This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa
File:                     3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          6VeZZkQSxmPBfD/p/ZPzZF+ZOY1TH4l3lSmr+WKEfNg=
Subject key identifier:   75:38:D8:BC:8C:C0:F4:3C:79:F4:7A:F2:7E:E7:C2:73:93:AD:6A:11
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       0D431CEED4B694194E25FBB5B7974F96D75B5B1D
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa
Signing time:             Mon 19 Jan 2026 04:00:03 +0000
ROA not before:           Mon 19 Jan 2026 03:55:03 +0000
ROA not after:            Mon 18 Jan 2027 04:00:03 +0000
asID:                     133800
IP address blocks:        103.87.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 06:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:43:1c:ee:d4:b6:94:19:4e:25:fb:b5:b7:97:4f:96:d7:5b:5b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Jan 19 03:55:03 2026 GMT
            Not After : Jan 18 04:00:03 2027 GMT
        Subject: CN=7538D8BC8CC0F43C79F47AF27EE7C27393AD6A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:1c:a4:98:be:0a:20:c8:21:89:18:5c:28:
                    76:97:78:fc:f7:75:69:70:5f:ca:50:48:77:ab:bf:
                    91:18:04:3b:e6:e3:42:16:5a:c8:50:bd:9d:1d:ea:
                    68:d6:54:da:7a:10:84:78:3d:2e:cf:05:5d:53:c2:
                    21:e5:55:72:4e:5c:26:8c:3b:0d:86:39:54:1c:83:
                    c5:0a:97:fb:2f:06:34:31:8f:f4:2d:2c:f6:dc:75:
                    15:38:15:72:f8:69:a2:78:20:2b:5c:00:66:d7:8e:
                    2e:06:c0:8e:68:bd:cd:86:2c:ad:7b:43:a0:e7:5e:
                    81:45:31:5d:54:a7:16:fa:88:4f:84:fe:91:8c:58:
                    9e:e3:2f:17:8d:a8:37:d2:47:55:2d:72:dc:ce:4f:
                    c3:32:65:a9:7f:f5:ec:31:75:aa:7c:8f:a7:35:6a:
                    7d:f9:cc:5b:95:06:b5:03:ad:46:9d:0a:97:f1:4f:
                    95:be:03:d0:d9:16:1b:a9:09:1a:94:bb:92:d8:7d:
                    52:3f:b1:c8:dc:95:02:d2:cd:39:63:b7:95:98:22:
                    82:02:72:db:0c:04:8d:26:6d:ae:aa:cc:73:87:ef:
                    e9:dc:97:1c:a7:e7:06:b7:9a:8e:cf:80:8f:3d:2b:
                    c1:e6:9b:d9:f1:02:21:25:96:80:9e:68:45:2b:5f:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:D8:BC:8C:C0:F4:3C:79:F4:7A:F2:7E:E7:C2:73:93:AD:6A:11
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:de:8f:9c:86:04:a6:2d:d8:6e:2b:24:1b:10:ad:52:05:f5:
         8f:15:89:ff:5f:5d:0a:ca:62:8a:5c:65:88:63:b2:41:48:eb:
         19:3c:03:2f:ef:16:05:58:fe:8a:2d:8e:1b:cb:da:58:ec:99:
         9d:59:1d:6e:cd:7a:38:96:ea:07:c6:eb:58:84:86:0a:98:44:
         0d:be:a9:93:8b:ef:62:db:44:eb:15:2f:48:1f:64:4c:a4:c1:
         08:61:61:89:3f:20:ff:75:66:31:d1:d8:8f:af:e6:83:9c:f4:
         fd:5b:d6:92:53:2d:d6:cb:77:73:6a:59:3a:cb:a2:77:0e:6b:
         72:00:77:a9:7e:db:92:d0:b0:79:80:f1:31:92:1d:4f:0f:a7:
         f7:5c:49:68:10:7f:d9:25:be:97:ea:1c:7a:40:22:ee:e4:ae:
         ca:ee:f5:1b:ef:16:15:f4:12:eb:06:34:b9:ca:32:52:91:ed:
         7c:be:77:ec:e9:95:1a:68:06:ce:d0:12:8b:7e:3c:d6:27:1e:
         15:ee:aa:fb:0a:35:b9:89:4c:b3:04:a4:b1:52:50:27:f9:bd:
         50:8b:02:07:92:1d:60:03:e9:01:30:bf:e3:06:4c:23:e9:43:
         a4:67:92:16:e9:aa:fd:38:54:4d:e1:f3:c8:e9:83:dc:6f:1f:
         ad:8a:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:50 2026 by rpki-client