This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          zEzMYkfJbPhYg1XrDRlczjsI6WELvU+Gubjsh7Kk50s=
Subject key identifier:   30:AC:46:6E:78:B6:ED:5F:A4:60:16:5D:B8:5A:5C:06:9F:1C:01:CC
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       36AE1013F99183FE172DF4C3E6087FE4E3353EFF
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa
Signing time:             Wed 14 Jan 2026 21:00:00 +0000
ROA not before:           Wed 14 Jan 2026 20:55:00 +0000
ROA not after:            Wed 13 Jan 2027 21:00:00 +0000
asID:                     150936
IP address blocks:        103.110.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ae:10:13:f9:91:83:fe:17:2d:f4:c3:e6:08:7f:e4:e3:35:3e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Jan 14 20:55:00 2026 GMT
            Not After : Jan 13 21:00:00 2027 GMT
        Subject: CN=30AC466E78B6ED5FA460165DB85A5C069F1C01CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2c:26:af:6c:e4:2c:ce:1d:f3:7b:ac:72:e9:
                    9f:73:03:bf:8a:e3:19:c1:fc:d5:61:3b:5a:5c:2d:
                    23:65:03:ab:36:e7:2a:55:cf:e1:7c:e8:ad:b5:b9:
                    84:7e:b9:12:90:66:e0:4f:78:a6:bf:3c:44:09:94:
                    ee:76:cf:f4:67:85:e7:c1:5a:94:5b:76:fd:2f:d8:
                    60:da:12:9a:91:4b:81:84:aa:d3:29:58:04:3b:a1:
                    73:8f:a9:04:d2:f7:bc:fa:b6:63:74:8a:a9:f3:de:
                    53:d3:7e:57:b9:85:ba:ce:4c:18:5b:7c:2f:41:a3:
                    08:e8:6f:6d:25:98:a5:3f:8d:37:33:36:19:f2:54:
                    28:31:14:da:b2:46:7d:5f:73:89:9f:2a:f3:56:b9:
                    d7:c4:15:75:b9:7b:9c:0e:ea:75:e1:a6:ad:62:2c:
                    c5:91:76:57:05:87:cb:9f:88:1f:30:0f:b1:be:db:
                    0a:8e:15:21:a4:66:80:e7:ab:4c:69:41:ba:bc:e8:
                    ca:23:9f:d3:b5:8f:3b:fb:ac:cc:57:b7:68:33:4f:
                    e3:1b:c5:3c:0c:fc:5b:98:2f:e8:c7:4e:b3:fd:2e:
                    ee:f3:df:93:fa:f5:6d:ff:45:48:ef:64:b0:48:14:
                    f8:51:a9:d3:fa:1c:f3:92:de:81:e7:3a:df:87:70:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AC:46:6E:78:B6:ED:5F:A4:60:16:5D:B8:5A:5C:06:9F:1C:01:CC
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7e:22:e8:e6:84:0c:9f:51:8c:c9:82:f8:ac:8a:10:2e:ce:
         1c:d0:0b:a1:d0:7d:bb:f1:65:81:d3:94:4b:dd:6b:7f:e5:95:
         c1:2b:24:04:ed:c8:f5:8f:4b:ef:2b:bc:31:2a:27:ee:b1:0e:
         61:f9:c2:5b:9f:2b:92:6d:a0:f4:cf:46:f0:3e:5f:73:24:9d:
         14:b3:f1:48:8e:d9:0e:44:d4:d6:69:f9:a8:ef:4b:39:39:55:
         08:3d:83:0e:4d:1a:c4:a2:0b:0d:6e:93:01:ce:61:40:da:ca:
         0c:67:0d:30:26:be:47:50:4d:65:f6:ed:f7:70:4d:e1:29:a1:
         8a:ae:4c:f6:3c:f5:66:a9:4f:39:ac:cb:3d:ba:fa:fb:36:97:
         3f:4c:04:6c:d0:49:22:9a:34:a4:4c:af:a6:0d:a3:27:7e:6e:
         4f:e0:75:99:84:5d:3d:72:38:9a:a1:ee:d8:ed:a1:b7:ea:d9:
         0d:45:44:ae:cb:4a:a4:5b:ab:eb:23:26:fd:fd:a7:12:80:1b:
         6b:7e:65:6e:d0:85:86:66:c2:5c:70:bb:52:e5:14:07:0e:38:
         ba:d3:22:8d:93:a0:de:e3:a8:97:eb:6b:31:3f:f3:cd:09:01:
         03:f6:7a:0a:26:78:d8:96:6e:e5:35:2d:99:a3:fb:ee:ec:19:
         93:c5:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:42 2026 by rpki-client