This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
File:                     3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (raw, json)
Hash identifier:          yZ/MChZHB5tDzBnd1w3tnaq3ghVO7uYw0Z7Ua0KxMJI=
Subject key identifier:   50:C8:ED:A9:99:77:85:D8:2B:31:7F:15:81:1B:42:19:36:6E:0D:E1
Certificate issuer:       /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
Certificate serial:       4000A304D428B0F416244D5E7EE30276BE519E93
Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
Signing time:             Fri 02 Jan 2026 03:00:02 +0000
ROA not before:           Fri 02 Jan 2026 02:55:02 +0000
ROA not after:            Fri 01 Jan 2027 03:00:02 +0000
asID:                     150926
IP address blocks:        103.203.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl
                          rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 00:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:00:a3:04:d4:28:b0:f4:16:24:4d:5e:7e:e3:02:76:be:51:9e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
        Validity
            Not Before: Jan  2 02:55:02 2026 GMT
            Not After : Jan  1 03:00:02 2027 GMT
        Subject: CN=50C8EDA9997785D82B317F15811B4219366E0DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:bf:f0:41:22:9d:aa:88:0c:94:04:a2:ec:
                    93:52:35:a1:a6:e9:72:b0:ce:52:32:73:1c:0d:f8:
                    8d:37:8c:7a:a9:c9:a9:37:5c:a0:b0:a8:2c:90:0c:
                    bf:f2:d1:8a:58:eb:01:46:54:49:55:5d:2c:3e:cc:
                    e1:1e:10:81:25:78:d3:cd:42:01:fb:07:0b:eb:55:
                    43:a8:4a:16:03:0d:ff:c0:13:65:6a:25:6c:a4:c1:
                    fd:1e:63:90:94:ab:b3:13:00:67:e8:19:e8:d8:2f:
                    a6:73:2c:ff:6e:23:de:0c:bf:74:c3:64:02:ef:aa:
                    08:d3:ca:e6:c3:38:a2:ed:64:3e:9a:4e:98:71:89:
                    03:1c:b3:67:e6:2a:d5:58:69:ec:36:dd:f0:ea:6b:
                    1a:c9:cc:9c:30:da:70:b8:60:73:ce:6c:59:67:66:
                    32:34:95:6f:65:ee:f0:94:ef:33:ba:3f:5d:8b:40:
                    e0:ee:be:1e:c2:a3:cd:6d:0a:22:fc:23:57:ba:d4:
                    44:39:c3:79:56:15:63:4a:2a:a8:28:d5:05:bf:c8:
                    e3:a3:e3:2d:b2:6b:6c:62:46:4e:be:8b:3a:7f:62:
                    60:c5:61:ca:0c:c2:2a:f3:47:e8:25:cf:1e:3d:f7:
                    8d:2d:92:94:f8:b8:e7:5b:9c:06:fd:09:d7:f4:69:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C8:ED:A9:99:77:85:D8:2B:31:7F:15:81:1B:42:19:36:6E:0D:E1
            X509v3 Authority Key Identifier:
                keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:b8:5e:87:45:8b:fd:a6:43:8e:4e:33:59:50:2e:28:5b:
         41:18:b6:04:c4:99:c1:53:79:90:25:eb:f5:b8:ce:2e:52:45:
         9c:5f:ff:c8:d8:98:88:e0:fa:9d:9c:2a:2e:d4:3b:e3:ad:58:
         14:5c:46:9b:b0:72:77:95:4a:df:27:8c:0e:64:d5:d3:37:2d:
         1a:9d:ba:3e:23:0d:e2:96:18:b9:fa:3e:99:a5:d9:ed:3e:62:
         10:eb:1a:ff:04:34:14:52:77:77:98:b6:25:a2:d1:1e:5a:ff:
         6c:ac:b2:1d:51:0e:e8:37:d3:21:6f:7c:39:52:46:ff:e4:49:
         79:63:26:df:12:a0:18:a5:96:3e:81:4b:48:72:64:6d:11:e0:
         77:29:c9:17:f0:ba:78:b7:9c:55:b9:2a:8e:74:13:40:d1:29:
         4b:2d:78:af:57:66:04:ed:c6:a2:08:9a:10:68:c5:d8:18:7a:
         94:22:35:86:71:69:e8:57:ef:66:3f:75:c3:66:ba:76:d7:13:
         fb:05:93:65:ba:a0:59:3e:c9:b9:b9:f5:aa:5b:f9:94:a6:f1:
         d8:a8:8b:6f:93:72:ab:9a:f5:e8:2a:80:1e:ed:b2:67:1e:e0:
         ae:23:fc:4e:07:b1:07:e2:92:cd:a6:1c:a1:20:20:64:7c:5a:
         b1:01:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:09:38 2026 by rpki-client