This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
File:                     3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          BXn8trO0P5e/1ZUlXQePX/B600/BNafep7EhXvrxe5I=
Subject key identifier:   F5:ED:97:97:FC:A1:31:B9:FA:E5:FD:51:B4:97:51:6E:E0:12:AA:A0
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       29B9E3718DA0741C6F2773D82BBB141CA31F18D8
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa
Signing time:             Thu 01 Jan 2026 05:02:46 +0000
ROA not before:           Thu 01 Jan 2026 04:57:46 +0000
ROA not after:            Thu 31 Dec 2026 05:02:46 +0000
asID:                     140389
IP address blocks:        103.16.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 18:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b9:e3:71:8d:a0:74:1c:6f:27:73:d8:2b:bb:14:1c:a3:1f:18:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jan  1 04:57:46 2026 GMT
            Not After : Dec 31 05:02:46 2026 GMT
        Subject: CN=F5ED9797FCA131B9FAE5FD51B497516EE012AAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:1e:f4:bd:25:af:66:04:62:e6:4b:87:56:
                    49:39:bc:4a:96:84:2c:7e:c3:b6:6e:26:a3:c1:ab:
                    d0:c5:18:60:c8:5b:2b:e4:72:69:3e:ae:19:fe:5a:
                    83:4a:fa:e3:f5:28:02:a6:0a:d2:99:12:22:03:15:
                    08:b7:22:2a:ba:83:a3:91:63:a2:05:88:93:c0:f9:
                    cc:3f:b8:04:61:63:8f:74:bc:55:bb:93:45:db:cd:
                    1d:49:d3:b4:c5:c3:f2:88:ea:27:fd:e9:aa:be:62:
                    b8:d1:5f:fa:ad:00:f9:61:33:58:ad:70:c2:ed:29:
                    7a:89:bd:cd:57:97:87:1d:40:a0:b6:92:d5:bb:a2:
                    15:d9:0d:b0:1f:5b:e3:b2:97:54:0b:1f:61:9f:a8:
                    8f:dd:c4:b1:2f:b6:9d:65:db:43:5f:34:27:82:44:
                    c1:0b:94:1b:5e:a3:89:ed:34:74:f8:25:30:73:38:
                    b4:81:20:bb:35:fd:b8:7c:c1:b4:d1:81:01:85:c4:
                    17:f5:04:3f:83:3f:21:cb:79:8b:07:09:2c:e0:ba:
                    5b:00:22:a8:8a:4c:a9:f9:06:25:5b:c2:d8:db:51:
                    ec:b9:87:d6:93:81:88:81:f7:24:07:f6:e8:e2:57:
                    4b:f6:37:df:94:92:b4:e8:d9:6d:64:4b:05:6b:c2:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:ED:97:97:FC:A1:31:B9:FA:E5:FD:51:B4:97:51:6E:E0:12:AA:A0
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133392e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:84:b9:4d:07:25:92:c0:4b:7d:4f:80:de:dc:15:1f:12:
         ab:6b:61:e2:e9:55:1f:2d:f5:c5:58:94:b6:8a:ae:be:fe:83:
         14:08:d8:25:84:ef:86:00:4b:50:86:62:04:66:8d:c3:63:a4:
         3e:23:4b:90:c8:0f:ad:c4:0b:63:54:c9:1d:05:33:58:9d:82:
         03:2b:af:5e:9f:ec:86:ee:cf:89:01:a1:7d:dc:fc:92:ac:dd:
         a7:d8:ba:27:36:88:10:1a:13:52:f7:c6:af:f4:cf:e6:c2:d6:
         5e:e5:b4:1e:3f:ab:21:f5:16:ef:8c:76:a8:9c:03:cf:1a:0a:
         4d:4e:5d:b7:01:5d:f5:f3:46:c2:6f:ab:1f:9f:e9:95:8e:27:
         db:1c:c5:f9:76:22:a3:49:71:00:17:d5:c8:e8:b2:03:0c:c8:
         f0:33:af:70:06:c5:9c:fc:b0:ce:b5:2d:a6:80:19:a1:73:32:
         4e:93:a5:43:65:55:91:d5:31:c5:ea:0e:9d:cf:e9:ba:71:17:
         b5:41:a5:dd:fd:22:1e:17:5a:87:a8:25:51:cd:b9:93:c4:98:
         69:9a:da:54:26:51:3f:9a:61:37:5f:14:ac:86:07:45:1a:0b:
         41:dd:43:87:2e:c3:b3:a3:57:e0:24:6f:1a:74:0f:28:f2:cc:
         32:59:f9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:41:19 2026 by rpki-client