This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
File:                     3130332e342e38312e302f32342d3234203d3e20313530323034.roa (raw, json)
Hash identifier:          lkSfYrODyHMpEekQgH4/krwxQF80Ua2eqSFXhHKZbPA=
Subject key identifier:   D0:DC:77:CC:19:C8:14:12:15:87:9A:FC:CE:19:76:0A:C4:5F:17:A6
Certificate issuer:       /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
Certificate serial:       1FC8690372773453601B779EA9CA41BC73ADBAE1
Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
Signing time:             Wed 24 Dec 2025 13:00:00 +0000
ROA not before:           Wed 24 Dec 2025 12:55:00 +0000
ROA not after:            Wed 23 Dec 2026 13:00:00 +0000
asID:                     150204
IP address blocks:        103.4.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl
                          rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:69:03:72:77:34:53:60:1b:77:9e:a9:ca:41:bc:73:ad:ba:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
        Validity
            Not Before: Dec 24 12:55:00 2025 GMT
            Not After : Dec 23 13:00:00 2026 GMT
        Subject: CN=D0DC77CC19C8141215879AFCCE19760AC45F17A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:f3:b4:b2:84:98:7c:e9:18:f2:6d:ce:ad:
                    c7:30:c9:65:38:9b:48:3d:82:ef:e8:8a:57:fc:27:
                    17:84:8a:65:e8:c5:ec:b9:37:84:8d:fa:7f:94:ee:
                    0a:c8:ea:ba:9d:0e:26:44:6f:08:48:b6:02:ef:59:
                    ea:79:84:12:61:df:96:b2:19:39:74:03:81:f5:90:
                    37:b5:f3:ae:d7:c8:4c:19:15:9c:53:8a:fd:be:0d:
                    42:94:f2:6f:af:cf:d3:2f:f4:a0:db:14:96:46:9b:
                    62:0b:c7:a6:fc:e8:7c:cb:ea:df:fd:78:01:5e:00:
                    22:29:ed:c4:39:d8:2a:c2:a2:55:a2:47:a9:80:92:
                    d3:4c:9d:91:08:13:06:1a:f9:78:49:a2:e2:d7:f1:
                    7d:6e:b9:78:aa:d9:47:13:f9:d6:6d:7a:44:f1:47:
                    5a:6d:87:28:96:93:a4:87:2f:f0:70:7d:1a:c9:35:
                    a5:19:82:ca:74:2f:29:59:07:d8:d4:ed:55:a2:30:
                    5d:cb:b4:00:53:9c:ca:74:c6:40:c4:2d:a8:94:fd:
                    b2:25:16:50:3d:6f:72:7d:2c:a2:13:ea:bf:40:66:
                    c6:44:72:d3:3b:d7:d3:73:ff:77:dc:e9:8e:c0:97:
                    cd:5f:5b:e1:4e:8d:81:35:53:e0:34:d0:80:f2:84:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DC:77:CC:19:C8:14:12:15:87:9A:FC:CE:19:76:0A:C4:5F:17:A6
            X509v3 Authority Key Identifier:
                keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:50:d5:2c:16:f1:76:52:7c:a0:86:c7:5f:de:4e:16:8c:de:
         96:7b:e0:ab:29:1d:9e:b2:c5:f3:3a:40:7a:ef:72:63:63:ff:
         75:38:d1:b5:40:2c:7c:a1:f6:a5:43:43:4e:e7:07:58:e9:12:
         3d:03:4e:cc:74:ed:4c:51:89:fe:aa:ec:d4:f4:70:ad:c7:e0:
         be:d8:26:76:2a:a8:52:e9:c4:bc:7b:4d:9d:3f:de:0d:5e:8f:
         d9:86:f2:be:72:0f:5a:92:08:bb:0b:ce:88:54:d4:ea:a8:99:
         77:33:da:a1:a5:6c:c0:6a:ac:fe:1b:5c:31:f7:be:2a:50:47:
         59:9a:d8:a9:94:b1:22:01:c8:70:0a:7f:07:a5:1c:f3:06:5e:
         ed:86:f6:4d:0d:d3:dc:da:53:7b:e9:cd:8a:78:b9:e8:c5:6f:
         0b:50:9b:d5:c8:14:b8:2b:0a:47:c7:42:07:d1:40:32:b2:d7:
         c3:f1:1e:28:80:7f:a5:93:34:20:8b:90:fc:fa:30:2b:bf:23:
         34:c5:5b:7d:db:d6:1c:86:1d:b4:0a:95:8f:f8:6c:1b:dc:07:
         2c:3d:0e:67:12:af:25:05:cd:fe:e1:9c:7c:e2:dc:6d:7e:e5:
         ff:23:69:85:45:14:aa:7c:6f:75:4b:bd:a6:74:03:c8:cd:a9:
         a0:67:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:22:03 2026 by rpki-client