05:ff:06:2a:eb:e1:2d:37:a4:
                    ab:70:1d:e7:4b:a8:20:87:74:45:79:3e:01:54:5c:
                    32:44:2f:1c:b5:10:7d:7a:9f:97:c4:b9:e7:81:3a:
                    19:05:40:4d:40:6f:5e:f6:29:41:9d:91:45:65:b6:
                    e9:80:77:aa:b8:e4:d7:15:2e:7e:e6:c2:6b:5a:64:
                    6e:7f:dc:b0:a1:e6:0b:ef:6b:56:33:88:3c:2a:82:
                    33:c7:c5:a4:d6:7e:2a:b4:ee:5d:52:ac:0c:23:ac:
                    44:fa:e2:c9:f0:c9:3b:f5:54:9d:dc:38:3f:a2:ae:
                    d7:cc:84:69:db:54:2a:65:27:04:aa:7e:84:4a:da:
                    5c:c9:48:40:b1:4c:f3:8b:3c:5e:a7:e9:7b:98:1d:
                    38:04:de:46:c6:55:d8:b2:33:b2:76:20:21:de:bd:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:20:DB:EA:DE:F6:B9:A7:81:74:88:4F:D8:C5:C6:4F:77:18:18
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:56:82:16:93:74:e0:85:66:b9:60:83:cd:32:40:9c:0f:3d:
         31:67:24:31:68:56:08:c8:6c:d0:7b:6b:c2:54:d4:f3:37:e1:
         76:b2:0f:d8:be:91:fd:1e:12:09:49:a7:30:bf:36:1f:fc:ee:
         72:d0:9c:80:a0:dc:5a:3e:53:d9:19:ad:9c:28:e2:a5:ca:f0:
         93:7c:01:45:63:e6:9d:b8:6b:93:2d:24:03:e9:35:91:dd:6d:
         50:7e:6e:9c:1f:6d:0d:ec:5a:98:37:53:e8:6d:52:b2:e4:30:
         fa:6e:0a:39:15:d9:48:3e:53:d9:8d:e0:26:c5:b9:ec:3a:8c:
         eb:13:38:ff:76:26:3f:67:e1:be:9b:c8:44:2a:3b:8d:9b:1b:
         bf:81:ac:9b:3d:d0:59:e0:08:c4:a9:27:cb:79:ca:a6:4c:c9:
         ef:dc:5a:87:1b:ba:5a:0c:7d:45:59:c5:cb:92:93:cc:9a:5e:
         82:c5:96:8a:dd:1f:5f:6c:4b:7d:62:e0:3f:42:37:55:96:c7:
         f5:ac:71:84:e3:13:2b:5e:b8:1c:a3:34:fa:63:f1:31:cd:90:
         5c:f6:6d:ac:78:de:8d:46:bd:11:4d:62:2e:d5:d2:da:a5:bf:
         6e:73:78:b1:8f:04:7a:18:cb:c6:7c:96:69:53:93:38:0a:a4:
         7b:e9:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:31:10 2026 by rpki-client