This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa
File:                     3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          jjOKgEY4cHLUUknUayo2MUdvkFMhoUI35zEMGYK64MQ=
Subject key identifier:   B6:B9:25:4B:C2:4C:F8:CC:2B:D3:6E:A4:52:05:6D:E4:2D:BA:AA:3B
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       06FB41208447F0E79296A4EE56C1A01CE3D5752A
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa
Signing time:             Wed 14 Jan 2026 22:00:00 +0000
ROA not before:           Wed 14 Jan 2026 21:55:00 +0000
ROA not after:            Wed 13 Jan 2027 22:00:00 +0000
asID:                     150936
IP address blocks:        103.110.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fb:41:20:84:47:f0:e7:92:96:a4:ee:56:c1:a0:1c:e3:d5:75:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Jan 14 21:55:00 2026 GMT
            Not After : Jan 13 22:00:00 2027 GMT
        Subject: CN=B6B9254BC24CF8CC2BD36EA452056DE42DBAAA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7a:61:44:91:bb:80:d3:39:fa:64:09:9a:ed:
                    f7:22:14:f1:91:9f:f8:27:43:8d:f2:c9:11:6c:13:
                    cf:0f:36:35:5b:65:c1:11:40:c2:87:83:f7:17:a0:
                    c1:be:f3:cc:9e:aa:51:89:4d:64:14:23:30:ad:3b:
                    09:b9:8a:5c:8c:be:95:ab:19:42:f3:d2:27:44:f0:
                    ed:48:bd:79:6c:b4:d5:b5:34:d3:5e:cf:31:34:9e:
                    04:05:93:4c:88:b0:22:40:ec:ae:13:95:7f:54:96:
                    aa:8d:d2:44:ce:7d:a0:9c:98:29:e7:91:1b:0b:1e:
                    9a:c4:b0:00:6a:27:d3:55:13:ab:28:c7:d5:d3:12:
                    c5:d5:ca:63:c4:3e:b5:78:f4:bd:11:3b:6d:05:78:
                    2e:9f:de:c0:ae:b3:5e:8f:ae:66:84:37:d1:69:b2:
                    81:92:f1:c8:44:4b:52:31:05:cc:e3:8e:64:c2:7a:
                    fd:7e:f1:07:f7:f5:ed:7e:03:a2:bb:27:d1:e0:32:
                    1f:82:54:95:68:54:7c:7e:b8:cf:a4:6a:33:c7:e6:
                    da:1b:83:10:be:16:d2:76:e3:8a:88:01:ab:42:b8:
                    8f:9e:82:de:1f:e0:31:69:a8:c6:9a:b0:4e:63:da:
                    43:b6:87:71:16:b0:67:8f:9d:4e:0b:fb:cd:f0:86:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:25:4B:C2:4C:F8:CC:2B:D3:6E:A4:52:05:6D:E4:2D:BA:AA:3B
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33352e302f32342d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:af:0b:f9:7f:92:86:d0:20:66:e3:fd:47:77:e2:27:6b:ed:
         c6:6d:05:2e:9c:fc:79:82:12:9b:83:d0:f4:44:a5:05:9d:4b:
         9d:f1:5b:20:53:25:71:61:f6:45:b8:b9:71:e9:29:18:59:60:
         68:a6:f0:e6:29:87:20:fa:cf:d9:24:23:b2:80:f7:71:94:27:
         69:fe:16:80:2f:84:da:0a:c9:94:ef:9b:66:67:62:10:0e:28:
         4d:d1:4d:55:2e:6d:93:54:5f:71:c7:58:0b:f8:6c:e4:e0:e2:
         94:ef:8a:82:d8:92:8c:47:8d:da:5b:9d:3b:15:26:0d:3e:82:
         30:39:87:da:91:c2:ef:d0:66:96:c3:c4:68:e4:79:c3:58:b2:
         7f:29:72:11:a6:16:5b:b9:49:d2:ac:3f:b6:47:38:15:2e:00:
         28:02:36:02:fa:20:98:be:a2:07:05:a6:a2:71:6f:bb:0a:b5:
         ca:11:86:b5:4c:c7:0d:8a:2b:48:5f:ed:a5:8e:85:34:34:bf:
         79:f9:30:51:5c:09:9e:67:e6:66:4a:ee:ab:c9:11:d2:b6:80:
         b7:0e:1e:89:93:bb:dd:57:34:01:80:71:6f:56:e1:38:e1:f7:
         6b:e9:c2:1a:2b:85:ac:9f:05:5d:50:6b:c4:1d:37:eb:cb:65:
         f5:17:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:20:43 2026 by rpki-client