This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
File:                     3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (raw, json)
Hash identifier:          gagkqZ1Th9ULC3nGrIkxBLFj551bmKfZ+zY4Ia+9Mpo=
Subject key identifier:   36:03:95:8D:14:BD:C8:EC:8B:03:CA:2C:4A:3E:F2:7A:C5:81:89:15
Certificate issuer:       /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial:       3F230FF965BF95284221A7D465CFD9DDE997264A
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
Signing time:             Wed 07 Jan 2026 16:00:02 +0000
ROA not before:           Wed 07 Jan 2026 15:55:02 +0000
ROA not after:            Wed 06 Jan 2027 16:00:02 +0000
asID:                     150959
IP address blocks:        103.116.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
                          rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 13:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:23:0f:f9:65:bf:95:28:42:21:a7:d4:65:cf:d9:dd:e9:97:26:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
        Validity
            Not Before: Jan  7 15:55:02 2026 GMT
            Not After : Jan  6 16:00:02 2027 GMT
        Subject: CN=3603958D14BDC8EC8B03CA2C4A3EF27AC5818915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:48:35:cf:d7:e1:2c:2c:83:38:45:b4:6f:
                    57:03:fc:7d:f2:9c:67:44:a5:fc:45:2b:6f:89:58:
                    e0:15:ce:92:35:99:28:5d:f5:1e:e4:86:d5:99:a6:
                    bc:b7:c5:fd:af:0d:a1:f5:21:4f:6b:44:75:a3:41:
                    2b:73:fa:ec:dc:e4:3f:33:39:00:e5:82:9e:5d:c4:
                    d5:82:0f:dc:c4:62:25:08:89:ab:01:fe:93:42:28:
                    9b:9a:4a:7a:41:40:83:c1:37:99:a6:7e:ba:f5:35:
                    d8:b9:98:cc:c4:b3:74:14:8e:3c:78:48:ab:15:4c:
                    b0:da:34:a2:55:a7:8d:d7:22:c8:91:48:4d:ba:76:
                    2b:c7:b8:59:4c:e8:63:f0:45:2b:78:88:14:62:8c:
                    62:e0:b7:c9:21:ae:4c:55:2d:48:eb:bc:d7:51:31:
                    93:4a:50:cd:41:3e:16:84:5d:a8:23:85:e3:aa:81:
                    c6:1e:62:b8:c5:8a:d8:5a:67:dd:5a:e9:93:5c:fd:
                    ba:97:c7:db:88:d2:33:d0:15:91:51:35:33:9d:53:
                    dd:b8:75:40:58:0b:b3:0e:6c:b6:5c:5b:4a:c7:b1:
                    f7:20:ad:00:9d:6e:46:4c:29:02:ce:36:42:ce:06:
                    94:bf:9b:bd:9a:f4:d5:1b:59:c9:b8:35:1d:da:96:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:95:8D:14:BD:C8:EC:8B:03:CA:2C:4A:3E:F2:7A:C5:81:89:15
            X509v3 Authority Key Identifier:
                keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:9d:be:9c:e9:8a:fc:ec:44:ef:bb:51:78:d0:f3:9f:27:
         2e:cc:b0:f6:c9:77:66:89:92:07:ab:85:7f:dd:8f:d4:48:1d:
         1b:b3:23:48:cc:79:17:17:7d:6a:f3:62:76:d4:b7:a9:62:8a:
         c9:0d:66:b2:59:9f:e0:17:8d:66:cb:5e:42:0c:ea:fd:48:9b:
         45:25:cf:7a:80:6e:8b:1b:1e:bb:cd:f0:61:ab:7d:b5:77:af:
         9e:cd:cd:d5:75:6c:23:d0:47:9b:f6:85:98:69:f3:f9:36:bc:
         34:93:c7:8d:ec:54:dd:60:3b:63:c0:c6:72:b3:58:b5:c1:be:
         7a:a1:75:44:bf:66:bd:f0:5e:74:d8:5d:3f:b8:ac:84:50:d7:
         65:cc:56:15:98:70:66:a1:2d:a1:66:bb:1b:37:12:8c:29:d4:
         f0:14:40:c4:ee:17:87:00:52:ce:7e:74:80:80:91:b1:0a:45:
         a4:38:c0:b0:d6:76:36:8f:c9:68:5e:82:ae:04:11:b1:6e:1e:
         79:12:0c:b8:f2:3c:75:a8:3b:71:31:ef:16:97:d7:07:3e:18:
         ca:96:bd:7c:01:54:88:9a:c1:70:8b:75:47:75:e7:e7:d6:59:
         da:1b:ad:e0:9b:ae:3f:3a:61:58:d5:51:4f:e9:c2:fa:a7:ea:
         6b:5b:ba:fe
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPyMP+WW/lShCIafUZc/Z3emXJkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF
QjcxQTNCMTAeFw0yNjAxMDcxNTU1MDJaFw0yNzAxMDYxNjAwMDJaMDMxMTAvBgNV
BAMTKDM2MDM5NThEMTRCREM4RUM4QjAzQ0EyQzRBM0VGMjdBQzU4MTg5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIi0g1z9fhLCyDOEW0b1cD/H3y
nGdEpfxFK2+JWOAVzpI1mShd9R7khtWZpry3xf2vDaH1IU9rRHWjQStz+uzc5D8z
OQDlgp5dxNWCD9zEYiUIiasB/pNCKJuaSnpBQIPBN5mmfrr1Ndi5mMzEs3QUjjx4
SKsVTLDaNKJVp43XIsiRSE26divHuFlM6GPwRSt4iBRijGLgt8khrkxVLUjrvNdR
MZNKUM1BPhaEXagjheOqgcYeYrjFithaZ91a6ZNc/bqXx9uI0jPQFZFRNTOdU924
dUBYC7MObLZcW0rHsfcgrQCdbkZMKQLONkLOBpS/m72a9NUbWcm4NR3alqz7AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNgOVjRS9yOyLA8osSj7yesWBiRUwHwYDVR0j
BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0
MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx
QTNCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlOTIyNDNhLTc2M2QtNDRiOC05
ODdkLTA4YmQwZGE5ZWUzZC8wLzMxMzAzMzJlMzEzMTM2MmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3RSMA0GCSqG
SIb3DQEBCwUAA4IBAQA/fJ2+nOmK/OxE77tReNDznycuzLD2yXdmiZIHq4V/3Y/U
SB0bsyNIzHkXF31q82J21LepYorJDWayWZ/gF41my15CDOr9SJtFJc96gG6LGx67
zfBhq321d6+ezc3VdWwj0Eeb9oWYafP5Nrw0k8eN7FTdYDtjwMZys1i1wb56oXVE
v2a98F502F0/uKyEUNdlzFYVmHBmoS2hZrsbNxKMKdTwFEDE7heHAFLOfnSAgJGx
CkWkOMCw1nY2j8loXoKuBBGxbh55Egy48jx1qDtxMe8Wl9cHPhjKlr18AVSImsFw
i3VHdefn1lnaG63gm64/OmFY1VFP6cL6p+prW7r+
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:06:06 2026 by rpki-client