This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
File:                     3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (raw, json)
Hash identifier:          Jg0eBzFNwVRly/0j1c4wnh+Pn1/PmT37QsudfpP4Olc=
Subject key identifier:   FB:3B:08:72:1C:1D:35:FE:98:B9:33:F4:B2:5A:29:9E:C3:A6:44:C4
Certificate issuer:       /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial:       142D854F839C79443856DFF33F0B2ED47BEB723E
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa
Signing time:             Tue 30 Dec 2025 10:00:01 +0000
ROA not before:           Tue 30 Dec 2025 09:55:01 +0000
ROA not after:            Tue 29 Dec 2026 10:00:01 +0000
asID:                     136854
IP address blocks:        103.102.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
                          rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 16:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2d:85:4f:83:9c:79:44:38:56:df:f3:3f:0b:2e:d4:7b:eb:72:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
        Validity
            Not Before: Dec 30 09:55:01 2025 GMT
            Not After : Dec 29 10:00:01 2026 GMT
        Subject: CN=FB3B08721C1D35FE98B933F4B25A299EC3A644C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:00:6c:37:c5:45:77:8f:b8:b8:35:37:5f:
                    6d:2b:34:16:14:e4:9e:1b:be:0d:bb:db:be:6f:0b:
                    4f:d0:60:f7:36:88:13:b5:21:a8:26:71:46:d9:55:
                    93:fc:bf:cc:2d:60:50:6e:ef:02:e0:60:55:ab:b1:
                    16:72:fe:9f:52:eb:77:97:4e:1d:d6:d7:e3:14:66:
                    9a:e3:21:47:f5:f2:d5:f4:36:d5:73:3b:ff:16:b5:
                    5a:e0:04:4a:85:9a:62:1c:67:9a:77:70:f9:47:01:
                    c6:80:76:b8:6f:78:df:9c:a6:04:18:82:5c:fe:4b:
                    8f:4e:98:e3:bc:1a:3f:58:6a:66:a7:f1:9b:64:72:
                    fa:68:33:96:99:ff:22:da:6c:e4:df:c3:59:4b:61:
                    1f:24:79:8b:ba:66:d4:de:09:d8:f2:ce:98:69:c8:
                    27:48:49:da:f4:2a:9a:de:ad:e5:54:a4:9d:d1:40:
                    be:5d:96:5b:2d:44:00:63:c8:4a:9f:8b:9f:84:72:
                    25:52:64:ae:88:c3:2a:b9:c1:98:a8:32:59:ea:8d:
                    38:da:8c:31:20:84:8e:9a:d4:12:a2:60:ec:8a:bc:
                    01:4e:17:f8:8c:95:63:77:1a:c0:77:26:65:a6:05:
                    7e:ba:e5:1a:97:00:d8:2c:54:ad:a5:1a:7a:97:48:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:08:72:1C:1D:35:FE:98:B9:33:F4:B2:5A:29:9E:C3:A6:44:C4
            X509v3 Authority Key Identifier:
                keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5d:e8:05:39:75:b4:91:06:24:d3:4f:f1:2c:48:70:e1:1a:
         2b:ee:e7:4e:3d:48:61:c0:9d:82:34:b4:65:c6:05:40:25:08:
         14:20:72:c0:99:47:64:11:68:14:ca:5d:65:c1:19:d8:39:59:
         a1:24:cc:70:af:87:df:0b:8b:b7:91:8b:62:cd:89:3d:86:58:
         8e:7a:70:08:aa:9f:27:dc:68:93:3c:7a:42:db:77:36:0b:e1:
         18:67:70:1b:14:b5:b9:a4:2a:26:33:82:1e:b0:c1:36:c3:58:
         9d:38:f5:ca:ee:31:07:e6:7e:48:b6:eb:19:b8:d6:62:7f:dc:
         af:34:1a:e6:0b:e9:e2:b3:3b:81:29:70:43:30:e5:91:f1:8b:
         1f:df:e9:9a:ff:3f:01:ec:cb:7f:76:20:f2:ef:27:f2:c4:8d:
         fc:e0:c7:03:84:77:07:82:2b:f2:43:28:8a:48:97:9e:08:c2:
         89:ac:a3:5b:7b:e4:41:94:68:63:ff:05:b0:c7:2c:89:3e:c5:
         be:d1:d1:e9:bf:9d:d1:f3:7f:bf:93:75:2a:45:76:f1:81:99:
         ba:1b:c0:18:7f:c6:ad:f8:d0:7e:39:b9:e1:62:6c:eb:bf:4e:
         ba:2a:5b:3e:a4:3d:38:54:4a:99:15:84:a3:ea:e4:2f:0e:2f:
         e4:e8:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:10 2026 by rpki-client