This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
File:                     3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (raw, json)
Hash identifier:          /JnF9ntQ1zhi5AvVex5MT/29rhLCl1+fBFP+3yAKjbQ=
Subject key identifier:   8F:FA:B8:33:31:A4:C3:DA:1A:48:3E:B8:01:0F:20:9C:47:99:D5:C7
Certificate issuer:       /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Certificate serial:       6BAE552BA31644D1A93B5CDAF381D0E083EBC021
Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
Signing time:             Tue 20 Jan 2026 18:00:02 +0000
ROA not before:           Tue 20 Jan 2026 17:55:02 +0000
ROA not after:            Tue 19 Jan 2027 18:00:02 +0000
asID:                     131765
IP address blocks:        103.77.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl
                          rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ae:55:2b:a3:16:44:d1:a9:3b:5c:da:f3:81:d0:e0:83:eb:c0:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
        Validity
            Not Before: Jan 20 17:55:02 2026 GMT
            Not After : Jan 19 18:00:02 2027 GMT
        Subject: CN=8FFAB83331A4C3DA1A483EB8010F209C4799D5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:4d:41:cb:f5:41:4c:a6:4c:46:15:fd:b7:
                    04:7c:61:a6:01:a3:92:df:e9:98:1c:9a:55:f8:f1:
                    7e:b0:85:f7:ab:24:a6:16:aa:a7:0b:02:7a:4c:a1:
                    62:d3:54:91:63:93:20:a4:dd:8f:14:82:ed:bb:d3:
                    34:4a:09:59:87:79:a9:05:9d:2e:60:06:82:b3:d4:
                    81:4b:95:d9:98:87:b9:2f:0a:d3:0a:da:8f:d1:05:
                    1e:ed:9b:c4:8b:26:a1:a9:40:dd:2e:63:57:ad:51:
                    b0:c2:13:f0:61:df:e4:6f:15:19:11:15:c3:ec:5e:
                    88:64:c5:31:55:bd:a2:52:82:ef:f4:4d:ac:a6:dc:
                    5a:c8:d1:f6:d5:7c:9d:b1:dc:13:4c:dd:0f:97:14:
                    2b:c8:60:e7:7b:b5:10:10:f5:5c:5d:94:2e:d9:d2:
                    57:6c:04:87:4a:e0:fc:85:84:3f:c9:13:8f:77:ab:
                    8b:15:59:7b:0b:8b:c6:58:73:65:62:9f:7f:a1:9c:
                    67:88:2f:0a:17:51:1f:e8:4c:c3:fc:94:bd:20:7d:
                    39:cd:3a:80:43:69:b7:40:a3:63:be:73:ff:92:f7:
                    f4:46:c5:f5:ce:56:a9:86:d3:07:57:fd:c2:98:d9:
                    bc:62:df:d3:3b:6d:2f:79:7d:a5:47:7e:86:89:74:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:B8:33:31:A4:C3:DA:1A:48:3E:B8:01:0F:20:9C:47:99:D5:C7
            X509v3 Authority Key Identifier:
                keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:53:88:92:f0:13:79:b8:67:d3:21:2f:b1:73:a7:67:1d:
         24:0c:a0:51:a8:b6:aa:3e:50:f6:dd:d4:9f:00:06:f3:b7:8a:
         f7:27:8b:10:46:b0:bc:fa:66:e4:be:f8:ee:ce:b0:85:cc:44:
         cf:a6:a4:cb:5f:c3:db:37:80:9e:a9:ff:e3:5f:53:09:d8:e9:
         57:f2:b6:63:61:bd:5e:64:47:8b:3f:3a:bc:79:2d:df:f1:4e:
         36:3c:b3:82:50:f8:07:12:c5:7b:86:89:09:fe:2d:50:7c:ed:
         a5:24:fd:95:d9:d8:10:5e:fb:24:be:49:66:53:a5:8c:23:2e:
         86:7e:49:ea:48:de:65:18:0c:dd:ad:d7:06:92:b9:88:88:62:
         7a:6d:87:6a:64:7a:99:5a:ce:1b:e2:e1:c8:16:3b:99:2c:fd:
         51:ef:32:76:85:a7:96:60:af:1b:e4:a1:c5:5a:a6:a1:3b:77:
         29:af:8b:10:05:19:d5:06:33:31:5b:f3:d8:52:1a:e6:fd:0c:
         26:7d:4e:1c:57:06:88:34:34:e8:2a:48:42:ad:8d:84:a5:f7:
         20:41:8d:b9:2e:32:dc:e4:26:2b:d7:8c:3c:51:0f:87:24:26:
         aa:d3:fd:88:71:5d:7a:13:e6:95:9f:3e:04:55:79:af:bf:be:
         45:f5:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:38:13 2026 by rpki-client