This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32332d3234203d3e203536323836.roa (raw, json)
Hash identifier:          2AfHqO9heo5Z0jXbgmEkhELWS6FN1LPkikP7RRxHBrw=
Subject key identifier:   39:91:EA:8F:90:3D:94:43:C6:E8:B5:03:FA:41:87:8C:A2:F3:2E:EC
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       26519E3937B78E0B43AE992A8911A65CDD82E557
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa
Signing time:             Mon 17 Nov 2025 10:02:34 +0000
ROA not before:           Mon 17 Nov 2025 09:57:34 +0000
ROA not after:            Mon 16 Nov 2026 10:02:34 +0000
asID:                     56286
IP address blocks:        103.26.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 09:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:51:9e:39:37:b7:8e:0b:43:ae:99:2a:89:11:a6:5c:dd:82:e5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Nov 17 09:57:34 2025 GMT
            Not After : Nov 16 10:02:34 2026 GMT
        Subject: CN=3991EA8F903D9443C6E8B503FA41878CA2F32EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c4:cf:a5:42:45:96:0a:9f:ff:3f:f8:04:1b:
                    18:ee:d9:b0:e8:5c:af:a9:fa:cb:92:46:1a:e9:87:
                    27:b3:65:d4:92:98:b7:ac:83:c3:36:65:3c:13:34:
                    03:d6:1a:6e:ee:c4:26:a2:9f:d7:6b:86:5f:85:6b:
                    85:a4:d4:7a:9b:5c:6d:c9:44:33:84:29:15:ba:2e:
                    98:85:f5:99:b0:2e:4c:2c:71:95:e7:cb:54:76:66:
                    2d:0b:23:cd:41:29:1f:be:3c:a4:57:62:5e:5f:35:
                    8f:f2:1d:ac:26:d0:73:f5:6f:e5:5d:b6:59:3d:34:
                    0c:4d:e0:94:1b:59:b0:d1:c3:9f:86:fa:32:30:1a:
                    60:1e:d7:db:50:10:89:70:e0:3f:89:0f:93:fd:1d:
                    b5:a6:59:d9:9c:90:22:64:40:e2:73:98:cf:1a:7d:
                    bc:72:d6:da:91:e1:af:ae:04:8b:a2:64:bf:71:36:
                    66:a1:72:9e:b5:77:c4:d0:b7:2d:40:cd:81:e9:71:
                    2e:71:f9:ef:69:c3:c3:dc:94:38:3c:e4:ca:a7:3d:
                    3e:46:e5:85:99:d7:e8:11:36:2c:76:30:9e:4e:bb:
                    c6:a5:4a:da:7e:1b:54:58:d8:56:57:f8:29:61:d5:
                    83:3f:38:98:94:4a:e4:e6:81:b4:02:3d:78:75:7a:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:91:EA:8F:90:3D:94:43:C6:E8:B5:03:FA:41:87:8C:A2:F3:2E:EC
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32332d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:88:82:0d:88:1c:64:e9:18:0c:9c:6d:89:e3:de:ee:34:
         80:45:08:cc:89:7a:4d:07:48:b1:72:07:55:3f:a3:7a:85:f9:
         e9:aa:70:9f:6d:ec:69:c7:9f:a3:b8:de:83:d6:52:63:98:da:
         9e:73:3d:d5:4c:73:61:42:05:e6:18:81:4b:41:78:62:fc:56:
         41:1d:4d:4a:fc:dd:63:36:da:7f:27:d9:e1:6f:bf:ff:34:3d:
         79:10:41:10:34:4a:08:b1:e0:d8:78:f9:b4:5f:71:93:2d:10:
         b3:f4:35:e4:57:78:30:4d:ef:29:e1:b9:70:5c:f0:c2:18:e3:
         1c:c3:1d:a6:08:83:48:2c:b7:3d:99:69:21:d8:b3:0a:4f:ab:
         1b:3c:c6:78:b8:77:0e:57:e6:12:f0:62:8c:09:49:95:fb:90:
         d2:e9:54:c2:6d:c1:b3:ce:65:09:af:38:c0:22:68:90:14:c3:
         25:a0:ca:44:84:99:59:6f:96:b0:37:7d:a4:2b:b7:40:04:82:
         22:b5:03:a7:da:14:5b:4a:7b:12:ba:2e:d9:b9:4b:58:c3:46:
         f7:86:81:20:fe:1f:0c:05:59:19:ad:70:78:47:c2:1b:b7:f7:
         87:f1:d9:73:6d:77:b8:d7:d9:e7:4d:aa:66:15:6e:d0:73:47:
         1a:f5:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:42:13 2025 by rpki-client