This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
File:                     3130332e32362e3139302e302f32342d3234203d3e203536323836.roa (raw, json)
Hash identifier:          i0HuNTLfQDOrpSQS9//DmLXkPRXfxAWy4FCWZTlf46A=
Subject key identifier:   72:37:76:37:7A:AA:08:FF:8A:C5:22:B3:25:8B:72:CD:83:72:43:02
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       75C4995635DC13793D73CA4B53E0750AEC3B6BBA
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa
Signing time:             Thu 13 Nov 2025 17:00:01 +0000
ROA not before:           Thu 13 Nov 2025 16:55:01 +0000
ROA not after:            Thu 12 Nov 2026 17:00:01 +0000
asID:                     56286
IP address blocks:        103.26.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 09:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c4:99:56:35:dc:13:79:3d:73:ca:4b:53:e0:75:0a:ec:3b:6b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Nov 13 16:55:01 2025 GMT
            Not After : Nov 12 17:00:01 2026 GMT
        Subject: CN=723776377AAA08FF8AC522B3258B72CD83724302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:6e:57:d4:28:cb:22:e2:54:68:fe:9a:fa:
                    1a:eb:b7:83:c9:6d:c9:a1:d2:11:8b:10:24:eb:54:
                    dc:66:f3:55:0a:f6:89:8f:96:7e:83:9c:f6:52:55:
                    83:68:19:c5:e2:91:1c:01:2e:c5:6e:d8:f2:d8:47:
                    05:dc:0a:30:ee:94:6c:99:15:5d:65:b8:90:0b:4c:
                    68:e0:c0:0b:f7:86:56:76:63:1c:f4:a0:07:c7:b3:
                    da:df:86:56:eb:f7:2a:ea:ee:99:02:d7:a9:a2:0e:
                    58:14:21:b7:14:82:23:47:3e:96:89:e6:75:ef:23:
                    5a:f8:fc:4f:de:70:08:56:c0:7e:58:8e:5e:1b:ba:
                    f0:ef:2e:04:7c:46:3e:f4:9e:91:48:cd:21:01:0c:
                    46:eb:7b:51:e8:95:fd:cd:03:aa:80:f9:3a:02:90:
                    4b:79:41:b9:35:6c:a7:e4:0d:2c:19:e7:2c:b6:a8:
                    ae:c4:af:6d:a6:2c:82:e2:a7:34:43:df:fc:23:04:
                    06:9e:b6:00:59:ff:a9:3f:e4:cd:86:bc:9c:d4:a0:
                    8f:5d:90:c0:79:fa:05:ab:9d:88:95:78:40:37:d7:
                    27:f3:97:c7:20:f9:6b:8c:44:19:4d:0c:40:d7:51:
                    58:35:a8:00:bc:81:b6:86:da:32:6b:dc:57:38:e2:
                    2c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:76:37:7A:AA:08:FF:8A:C5:22:B3:25:8B:72:CD:83:72:43:02
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139302e302f32342d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:28:b6:5e:0e:c3:a0:bd:0e:29:3f:72:26:4c:32:57:48:ba:
         65:82:8f:a8:d5:37:ef:ea:15:ee:bf:19:6d:eb:e4:2b:6e:c3:
         ee:c9:f9:ac:2b:45:b3:76:aa:b4:83:97:f0:d2:70:d3:5b:74:
         35:11:86:63:5e:25:5f:de:7d:6e:1e:20:7c:da:a7:67:9b:ff:
         6d:5d:8a:1c:3d:e9:9e:91:f9:b3:d8:98:4f:4e:00:0e:94:28:
         2a:b5:c9:a8:4c:30:02:ca:85:6a:68:71:ae:6c:89:1d:f3:77:
         f5:90:1b:de:5c:07:43:2b:bd:16:05:26:ac:5b:53:2a:89:ee:
         8a:02:8d:ed:ac:5d:04:74:71:50:fb:a1:41:d5:b6:e7:aa:bb:
         de:e7:15:40:2d:02:ad:bc:6c:ee:59:5f:56:ef:3a:d1:51:a3:
         66:d4:ae:4b:d0:e5:1a:87:86:d1:14:a0:2c:d1:ab:4f:e6:4c:
         6f:c4:51:49:a5:1b:c8:6d:e1:80:80:24:3a:99:38:ab:73:b7:
         d7:92:55:18:4f:a9:ad:40:35:c0:35:42:e5:7e:97:16:1e:d5:
         74:cd:c5:ca:27:aa:93:0a:2c:02:b9:ab:b2:e3:2e:89:32:84:
         8b:3f:f8:05:69:31:8c:3f:31:4b:14:5a:b3:26:0d:e9:09:c7:
         7d:71:b8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:30:31 2025 by rpki-client