This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File:                     3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          NIprOafL/FkfE+7MXVPnJMsMOXtIi5Oz7VSZiSJ3HkA=
Subject key identifier:   21:8C:CA:65:E3:AD:A0:F2:4B:11:50:80:0C:A1:54:A0:9E:14:63:1B
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       5E4C8B9FF9176762DD43795B43C23231FF647A6D
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time:             Fri 09 Jan 2026 16:00:01 +0000
ROA not before:           Fri 09 Jan 2026 15:55:01 +0000
ROA not after:            Fri 08 Jan 2027 16:00:01 +0000
asID:                     139982
IP address blocks:        103.148.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
                          rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4c:8b:9f:f9:17:67:62:dd:43:79:5b:43:c2:32:31:ff:64:7a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Jan  9 15:55:01 2026 GMT
            Not After : Jan  8 16:00:01 2027 GMT
        Subject: CN=218CCA65E3ADA0F24B1150800CA154A09E14631B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:37:68:96:45:8b:21:41:82:53:c9:af:14:
                    86:88:40:59:78:6a:0a:d2:ba:96:a1:f8:1b:d1:e5:
                    ec:61:4b:6f:70:d8:ef:b7:53:75:ba:53:bd:c0:98:
                    e0:5c:39:03:6e:c5:5c:0c:42:75:7c:17:49:1a:50:
                    32:ac:07:f6:b0:ec:2d:42:f7:13:91:9f:4c:3f:29:
                    cb:67:ac:03:1d:1e:2e:13:68:29:0a:dc:b8:63:68:
                    bb:b0:7b:46:f0:5a:a0:82:57:52:36:46:fb:fa:e4:
                    b1:c3:cf:d1:4d:64:61:00:f0:64:20:0b:c4:4f:7e:
                    dc:62:99:04:05:ae:9c:03:a3:8e:23:8c:34:9f:de:
                    3c:ce:b9:b9:d9:b9:93:f9:45:b1:5d:45:8c:9d:f3:
                    8d:a8:a5:9b:01:fb:b5:4d:28:1f:21:e9:35:c0:26:
                    ea:8e:d2:e9:81:85:13:a1:a2:78:f4:1f:11:30:e9:
                    4a:40:4e:ef:65:01:2b:76:79:26:3c:d1:32:64:2d:
                    1d:b6:b3:4e:e5:34:79:fd:95:3f:d5:ed:f5:cf:7e:
                    d8:a1:96:33:8d:13:ff:b5:8c:eb:f3:cb:cb:5b:a5:
                    6d:fd:b1:39:55:7d:19:f0:4b:1b:32:cb:c0:29:42:
                    c3:b8:17:23:c9:27:32:84:ea:fa:52:37:b0:7e:be:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:8C:CA:65:E3:AD:A0:F2:4B:11:50:80:0C:A1:54:A0:9E:14:63:1B
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:06:ff:34:7a:65:8e:66:6f:aa:77:08:e8:1f:fc:6f:66:
         24:52:f0:9c:7d:3c:5f:e7:cc:28:67:1b:2d:97:2f:49:03:21:
         bc:69:37:ea:20:31:b2:92:e7:1c:a2:5e:47:83:e5:02:45:17:
         19:5f:b0:da:26:a4:35:6e:1f:fd:72:95:d6:6e:e4:01:9e:94:
         69:82:76:90:98:ed:3f:ea:2c:1f:2f:4f:40:8e:fc:c5:a5:5b:
         dd:a2:c9:af:42:ba:a9:26:2b:7f:b9:4e:df:9d:4e:f0:e2:71:
         6f:71:15:a2:5b:3a:c5:1f:c7:bd:3f:b4:de:ae:68:08:50:84:
         0a:b2:ee:b3:2e:24:07:f3:51:ad:41:dd:d2:69:e1:08:60:64:
         e6:2e:ae:3a:36:c8:5e:be:63:08:6e:e8:6a:36:02:81:e2:6a:
         06:a4:c5:d2:7b:c0:10:5a:67:3d:ab:43:0d:be:13:ff:4e:a6:
         dc:6d:c3:40:89:82:5f:00:a5:74:cc:18:a2:3c:8d:e5:0e:c1:
         38:1b:f8:7c:31:38:46:f1:52:31:cd:74:b7:41:07:48:d7:00:
         ee:e5:d4:d6:fe:ed:61:c9:2d:74:7f:1d:28:7d:65:95:6c:26:
         4e:ea:6f:57:29:b1:0e:a9:19:06:36:93:02:13:86:66:59:b3:
         57:0b:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:10 2026 by rpki-client