This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
File:                     3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier:          qlt9XTkJ4F0GfOW5becHUk3LV0da9rpuvfoDawVXZZE=
Subject key identifier:   46:92:45:87:78:81:22:0D:D1:37:14:49:A2:44:44:92:2B:40:25:D6
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       13B22D97775CDEBB6F09BCD85C45F1B438DB4F82
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
Signing time:             Sat 17 Jan 2026 07:00:01 +0000
ROA not before:           Sat 17 Jan 2026 06:55:01 +0000
ROA not after:            Sat 16 Jan 2027 07:00:01 +0000
asID:                     150245
IP address blocks:        103.23.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b2:2d:97:77:5c:de:bb:6f:09:bc:d8:5c:45:f1:b4:38:db:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Jan 17 06:55:01 2026 GMT
            Not After : Jan 16 07:00:01 2027 GMT
        Subject: CN=469245877881220DD1371449A24444922B4025D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:b0:3d:a0:f7:de:e7:54:03:62:43:e2:84:
                    df:44:f2:df:96:c8:2d:96:c2:3e:08:40:8d:f8:61:
                    45:c9:57:72:07:46:66:53:ff:09:a8:81:22:34:ab:
                    44:46:ea:bb:a8:8c:bb:0b:94:6a:45:19:21:01:69:
                    63:53:b7:ef:0c:53:1e:f9:a4:aa:c0:79:24:c0:2f:
                    34:83:5e:71:48:9a:39:17:eb:ca:06:c4:e3:f9:08:
                    75:59:ea:40:6c:24:f4:08:81:fc:58:74:fd:99:34:
                    7a:77:88:50:b5:1c:6d:80:bb:d2:6b:d1:79:53:9e:
                    dc:4c:50:cb:2b:dd:6d:d5:2a:35:80:11:91:45:97:
                    73:0a:ed:58:74:47:b3:5f:82:e1:b2:c9:82:e9:d9:
                    b9:02:dd:60:a6:b4:14:22:ed:b8:fe:07:47:9f:5f:
                    e5:db:77:db:8b:62:6d:0c:24:72:24:35:ec:5a:4f:
                    b1:b9:b8:3c:da:e7:c7:5f:6a:6d:68:32:a8:72:07:
                    a7:d2:48:70:d0:f7:42:93:7a:f1:7d:69:25:0a:e6:
                    b3:7d:28:ef:82:99:f9:4a:37:b1:cb:5b:01:0b:c5:
                    46:46:fb:e9:21:58:11:79:7f:90:99:15:3b:4c:99:
                    ac:3f:34:6e:48:33:a1:73:23:1a:7d:71:1e:ab:db:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:92:45:87:78:81:22:0D:D1:37:14:49:A2:44:44:92:2B:40:25:D6
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:08:f9:ea:68:84:d0:fa:38:a1:28:a1:e6:15:c6:ca:9d:d4:
         36:2b:7a:d5:a9:6f:65:44:f4:25:97:bc:14:73:0c:75:3e:3d:
         09:87:c8:cc:5f:df:da:d2:99:05:d7:6d:63:a4:3f:11:fa:50:
         b8:15:f3:61:90:96:71:96:ef:b4:91:2c:bf:c2:2a:dd:ce:94:
         43:a1:45:6c:77:5b:c5:75:ac:81:e6:1d:36:96:9b:79:60:c2:
         76:ce:c3:d7:0e:85:23:c3:6b:4f:98:78:63:ae:ff:8a:9d:75:
         8c:c3:29:7d:2e:88:fd:a2:bc:21:7c:7d:ab:6d:bc:ac:ec:a1:
         aa:65:c4:19:59:5f:4a:97:6c:ec:aa:b4:1f:03:63:a3:9b:94:
         1f:51:1f:b8:0e:2c:69:0d:cb:67:46:45:58:a1:30:44:2a:22:
         1d:66:1d:09:f6:36:7e:31:70:07:57:a4:36:bb:41:58:22:05:
         80:2b:08:4e:57:72:25:0e:5b:05:be:7b:75:8c:4d:42:30:35:
         55:47:0a:21:3b:ed:03:de:2f:6a:92:5b:75:66:25:de:a6:8d:
         5b:c1:52:96:fa:bf:0d:ec:0c:0b:61:80:f3:9a:5b:d1:a2:82:
         8c:c1:bf:62:73:78:35:29:b4:47:9c:03:f4:01:8e:04:62:45:
         ba:5b:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:19 2026 by rpki-client