This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
File:                     3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa (raw, json)
Hash identifier:          k7qVJVZQGCQ79Jzq19kExP8cLdh6zejdLWbLVIVWa38=
Subject key identifier:   4A:F8:46:A9:73:1E:78:97:4F:13:0B:C8:5C:DD:CD:3E:4C:CE:0D:38
Certificate issuer:       /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial:       4F743A4F0F9061B64BF94584FE7AEDFC5E1DDFA1
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa
Signing time:             Fri 09 Jan 2026 09:02:34 +0000
ROA not before:           Fri 09 Jan 2026 08:57:34 +0000
ROA not after:            Fri 08 Jan 2027 09:02:34 +0000
asID:                     139400
IP address blocks:        103.143.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
                          rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 01:25:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:74:3a:4f:0f:90:61:b6:4b:f9:45:84:fe:7a:ed:fc:5e:1d:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
        Validity
            Not Before: Jan  9 08:57:34 2026 GMT
            Not After : Jan  8 09:02:34 2027 GMT
        Subject: CN=4AF846A9731E78974F130BC85CDDCD3E4CCE0D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:b4:59:77:90:e8:cd:d5:9e:20:fb:92:fe:
                    c3:13:55:b8:f4:e3:a8:cf:82:c9:ec:3d:28:30:71:
                    bf:80:ee:eb:04:10:fc:99:86:2a:f7:b3:cc:f9:2c:
                    b6:0d:78:8d:70:21:a4:1b:de:90:75:34:0b:ba:ce:
                    bf:56:d3:c0:fd:aa:48:a4:84:76:65:0a:6a:ac:a8:
                    d7:3f:09:80:dc:26:cf:ed:69:ae:f0:47:0e:4b:b8:
                    64:55:1d:b6:fd:92:df:64:76:bb:d1:32:9e:06:50:
                    50:e7:6b:0e:1c:c3:81:d6:a0:9e:a0:aa:1e:8d:34:
                    fe:8a:f6:9c:e6:fb:f7:48:28:e9:2d:eb:a7:9d:9a:
                    1b:48:b1:2b:cb:af:04:87:39:86:74:c0:72:dc:8d:
                    56:59:50:44:21:bc:8f:b3:a2:8e:5c:0d:87:0a:2c:
                    bd:3a:cc:71:0f:33:20:22:cb:26:37:16:05:0e:96:
                    07:8a:fe:e4:87:67:0d:15:8c:3c:69:87:dd:f3:39:
                    74:db:f8:d6:33:b6:8c:b0:c5:44:fd:6e:4e:dc:c0:
                    2f:5b:ba:26:58:47:fc:24:87:4f:4c:db:0d:24:89:
                    ea:09:5f:9f:22:21:0d:2b:37:aa:54:41:59:1c:2b:
                    4f:94:e8:6b:42:86:21:a2:4d:5d:0c:02:44:1c:0c:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:46:A9:73:1E:78:97:4F:13:0B:C8:5C:DD:CD:3E:4C:CE:0D:38
            X509v3 Authority Key Identifier:
                keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3233203d3e20313339343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:a0:bd:2c:54:75:67:06:44:9c:9c:de:06:00:7e:34:57:2e:
         65:63:1a:ce:94:b7:b7:bb:9a:19:fa:39:0d:eb:12:c4:d9:ea:
         54:2b:fd:44:de:bd:6b:f0:47:fe:dd:aa:8d:4d:3c:6f:a3:83:
         a6:d2:ee:05:41:eb:7a:1e:06:2f:14:32:c5:57:0f:cf:e0:f3:
         5a:24:8f:05:84:73:66:73:60:01:f7:48:1b:55:44:65:2d:0b:
         5b:d6:0b:a6:fe:97:9c:4d:ff:5f:56:fc:d3:36:73:a6:79:ac:
         fb:2e:ef:12:0f:df:63:72:6e:53:43:fe:03:df:e6:84:42:b6:
         61:54:b7:86:93:49:18:d6:9b:f8:bf:ea:eb:4b:86:63:3b:ee:
         ba:20:8b:b2:20:60:a0:fe:0d:10:9e:28:24:50:63:68:2c:4a:
         65:34:88:f5:79:66:82:73:75:28:0d:d3:df:3d:88:15:7d:7e:
         0c:9c:5d:84:4a:8e:17:21:6d:bd:7e:56:a3:ca:ec:50:05:8e:
         5b:78:a4:0f:0b:a8:92:77:44:42:b7:8d:3d:db:7e:be:23:93:
         b2:18:d6:80:ab:d7:20:36:50:22:77:8f:df:88:d8:0c:21:9f:
         05:66:89:c7:40:27:b5:9f:3c:c0:60:ea:85:e2:a3:77:97:e9:
         01:67:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:38:57 2026 by rpki-client