This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa
File:                     3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa (raw, json)
Hash identifier:          XacJ1PvQ+Qq6w95SUtj58pV5mUVjGwreZNIi5mtgsCE=
Subject key identifier:   E3:23:41:C2:EF:69:57:3A:CD:44:27:95:82:F8:53:9E:17:84:7C:61
Certificate issuer:       /CN=DE99361912581A3A43349B6FFB379A285B0972E7
Certificate serial:       727FAA418B9D51BC2ED515A03062619102C81D10
Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa
Signing time:             Tue 06 Jan 2026 05:41:47 +0000
ROA not before:           Tue 06 Jan 2026 05:36:47 +0000
ROA not after:            Tue 05 Jan 2027 05:41:47 +0000
asID:                     147126
IP address blocks:        103.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl
                          rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 11:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7f:aa:41:8b:9d:51:bc:2e:d5:15:a0:30:62:61:91:02:c8:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7
        Validity
            Not Before: Jan  6 05:36:47 2026 GMT
            Not After : Jan  5 05:41:47 2027 GMT
        Subject: CN=E32341C2EF69573ACD44279582F8539E17847C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:8d:16:6f:cc:ee:5f:3f:82:76:0c:93:74:
                    c5:bd:ba:14:4c:a6:88:39:50:e0:ac:d1:0f:3d:c8:
                    f6:b7:85:14:3d:c1:4e:84:c5:47:52:71:8b:13:1f:
                    68:7a:f9:ca:1f:17:ff:35:d9:a0:9e:80:38:73:60:
                    27:52:ab:91:7f:b5:39:1b:16:04:d9:17:b1:61:71:
                    e2:26:e7:12:c2:ea:ef:4f:8f:9b:27:4e:48:f1:67:
                    8a:48:4c:1d:5b:79:db:a4:cb:5b:33:9e:9e:41:2f:
                    9e:56:fc:14:b7:7d:2e:a7:02:df:cd:b6:03:0f:6d:
                    5e:d9:11:1e:be:3a:ca:4e:a8:c5:4d:d6:47:f8:df:
                    64:f6:ff:8a:fe:75:2b:ab:e9:fb:13:02:59:1d:21:
                    00:f4:76:83:d5:56:06:ca:f3:ca:b4:36:e0:d0:87:
                    43:17:98:9a:47:61:20:cb:92:f6:54:01:eb:3c:34:
                    2b:0b:3c:80:fb:c0:1c:a0:e5:41:12:09:e6:75:af:
                    e1:fc:da:eb:0b:02:8a:aa:92:df:af:5b:4d:31:06:
                    6f:5a:bc:43:58:b3:b2:a7:66:8d:87:ad:52:ce:9f:
                    2e:4e:7d:a5:f6:a4:80:82:e7:85:ea:22:2b:56:27:
                    80:68:f4:f5:19:4b:ca:e5:69:25:98:67:75:8f:89:
                    31:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:23:41:C2:EF:69:57:3A:CD:44:27:95:82:F8:53:9E:17:84:7C:61
            X509v3 Authority Key Identifier:
                keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/3130332e3137342e36352e302f32342d3234203d3e20313437313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:cd:6f:c0:47:3c:a2:c2:15:52:73:1f:f0:b4:8c:0d:bc:f6:
         f7:94:d2:07:a3:28:bb:82:76:4e:b1:fb:59:34:7b:df:75:88:
         4b:16:62:a4:10:ce:bc:38:32:16:57:49:f2:f3:93:8c:a3:bb:
         fb:f6:2e:fd:6e:66:e2:21:4f:c4:6d:d7:47:92:c3:aa:ac:05:
         90:55:61:c4:7f:66:1a:8a:14:6c:65:ce:b9:18:9e:41:7d:b0:
         16:95:4f:6e:83:8c:08:6e:6f:62:2a:87:28:c3:e0:3f:40:f6:
         da:60:c3:aa:e5:82:a9:44:6d:4d:3d:8f:4e:1b:c8:e6:43:a6:
         e3:4b:30:1a:4e:4c:df:a6:fd:f8:e1:5c:5d:c0:7f:43:60:6f:
         b7:2a:98:62:b8:f1:e0:d4:83:67:a6:31:7e:50:08:81:c4:a4:
         a9:03:84:25:d4:6f:4e:86:e4:27:bf:13:39:45:07:b4:98:fe:
         30:3b:85:21:52:df:e0:ca:80:67:16:dd:c9:68:42:be:96:3c:
         41:c7:d5:f9:10:b3:78:5b:c2:bf:e6:ec:77:4f:d4:13:09:9f:
         e2:5f:4b:55:72:33:77:5a:b2:41:d1:ef:3c:2c:51:fd:b5:4e:
         d0:cc:3c:fa:61:11:8b:1b:f6:14:33:1f:6e:a4:0b:68:05:b8:
         a9:57:e7:62
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcn+qQYudUbwu1RWgMGJhkQLIHRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1
QjA5NzJFNzAeFw0yNjAxMDYwNTM2NDdaFw0yNzAxMDUwNTQxNDdaMDMxMTAvBgNV
BAMTKEUzMjM0MUMyRUY2OTU3M0FDRDQ0Mjc5NTgyRjg1MzlFMTc4NDdDNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCygo0Wb8zuXz+CdgyTdMW9uhRM
pog5UOCs0Q89yPa3hRQ9wU6ExUdScYsTH2h6+cofF/812aCegDhzYCdSq5F/tTkb
FgTZF7FhceIm5xLC6u9Pj5snTkjxZ4pITB1beduky1sznp5BL55W/BS3fS6nAt/N
tgMPbV7ZER6+OspOqMVN1kf432T2/4r+dSur6fsTAlkdIQD0doPVVgbK88q0NuDQ
h0MXmJpHYSDLkvZUAes8NCsLPID7wByg5UESCeZ1r+H82usLAoqqkt+vW00xBm9a
vENYs7KnZo2HrVLOny5OfaX2pICC54XqIitWJ4Bo9PUZS8rlaSWYZ3WPiTF7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4yNBwu9pVzrNRCeVgvhTnheEfGEwHwYDVR0j
BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy
NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5
NzJFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxZjRhYmJlLThiNWQtNDAyYi05
MDUzLTUwYjc4NWM3NzM1Mi8wLzMxMzAzMzJlMzEzNzM0MmUzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ65BMA0GCSqG
SIb3DQEBCwUAA4IBAQB5zW/ARzyiwhVScx/wtIwNvPb3lNIHoyi7gnZOsftZNHvf
dYhLFmKkEM68ODIWV0ny85OMo7v79i79bmbiIU/EbddHksOqrAWQVWHEf2YaihRs
Zc65GJ5BfbAWlU9ug4wIbm9iKocow+A/QPbaYMOq5YKpRG1NPY9OG8jmQ6bjSzAa
Tkzfpv344VxdwH9DYG+3KphiuPHg1INnpjF+UAiBxKSpA4Ql1G9OhuQnvxM5RQe0
mP4wO4UhUt/gyoBnFt3JaEK+ljxBx9X5ELN4W8K/5ux3T9QTCZ/iX0tVcjN3WrJB
0e88LFH9tU7QzDz6YRGLG/YUMx9upAtoBbipV+di
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:43 2026 by rpki-client