This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa
File:                     3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (raw, json)
Hash identifier:          amGg2X/e259yYVIAXgMMcb+ASupbTD2+EIvh0Q1tcnY=
Subject key identifier:   61:DC:21:53:CF:48:BF:16:52:45:C7:19:A6:AA:E4:91:07:B6:5C:7E
Certificate issuer:       /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
Certificate serial:       300637E8CCDE9E2E6621757DF570C6052092B111
Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa
Signing time:             Mon 22 Dec 2025 09:02:30 +0000
ROA not before:           Mon 22 Dec 2025 08:57:30 +0000
ROA not after:            Mon 21 Dec 2026 09:02:30 +0000
asID:                     136094
IP address blocks:        103.89.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl
                          rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 10:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:06:37:e8:cc:de:9e:2e:66:21:75:7d:f5:70:c6:05:20:92:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8
        Validity
            Not Before: Dec 22 08:57:30 2025 GMT
            Not After : Dec 21 09:02:30 2026 GMT
        Subject: CN=61DC2153CF48BF165245C719A6AAE49107B65C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:4b:0e:57:d0:60:be:3e:72:15:9a:11:ee:
                    c1:31:14:af:ee:6c:b1:3b:a5:44:c1:ff:f3:a3:40:
                    49:1b:9a:79:e1:d8:67:58:4d:b8:9f:ca:4f:99:72:
                    fb:d9:46:3f:b5:14:6b:a0:de:d1:b8:c6:07:79:71:
                    35:a1:d4:7a:6c:3a:7e:06:4c:4d:df:c1:7e:a3:f9:
                    a1:07:ed:96:ea:cc:34:e2:89:1a:dc:a1:ce:cd:94:
                    75:98:a1:1f:52:24:7c:8f:91:40:b0:d6:9f:85:76:
                    53:ea:48:4a:b4:35:4e:9f:81:d4:fe:60:85:84:f5:
                    ef:35:ed:18:6c:c6:ed:45:e7:22:b6:2f:ad:53:d4:
                    1e:67:ca:86:91:02:67:fd:22:40:14:d6:6d:47:ad:
                    b8:e3:2d:77:69:98:b8:af:7e:04:0e:37:e7:8b:b4:
                    38:34:79:18:b1:d4:eb:57:13:f1:fa:d3:17:5e:fa:
                    32:1c:7a:64:02:68:61:52:0a:1d:b1:45:f9:8c:6d:
                    c8:40:6d:b2:1b:55:99:d6:4d:5e:1e:c1:df:a9:16:
                    8f:37:43:d1:fa:ab:73:58:1c:7a:35:39:5e:f6:82:
                    f8:53:a7:f2:13:8c:78:25:b4:e1:c1:21:de:bc:2c:
                    97:a3:77:e7:bc:1c:60:fc:42:2b:b4:6a:2f:e8:fa:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:21:53:CF:48:BF:16:52:45:C7:19:A6:AA:E4:91:07:B6:5C:7E
            X509v3 Authority Key Identifier:
                keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:59:f3:da:5e:3b:8e:31:0f:ec:9a:21:ce:6c:73:fc:3c:a6:
         68:e7:d5:3c:34:43:78:cb:21:ee:d7:fa:aa:c5:36:39:a4:1d:
         3d:6f:65:b9:41:02:1a:a8:37:6a:d4:0e:da:92:ca:85:6e:63:
         4c:9c:93:77:20:78:ed:4d:a5:1c:a6:e7:5d:28:92:30:15:4b:
         0b:96:1f:96:36:70:71:2b:19:0c:b7:b9:ba:70:28:86:72:67:
         62:62:ad:7a:82:f2:a2:d1:24:2d:7b:03:da:40:ed:07:b1:ec:
         11:e7:a9:5e:b2:e5:c9:09:54:63:7f:17:d7:6d:60:be:48:a6:
         1d:99:5d:d4:be:a1:84:01:dc:29:76:f3:5b:d9:a7:93:22:e1:
         be:ca:c0:23:65:e7:28:4d:b0:5a:b2:5a:04:59:30:75:43:84:
         01:e6:31:b3:51:86:48:f5:87:3d:f3:55:10:f5:d6:e0:bf:1f:
         44:15:d7:a4:aa:15:24:a0:f7:4e:0a:7a:95:73:aa:c9:ed:6b:
         d7:c5:ae:6c:ce:55:0b:d7:8c:b7:10:3f:b4:86:58:c5:28:18:
         10:e1:1b:2d:c4:90:2e:c9:14:7d:e3:8d:93:37:0e:e4:9c:f7:
         8b:35:07:e5:b3:79:db:4e:63:6e:1f:bb:aa:a6:3e:a6:93:04:
         8f:cf:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:29 2026 by rpki-client