This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa
File:                     3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          V9ZamZCw6D4mYhUfCXfPGFZw7f/kJlQ2HuBrz1q+Cyg=
Subject key identifier:   E1:EB:98:73:91:0B:A4:AD:FE:5F:BE:EB:89:38:4B:30:4F:44:9D:C9
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       7FC2D90198AC8B06751210D18AA1A9B9D8B9BC8D
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa
Signing time:             Fri 09 Jan 2026 16:00:01 +0000
ROA not before:           Fri 09 Jan 2026 15:55:01 +0000
ROA not after:            Fri 08 Jan 2027 16:00:01 +0000
asID:                     139982
IP address blocks:        103.148.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
                          rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c2:d9:01:98:ac:8b:06:75:12:10:d1:8a:a1:a9:b9:d8:b9:bc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Jan  9 15:55:01 2026 GMT
            Not After : Jan  8 16:00:01 2027 GMT
        Subject: CN=E1EB9873910BA4ADFE5FBEEB89384B304F449DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:10:4d:3a:80:96:0e:28:cc:cc:0d:c2:49:
                    ee:c6:0b:73:6b:f6:8c:69:8e:07:d2:72:16:b8:d7:
                    cf:c5:2f:cb:b9:91:4a:36:61:85:2c:74:0c:af:b1:
                    99:9e:e1:81:e9:42:4d:6a:9d:83:34:00:cd:9e:81:
                    b4:8f:21:e7:8b:59:37:df:31:c5:f5:2f:6a:14:d8:
                    3f:b0:d8:fd:f0:af:ab:c8:de:01:b2:07:b8:57:90:
                    4f:f8:9b:8b:74:36:2b:aa:f2:2a:77:35:74:b3:03:
                    01:ef:05:a9:47:2a:10:d2:21:09:d5:f9:fe:d4:8e:
                    b7:5f:c0:18:04:7e:71:c3:84:62:5e:f8:61:a1:fd:
                    98:76:05:17:46:bc:9a:87:dd:11:1b:e6:29:dd:13:
                    a1:7d:d7:c7:61:6e:d8:0c:ff:67:3c:74:a0:bf:d7:
                    8e:54:83:ea:b6:67:19:b8:81:4e:d4:57:bf:ed:8e:
                    48:c2:57:9a:44:c4:92:82:d2:1c:81:50:1f:92:9a:
                    5b:9b:83:04:88:99:99:ba:92:01:9b:89:4a:a0:3e:
                    82:c0:b0:a6:82:f1:79:72:6f:3a:5b:e9:78:98:0c:
                    99:df:eb:52:c6:11:99:6d:d4:60:74:4b:0e:31:34:
                    9b:0f:f6:c7:9b:9f:a8:e8:6a:26:f1:a0:79:20:f6:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:98:73:91:0B:A4:AD:FE:5F:BE:EB:89:38:4B:30:4F:44:9D:C9
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:b4:22:b5:67:4c:b7:c6:41:86:b7:f1:5a:ad:24:9b:eb:
         3d:21:9d:35:47:02:55:8a:19:2c:89:d4:eb:bc:c2:77:6a:27:
         c6:87:7c:1e:51:75:9d:44:2a:78:d2:0f:d4:b1:4c:b6:f6:3f:
         ef:c7:9f:d8:94:09:ee:bc:7a:0c:bf:94:9e:f4:55:d0:73:1b:
         55:a8:e9:73:d6:19:e5:93:a0:36:99:2b:a1:ac:28:fd:02:1b:
         bb:04:93:bb:60:19:c9:a5:c0:a8:ca:23:0e:1e:d8:05:ed:b6:
         e9:96:c9:9f:06:b9:11:10:17:47:f1:29:78:cc:fb:5d:63:85:
         9f:71:da:91:b2:47:32:9a:9d:ed:bb:cf:64:e1:b5:30:5d:6a:
         9c:af:a5:43:39:da:24:d0:38:24:f9:b5:9b:0c:8b:fd:94:33:
         fe:2b:f8:8b:e9:b0:cc:ec:8e:db:7d:7e:3d:d5:55:e7:b5:89:
         41:03:d4:c1:da:67:3b:5b:0a:d9:ba:57:4f:45:57:fd:5b:2d:
         08:7c:45:bb:76:5a:8a:38:b1:c5:3f:8f:62:0f:2f:59:4e:b4:
         1e:7a:fe:4e:12:a1:6f:4f:7b:ac:e0:35:65:cc:17:8d:14:39:
         5e:af:df:7c:32:b5:04:06:3d:0e:c9:61:35:ce:f6:ee:cc:ab:
         a9:87:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:10 2026 by rpki-client