This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa
File:                     3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (raw, json)
Hash identifier:          29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=
Subject key identifier:   1F:82:DD:9D:17:27:6A:06:F2:EC:C5:84:62:1B:4A:A6:74:3E:07:F0
Certificate issuer:       /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81
Certificate serial:       051514064CD60E3089DCD7B1DE2636E53A4EC840
Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa
Signing time:             Sat 24 Jan 2026 06:00:01 +0000
ROA not before:           Sat 24 Jan 2026 05:55:01 +0000
ROA not after:            Sat 23 Jan 2027 06:00:01 +0000
asID:                     149661
IP address blocks:        103.184.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl
                          rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 10:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:15:14:06:4c:d6:0e:30:89:dc:d7:b1:de:26:36:e5:3a:4e:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81
        Validity
            Not Before: Jan 24 05:55:01 2026 GMT
            Not After : Jan 23 06:00:01 2027 GMT
        Subject: CN=1F82DD9D17276A06F2ECC584621B4AA6743E07F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:c0:50:a4:61:2b:9e:70:0f:73:4d:0e:77:
                    fc:b1:45:a4:40:b0:c0:4d:4d:48:2e:fb:32:88:9b:
                    ea:4d:58:a8:1d:b1:d2:a6:f4:19:4e:d6:eb:bd:b1:
                    12:e2:4a:98:5c:40:eb:4e:c2:9e:83:7e:ae:d2:64:
                    65:8d:bd:5c:66:ce:f5:b4:b5:9d:d7:57:20:f5:80:
                    0e:c1:a1:bf:d3:b8:ac:ec:73:c3:38:da:65:e6:f4:
                    c9:3a:9e:05:7b:87:5b:6b:8d:63:38:eb:31:8c:2a:
                    60:c7:97:76:15:ec:e9:fe:48:63:a7:77:61:7a:82:
                    c6:bd:a3:05:a2:c7:d3:fc:8b:5b:ad:0e:69:46:a5:
                    cf:25:ee:56:8e:99:a1:e6:f5:11:87:4f:04:40:25:
                    4a:83:e2:0d:29:af:e1:78:ca:cc:50:eb:af:fb:ac:
                    2a:bb:89:39:04:e9:ee:5a:5b:7c:4c:26:8f:32:73:
                    eb:30:d4:a0:3a:da:d3:b8:db:28:8c:70:70:7e:21:
                    af:73:43:dd:63:e5:44:f0:d9:7f:73:24:57:6f:55:
                    a4:9b:ef:ee:17:ff:17:0c:45:93:e0:29:79:6d:dd:
                    97:26:d9:bc:72:ab:0e:4c:8b:78:b3:d1:b2:72:9b:
                    9f:3c:ef:9b:11:8c:1f:2f:62:fd:ee:87:ce:31:8f:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:DD:9D:17:27:6A:06:F2:EC:C5:84:62:1B:4A:A6:74:3E:07:F0
            X509v3 Authority Key Identifier:
                keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:a3:1b:cd:05:c3:51:10:9c:99:e1:a0:db:05:b0:7c:50:
         18:ec:31:7e:ff:1b:c7:8b:4c:12:ba:9d:e2:ea:b5:c2:0e:f5:
         29:de:09:84:45:83:ba:40:60:14:fa:9b:3e:1e:d8:a0:df:2f:
         6f:88:4a:bb:62:45:17:48:7f:a1:f1:15:0c:dd:7b:bd:f8:ac:
         6c:61:62:71:23:d1:db:38:3b:c8:01:ed:82:7f:fb:ed:6b:15:
         e2:f2:96:1b:a7:3c:d8:9e:3e:a2:cc:b4:34:2b:d4:9e:13:7f:
         d9:75:fd:a1:d1:4b:66:16:32:68:f6:bd:fb:8f:b9:ad:39:c9:
         36:6b:d7:76:58:91:3e:bb:33:c5:fd:c8:86:58:e5:ec:c2:6b:
         00:3d:a3:65:f2:5d:fa:6c:53:63:24:70:e5:b4:98:e5:67:4f:
         e7:0f:a3:85:86:14:53:df:58:91:50:1c:d2:dc:a9:f3:ce:47:
         54:6d:ba:a0:e6:5c:bb:54:a6:62:65:16:4a:b7:7d:a8:0c:9b:
         7c:0e:fc:1d:33:4e:ec:e5:10:8d:5a:0a:7b:6b:5f:a4:c8:0b:
         ea:64:a1:16:ba:d4:22:79:69:fd:bd:84:eb:75:c0:e0:52:48:
         ce:c5:df:5e:ea:92:ba:09:c3:cd:89:5f:13:5f:d7:e4:43:41:
         e9:77:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:56:39 2026 by rpki-client