This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa
File:                     3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier:          85LtLYBqpIRzrudxo0roKqEopeTA2E0uMpmApFi6Dq0=
Subject key identifier:   8D:75:17:71:07:3F:9B:FA:E2:55:4D:C6:D9:60:25:70:E2:60:D3:DB
Certificate issuer:       /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial:       27CE19092D9E8B6945EE1B8486FC819A47ECAF54
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa
Signing time:             Sat 24 Jan 2026 09:00:01 +0000
ROA not before:           Sat 24 Jan 2026 08:55:01 +0000
ROA not after:            Sat 23 Jan 2027 09:00:01 +0000
asID:                     136131
IP address blocks:        103.80.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
                          rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:19:09:2d:9e:8b:69:45:ee:1b:84:86:fc:81:9a:47:ec:af:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
        Validity
            Not Before: Jan 24 08:55:01 2026 GMT
            Not After : Jan 23 09:00:01 2027 GMT
        Subject: CN=8D751771073F9BFAE2554DC6D9602570E260D3DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ba:1f:a3:e4:6d:47:22:85:cf:22:51:00:d0:
                    00:55:61:ff:48:e8:01:a6:42:cd:b4:eb:4a:8b:eb:
                    c0:97:2f:3a:9b:12:2d:68:56:29:c2:22:15:b4:9d:
                    9f:11:36:21:98:ea:97:aa:6e:ca:6b:b9:c2:cb:b4:
                    c0:ab:88:92:4a:d8:94:da:f5:a0:cf:b9:cf:b5:fb:
                    85:f5:0e:96:8e:8b:43:71:a8:22:f2:df:8e:6d:b1:
                    bc:fd:74:d0:53:4b:33:3b:21:91:1a:e4:2d:25:bd:
                    24:6a:b6:64:8b:a8:98:e2:5a:09:a8:30:71:75:0a:
                    42:d3:ba:b6:86:37:80:51:92:d8:0f:c0:06:e5:b5:
                    14:c3:ad:c7:c2:dc:57:fe:7e:51:68:16:ac:10:86:
                    9c:a5:94:36:e9:68:31:b9:07:e4:6c:25:70:aa:4a:
                    b4:e7:38:90:0d:7a:6f:e4:2c:32:72:d6:44:da:a3:
                    5a:28:18:a9:93:90:65:78:6d:72:70:f6:05:8c:40:
                    1c:ab:78:f5:83:e0:39:93:6d:74:9f:51:36:61:2b:
                    9d:0d:ec:04:72:d9:6e:10:35:63:95:b6:0c:c8:07:
                    48:c2:d9:72:8d:bd:7e:a9:55:47:6a:c2:71:7c:bb:
                    b7:76:d9:66:84:b5:88:d9:66:8a:3f:bf:d9:c2:c7:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:17:71:07:3F:9B:FA:E2:55:4D:C6:D9:60:25:70:E2:60:D3:DB
            X509v3 Authority Key Identifier:
                keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233312e302f32342d3234203d3e20313336313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:33:88:2a:78:b1:78:16:5f:c9:c9:24:9c:cd:7a:d5:1a:e2:
         45:e1:10:41:ba:37:39:94:7b:51:67:f1:e9:f9:31:ca:76:3f:
         a1:e9:04:ba:42:46:12:38:97:07:10:6a:cd:95:6e:94:5d:00:
         3f:9b:27:d8:ed:38:5d:b4:48:fa:43:16:5e:a1:fe:c3:78:50:
         61:32:93:36:7b:7d:5b:e3:0b:dd:8b:64:08:0e:a4:9b:65:6a:
         b5:1e:01:ff:df:6e:d9:42:f6:4b:7d:46:ea:ae:e1:cc:99:6a:
         45:17:62:60:97:b6:b8:df:3f:53:97:79:26:81:9e:52:4e:6e:
         63:51:04:b5:ac:b4:14:02:ec:7d:53:d5:2d:ef:07:90:52:9e:
         d5:ce:12:2d:50:cd:fa:91:38:57:9d:d6:54:7b:26:a9:96:67:
         46:51:6d:d6:da:87:10:b9:60:ce:dd:60:97:f6:1f:c3:a7:a1:
         a2:29:ce:fb:a5:73:07:ed:29:b2:fc:ca:31:c5:78:54:65:37:
         42:b7:51:e4:44:43:26:40:f9:43:91:aa:7c:95:ae:76:4f:8c:
         96:01:40:85:38:e6:fe:e7:f2:4b:c6:3c:6c:b2:79:73:ad:7f:
         04:5f:c6:5d:bb:2a:e1:fd:c5:f4:3d:87:a4:cc:e8:52:0c:3e:
         c4:5f:51:bb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJ84ZCS2ei2lF7huEhvyBmkfsr1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC
MzZGM0FENjAeFw0yNjAxMjQwODU1MDFaFw0yNzAxMjMwOTAwMDFaMDMxMTAvBgNV
BAMTKDhENzUxNzcxMDczRjlCRkFFMjU1NERDNkQ5NjAyNTcwRTI2MEQzREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpuh+j5G1HIoXPIlEA0ABVYf9I
6AGmQs2060qL68CXLzqbEi1oVinCIhW0nZ8RNiGY6peqbsprucLLtMCriJJK2JTa
9aDPuc+1+4X1DpaOi0NxqCLy345tsbz9dNBTSzM7IZEa5C0lvSRqtmSLqJjiWgmo
MHF1CkLTuraGN4BRktgPwAbltRTDrcfC3Ff+flFoFqwQhpyllDbpaDG5B+RsJXCq
SrTnOJANem/kLDJy1kTao1ooGKmTkGV4bXJw9gWMQByrePWD4DmTbXSfUTZhK50N
7ARy2W4QNWOVtgzIB0jC2XKNvX6pVUdqwnF8u7d22WaEtYjZZoo/v9nCx3zjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUjXUXcQc/m/riVU3G2WAlcOJg09swHwYDVR0j
BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz
NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG
M0FENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i
NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DnMA0GCSqG
SIb3DQEBCwUAA4IBAQAwM4gqeLF4Fl/JySSczXrVGuJF4RBBujc5lHtRZ/Hp+THK
dj+h6QS6QkYSOJcHEGrNlW6UXQA/myfY7ThdtEj6QxZeof7DeFBhMpM2e31b4wvd
i2QIDqSbZWq1HgH/327ZQvZLfUbqruHMmWpFF2Jgl7a43z9Tl3kmgZ5STm5jUQS1
rLQUAux9U9Ut7weQUp7VzhItUM36kThXndZUeyaplmdGUW3W2ocQuWDO3WCX9h/D
p6GiKc77pXMH7Smy/MoxxXhUZTdCt1HkREMmQPlDkap8la52T4yWAUCFOOb+5/JL
xjxssnlzrX8EX8Zduyrh/cX0PYekzOhSDD7EX1G7
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:00 2026 by rpki-client