This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa
File:                     3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (raw, json)
Hash identifier:          JcJ+92BdJBAynj8d5WBKVDE8qMrLGTneeQasC0St1x4=
Subject key identifier:   01:A2:5D:DA:93:0D:1B:D8:9B:55:16:84:DF:B8:3E:3E:A5:55:A9:EF
Certificate issuer:       /CN=809C666CC84F942588E109E6E6C454A9CD0524EB
Certificate serial:       1BE31D90B99A87D4442C083F5B647210CA6C6AF8
Authority key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa
Signing time:             Thu 22 Jan 2026 03:00:00 +0000
ROA not before:           Thu 22 Jan 2026 02:55:00 +0000
ROA not after:            Thu 21 Jan 2027 03:00:00 +0000
asID:                     138126
IP address blocks:        103.131.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl
                          rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e3:1d:90:b9:9a:87:d4:44:2c:08:3f:5b:64:72:10:ca:6c:6a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809C666CC84F942588E109E6E6C454A9CD0524EB
        Validity
            Not Before: Jan 22 02:55:00 2026 GMT
            Not After : Jan 21 03:00:00 2027 GMT
        Subject: CN=01A25DDA930D1BD89B551684DFB83E3EA555A9EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:06:d6:b5:c9:77:fb:4c:da:99:44:8d:56:
                    4b:ca:60:4c:32:fe:97:1f:d7:05:db:4f:e6:11:1d:
                    9d:8d:14:e5:65:b8:6e:5e:f5:f9:d8:98:a2:11:c5:
                    85:6f:1c:d7:16:6d:12:5c:89:a6:bb:c2:ec:0f:74:
                    06:f9:9e:78:0a:f9:00:5f:bf:06:0b:31:8b:8f:a6:
                    ba:cf:c9:ec:3b:7b:0a:30:dc:5a:3d:da:e7:3f:de:
                    73:94:03:b7:e2:a2:a8:92:a9:56:d9:64:08:a4:f3:
                    fb:d5:01:62:ad:ce:56:53:bf:4b:da:c1:50:cb:a0:
                    05:4e:7a:fb:9f:4d:de:ee:34:d5:40:d1:e6:bb:54:
                    ad:b2:9e:5d:7a:83:fa:7e:63:6e:d3:e1:c4:4c:11:
                    b6:46:21:2a:c8:f1:c4:50:99:bc:d4:9d:af:70:b0:
                    e4:39:95:b5:d9:31:5b:45:46:77:1e:c0:a2:af:d2:
                    ef:30:91:3b:0e:17:fb:61:23:a7:3b:15:00:17:3b:
                    2c:89:80:7b:f6:ce:b0:69:9a:21:53:57:11:e5:ea:
                    4c:62:93:59:3f:c6:5f:9b:37:9c:20:cc:9a:e8:06:
                    28:00:7a:93:17:fd:0e:e6:76:1f:c8:2a:be:b0:1c:
                    59:f8:04:dd:24:bd:94:c8:5e:ee:a4:98:f9:26:19:
                    c4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:5D:DA:93:0D:1B:D8:9B:55:16:84:DF:B8:3E:3E:A5:55:A9:EF
            X509v3 Authority Key Identifier:
                keyid:80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:86:76:8b:a9:2a:a6:25:37:ab:61:53:2c:67:96:6c:b9:0f:
         c2:65:de:b2:dc:8c:8d:c5:a1:d7:fb:39:45:03:33:39:05:38:
         52:0c:a9:00:04:ce:da:ed:64:61:07:f5:27:3d:f9:c0:d7:24:
         31:e1:88:56:e5:7c:fe:c4:8e:6e:60:5c:a3:cf:92:45:ac:cf:
         b0:cf:e2:1f:0d:47:87:ba:89:a3:9d:19:c0:46:b5:79:47:c9:
         47:68:be:c9:c0:86:76:eb:a5:77:8b:47:6e:c3:9f:fe:02:c0:
         4d:ba:88:a3:67:44:c5:31:d0:3e:75:f4:27:63:33:f9:7a:e2:
         71:e4:de:b3:d5:91:36:84:1a:c2:be:7b:99:89:72:ef:bb:42:
         99:b4:4a:84:4b:07:ac:25:27:bc:4d:91:47:21:bc:28:43:25:
         db:fd:80:b8:e6:a9:69:2d:fd:57:e3:6b:cf:35:14:6c:6a:91:
         81:ad:2c:d2:d3:98:9b:fb:15:5d:f8:bf:29:ca:14:25:24:0a:
         b5:72:c0:88:91:62:44:47:ed:da:49:c9:a5:ad:7e:18:ac:ea:
         4b:91:5d:36:ae:b3:77:8d:d2:36:7e:4b:5e:05:ac:93:28:ba:
         58:69:e1:07:61:62:3c:f9:fc:3e:95:a5:ab:2e:41:b6:bf:18:
         c6:22:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:50:34 2026 by rpki-client