This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
File:                     3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (raw, json)
Hash identifier:          koH5q5oLKcLR5X6MYFdU+MrvD6zwh8v3JGfpyVLK7F8=
Subject key identifier:   EE:F2:63:00:0F:09:65:6A:B4:C3:30:25:4A:79:58:6D:F6:1D:63:BA
Certificate issuer:       /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
Certificate serial:       2949E925ED9C54DF00F60A7DC2130FA43E1DC5C1
Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa
Signing time:             Wed 14 Jan 2026 11:00:01 +0000
ROA not before:           Wed 14 Jan 2026 10:55:01 +0000
ROA not after:            Wed 13 Jan 2027 11:00:01 +0000
asID:                     134640
IP address blocks:        103.22.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl
                          rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:e9:25:ed:9c:54:df:00:f6:0a:7d:c2:13:0f:a4:3e:1d:c5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A
        Validity
            Not Before: Jan 14 10:55:01 2026 GMT
            Not After : Jan 13 11:00:01 2027 GMT
        Subject: CN=EEF263000F09656AB4C330254A79586DF61D63BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:b6:46:db:96:b8:5b:10:f6:c7:09:8b:ef:2e:
                    08:f1:90:35:46:af:24:f0:ce:92:62:39:d4:91:77:
                    f2:a9:58:b6:82:12:a3:52:fc:33:32:94:3a:a6:4a:
                    6f:bb:69:f2:79:0b:74:ba:b8:eb:fa:f8:d2:78:89:
                    bf:51:1e:6f:e4:25:5e:71:33:0b:b3:d6:e6:a2:01:
                    d2:64:32:69:6c:7f:38:98:f6:34:dc:82:a6:ac:53:
                    c9:b8:88:9c:23:eb:6d:39:f3:0a:6b:97:65:79:76:
                    3a:b4:93:10:57:ef:25:93:e6:e5:24:c4:88:60:d7:
                    f5:8b:28:28:01:d9:9b:cb:6a:67:9a:2b:49:cb:f8:
                    8f:f5:00:55:6e:68:4b:68:c5:09:14:ce:da:46:08:
                    cf:26:54:54:ad:48:2e:80:51:84:a9:cb:3c:5d:10:
                    8d:38:2f:df:b9:16:20:b9:b6:02:ae:f1:f8:e4:c7:
                    3c:75:e3:21:24:21:62:8d:df:1d:e3:b4:03:1b:5c:
                    a3:7b:e5:53:82:a2:6d:47:14:85:34:84:0e:a4:e4:
                    7a:86:80:6b:e0:0f:e7:79:3c:61:cf:34:96:75:e3:
                    ca:e9:84:25:7f:86:14:7e:0a:aa:db:f2:da:28:b6:
                    67:d1:6e:06:8d:5c:db:6c:6b:55:a9:46:13:38:b4:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F2:63:00:0F:09:65:6A:B4:C3:30:25:4A:79:58:6D:F6:1D:63:BA
            X509v3 Authority Key Identifier:
                keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:c3:fc:d5:cd:63:c5:8f:56:9e:4e:c7:d7:e2:63:02:85:7e:
         aa:32:01:28:c2:db:98:70:51:d1:8c:74:c0:fb:f0:c7:cb:da:
         a4:64:5b:5c:3b:94:91:7e:3f:ba:a7:f6:c3:97:df:ee:33:4e:
         be:b5:86:62:bd:4e:45:f6:ab:cc:cd:32:d3:9d:14:66:8c:7d:
         6e:68:05:f5:0e:6e:9b:50:ec:5d:af:af:cc:6c:dc:7a:d4:4d:
         68:e6:eb:8b:d6:a0:0d:89:01:e8:e5:5e:38:fc:63:42:a2:0e:
         59:31:86:c8:7f:39:5b:83:a3:cc:39:99:4f:56:ff:7f:23:67:
         05:4d:37:be:e3:34:1a:52:69:7f:36:e0:1f:54:58:5e:62:a4:
         26:6a:7c:38:98:48:b4:0e:28:55:d1:1a:aa:9e:10:03:47:fb:
         f0:66:2d:da:70:9c:c9:59:54:2b:c2:63:6c:1b:05:a4:05:08:
         6b:45:2d:f0:95:ad:9f:66:e0:e0:cf:e9:aa:8e:7c:bc:9c:86:
         70:be:9b:e9:06:d7:36:d5:8f:3f:05:da:dd:61:ef:20:3f:c4:
         37:64:9d:d4:1a:91:71:5a:86:bc:c7:fc:c2:e5:d2:97:f1:1b:
         5e:49:1d:99:b7:48:15:62:60:44:00:e9:7b:5a:de:a1:85:ce:
         02:91:ac:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKUnpJe2cVN8A9gp9whMPpD4dxcEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx
QURFREE4QTAeFw0yNjAxMTQxMDU1MDFaFw0yNzAxMTMxMTAwMDFaMDMxMTAvBgNV
BAMTKEVFRjI2MzAwMEYwOTY1NkFCNEMzMzAyNTRBNzk1ODZERjYxRDYzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3tkbblrhbEPbHCYvvLgjxkDVG
ryTwzpJiOdSRd/KpWLaCEqNS/DMylDqmSm+7afJ5C3S6uOv6+NJ4ib9RHm/kJV5x
Mwuz1uaiAdJkMmlsfziY9jTcgqasU8m4iJwj62058wprl2V5djq0kxBX7yWT5uUk
xIhg1/WLKCgB2ZvLameaK0nL+I/1AFVuaEtoxQkUztpGCM8mVFStSC6AUYSpyzxd
EI04L9+5FiC5tgKu8fjkxzx14yEkIWKN3x3jtAMbXKN75VOCom1HFIU0hA6k5HqG
gGvgD+d5PGHPNJZ148rphCV/hhR+Cqrb8tootmfRbgaNXNtsa1WpRhM4tP2bAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7vJjAA8JZWq0wzAlSnlYbfYdY7owHwYDVR0j
BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD
NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF
REE4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNGQwMzk3LWZmYTAtNDkwMy04
MDVmLTA4NDUyN2JjNDMwYy8wLzMxMzAzMzJlMzIzMjJlMzIzMDM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxbMMA0GCSqG
SIb3DQEBCwUAA4IBAQA8w/zVzWPFj1aeTsfX4mMChX6qMgEowtuYcFHRjHTA+/DH
y9qkZFtcO5SRfj+6p/bDl9/uM06+tYZivU5F9qvMzTLTnRRmjH1uaAX1Dm6bUOxd
r6/MbNx61E1o5uuL1qANiQHo5V44/GNCog5ZMYbIfzlbg6PMOZlPVv9/I2cFTTe+
4zQaUml/NuAfVFheYqQmanw4mEi0DihV0RqqnhADR/vwZi3acJzJWVQrwmNsGwWk
BQhrRS3wla2fZuDgz+mqjny8nIZwvpvpBtc21Y8/BdrdYe8gP8Q3ZJ3UGpFxWoa8
x/zC5dKX8RteSR2Zt0gVYmBEAOl7Wt6hhc4CkazA
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:16 2026 by rpki-client