This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
File:                     3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (raw, json)
Hash identifier:          8nVSKMfLnOq7H4iVikz3GDhFqGNUP7VsOtUfQqLc1tA=
Subject key identifier:   D1:79:9B:B2:C0:FF:A8:BA:B0:17:8A:D5:C4:1E:79:A1:4D:94:39:C6
Certificate issuer:       /CN=C70A343932991281F91796DB87B011987603BBF4
Certificate serial:       5F1467E79467438628898CD6FF80809A6AEB69E0
Authority key identifier: C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa
Signing time:             Tue 23 Dec 2025 03:03:07 +0000
ROA not before:           Tue 23 Dec 2025 02:58:07 +0000
ROA not after:            Tue 22 Dec 2026 03:03:07 +0000
asID:                     149663
IP address blocks:        103.184.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl
                          rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 05:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:67:e7:94:67:43:86:28:89:8c:d6:ff:80:80:9a:6a:eb:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70A343932991281F91796DB87B011987603BBF4
        Validity
            Not Before: Dec 23 02:58:07 2025 GMT
            Not After : Dec 22 03:03:07 2026 GMT
        Subject: CN=D1799BB2C0FFA8BAB0178AD5C41E79A14D9439C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:35:4f:31:af:4b:64:4a:f5:f6:b6:92:d0:
                    42:3f:26:46:ce:21:49:cb:7b:5e:64:f6:8f:41:11:
                    3a:e8:3b:a9:eb:d4:75:6d:28:c2:ba:5f:86:79:ab:
                    94:a3:72:97:41:3a:47:04:e5:5a:70:42:14:7e:76:
                    27:9b:6d:52:12:c3:cb:72:46:c8:a1:77:8f:68:62:
                    23:50:27:48:b4:32:19:18:40:41:89:00:49:51:65:
                    65:88:e9:18:51:35:a7:92:04:eb:76:b9:01:65:fb:
                    c7:35:0a:76:cb:1b:3b:29:d2:2f:1e:54:7e:c6:66:
                    92:fd:df:dd:f4:2c:3a:73:21:c7:af:d2:7c:be:69:
                    73:a0:c4:95:b6:b8:4a:c3:3e:26:8f:53:4c:61:8e:
                    16:89:5c:40:1c:46:b1:fa:f0:8b:41:f8:f3:46:72:
                    d1:ce:3a:93:d8:37:c2:47:4c:4e:10:c8:10:17:9c:
                    ec:0d:f7:18:70:32:d4:70:fb:ec:c7:cb:86:f3:dd:
                    62:4b:9b:d3:d5:33:9a:4d:0c:68:4c:c3:95:a2:8d:
                    2a:ed:5d:d0:a5:61:71:04:36:d1:97:b6:47:a2:2e:
                    89:b4:68:d2:6d:cf:98:12:44:78:29:2b:cc:4d:1e:
                    94:bf:af:c4:f8:e0:d5:88:28:e4:00:37:c1:33:39:
                    f5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:79:9B:B2:C0:FF:A8:BA:B0:17:8A:D5:C4:1E:79:A1:4D:94:39:C6
            X509v3 Authority Key Identifier:
                keyid:C7:0A:34:39:32:99:12:81:F9:17:96:DB:87:B0:11:98:76:03:BB:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/C70A343932991281F91796DB87B011987603BBF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C70A343932991281F91796DB87B011987603BBF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:c0:3f:b7:39:66:8a:31:ff:7a:4c:c0:6a:d1:90:fa:03:
         33:ac:e3:b0:1b:43:04:9c:8c:b0:a9:16:24:9c:69:1d:7f:44:
         b1:95:37:f6:9a:06:03:99:3b:b3:e9:7d:45:19:18:ad:0f:f8:
         95:4c:c3:62:40:07:a6:04:59:f7:d5:b7:c1:70:c7:86:0c:45:
         9e:c0:b6:a5:63:3a:b9:d0:54:3d:ff:64:6e:c4:c4:71:9f:23:
         ae:7c:c6:55:70:78:94:ee:02:02:e6:36:55:58:90:63:eb:55:
         3a:1f:db:d6:47:7c:2a:d4:02:7e:c8:72:e8:db:2d:e7:30:22:
         f7:86:1a:ba:37:00:bf:61:78:00:2c:8b:26:86:0e:87:77:28:
         2c:ad:93:bd:08:be:27:6e:0a:2a:ce:e3:9f:83:75:41:df:ed:
         58:92:fd:5c:18:7a:85:eb:30:56:7f:ff:7c:2a:3c:00:fb:9e:
         36:1a:31:82:35:51:36:a7:85:09:a8:47:ee:c8:59:8e:6b:5e:
         7e:8d:42:8f:5b:d6:28:a0:bd:51:c2:15:7d:ed:2c:84:ed:0e:
         99:f2:db:a0:cf:cd:31:c6:83:74:ca:21:7e:d1:b4:59:7f:a5:
         17:7c:74:21:d1:41:dc:43:48:33:a1:85:38:30:60:69:71:d0:
         79:15:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:46 2026 by rpki-client