This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
File:                     3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier:          8XPZdSOWhiN4sDNWCAz5bAh63j/+nMyIzLXNoiqYe4I=
Subject key identifier:   B0:2E:62:DB:F3:6A:5F:A2:3A:4E:0A:E0:21:BB:83:DD:54:89:13:CE
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       428958A5EA2D14FD6F337E9C9766F92AA443A85C
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa
Signing time:             Sat 17 Jan 2026 07:00:01 +0000
ROA not before:           Sat 17 Jan 2026 06:55:01 +0000
ROA not after:            Sat 16 Jan 2027 07:00:01 +0000
asID:                     150245
IP address blocks:        103.23.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:89:58:a5:ea:2d:14:fd:6f:33:7e:9c:97:66:f9:2a:a4:43:a8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Jan 17 06:55:01 2026 GMT
            Not After : Jan 16 07:00:01 2027 GMT
        Subject: CN=B02E62DBF36A5FA23A4E0AE021BB83DD548913CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:44:78:b5:7d:3f:00:22:5c:bb:00:7a:d7:
                    59:68:f8:df:a4:d7:2e:4e:d1:24:29:a7:c9:52:cb:
                    23:3c:a0:7c:60:77:e4:95:59:db:a6:14:50:30:17:
                    38:96:0a:0a:16:eb:f5:6b:70:b2:82:ea:b5:5c:15:
                    75:ee:87:9a:f2:23:23:f5:cc:ca:7d:34:d3:4f:46:
                    a2:5e:f4:2d:ad:7e:bc:df:02:c4:b6:f4:5f:c8:f4:
                    6c:f2:54:3e:c5:07:7b:08:7b:ef:eb:93:b4:69:bc:
                    83:95:09:33:57:dc:fe:3c:e3:74:df:cf:e6:20:75:
                    8e:37:a4:26:cc:cd:1c:f7:31:df:82:fe:7d:e5:0b:
                    1e:7a:77:12:98:e2:b6:6a:38:03:4f:64:79:81:b0:
                    bb:be:00:b8:89:9a:9e:d3:ea:1d:c0:e2:58:ee:2c:
                    b6:29:be:3b:cc:0b:8b:d9:a9:25:d7:61:43:9c:d0:
                    7a:41:2c:fa:54:4f:8d:62:11:ef:7a:8a:00:19:d2:
                    d5:c4:c6:b8:d3:1e:1f:08:65:28:45:c5:60:c8:f5:
                    b9:fa:5e:a4:27:f2:83:57:ef:35:23:4d:4d:72:29:
                    73:f4:64:a5:bf:86:d6:c6:3e:ec:93:63:76:99:d1:
                    59:d2:fd:a6:0c:5c:75:6f:74:b8:bd:3c:c3:78:ee:
                    85:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:62:DB:F3:6A:5F:A2:3A:4E:0A:E0:21:BB:83:DD:54:89:13:CE
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39392e302f32342d3234203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:65:74:b6:03:3c:b3:ae:0b:d0:2c:2b:91:ea:38:bb:eb:d5:
         f0:6a:c9:9b:5e:37:12:13:bf:53:c0:1f:92:90:05:29:e4:f5:
         71:ab:c3:47:ed:f0:95:f7:50:e4:94:4c:52:63:cc:fb:12:8b:
         21:d3:e3:98:51:87:81:36:bc:df:98:13:de:2b:aa:44:cd:33:
         63:2b:ac:74:b9:90:14:df:a7:29:e5:a7:90:49:18:75:c8:67:
         8d:5f:d5:e9:a1:03:46:d6:5d:44:4f:32:95:f8:25:c7:f0:29:
         09:54:e7:43:53:04:01:99:65:b4:ad:7d:0b:dc:b8:70:a5:47:
         ff:48:c6:b6:f1:bf:25:ed:89:c9:94:b6:bb:42:d2:48:3c:51:
         a9:ce:21:96:a7:c2:2b:a9:13:0b:ea:0b:e5:f3:e3:a9:63:f9:
         d6:66:b8:6f:c0:ae:69:cc:45:f9:16:be:00:f3:59:09:5c:33:
         d0:29:e4:15:bb:2d:f3:35:f7:37:d5:56:0b:fa:8d:2f:38:4f:
         c6:6f:05:c9:22:66:82:31:3c:b3:8a:b0:f3:17:ce:70:e3:47:
         89:7a:fe:75:10:b4:b3:8a:6b:b7:40:15:a0:b3:3a:f3:06:56:
         89:0a:8d:1e:a7:28:9a:4e:eb:64:b9:2f:6e:92:c5:b2:d1:71:
         a4:c8:41:6d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQolYpeotFP1vM36cl2b5KqRDqFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG
RDdDMjkxOTAeFw0yNjAxMTcwNjU1MDFaFw0yNzAxMTYwNzAwMDFaMDMxMTAvBgNV
BAMTKEIwMkU2MkRCRjM2QTVGQTIzQTRFMEFFMDIxQkI4M0RENTQ4OTEzQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmVER4tX0/ACJcuwB611lo+N+k
1y5O0SQpp8lSyyM8oHxgd+SVWdumFFAwFziWCgoW6/VrcLKC6rVcFXXuh5ryIyP1
zMp9NNNPRqJe9C2tfrzfAsS29F/I9GzyVD7FB3sIe+/rk7RpvIOVCTNX3P4843Tf
z+YgdY43pCbMzRz3Md+C/n3lCx56dxKY4rZqOANPZHmBsLu+ALiJmp7T6h3A4lju
LLYpvjvMC4vZqSXXYUOc0HpBLPpUT41iEe96igAZ0tXExrjTHh8IZShFxWDI9bn6
XqQn8oNX7zUjTU1yKXP0ZKW/htbGPuyTY3aZ0VnS/aYMXHVvdLi9PMN47oX/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsC5i2/NqX6I6TgrgIbuD3VSJE84wHwYDVR0j
BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx
OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD
MjkxOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4NDZmNDIyLWMzMDItNDQ2Mi1i
NTg0LTcwMGU5MzQ2Y2EwOS8wLzMxMzAzMzJlMzIzMzJlMzkzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcXYzANBgkqhkiG
9w0BAQsFAAOCAQEAYGV0tgM8s64L0Cwrkeo4u+vV8GrJm143EhO/U8AfkpAFKeT1
cavDR+3wlfdQ5JRMUmPM+xKLIdPjmFGHgTa835gT3iuqRM0zYyusdLmQFN+nKeWn
kEkYdchnjV/V6aEDRtZdRE8ylfglx/ApCVTnQ1MEAZlltK19C9y4cKVH/0jGtvG/
Je2JyZS2u0LSSDxRqc4hlqfCK6kTC+oL5fPjqWP51ma4b8CuacxF+Ra+APNZCVwz
0CnkFbst8zX3N9VWC/qNLzhPxm8FySJmgjE8s4qw8xfOcONHiXr+dRC0s4prt0AV
oLM68wZWiQqNHqcomk7rZLkvbpLFstFxpMhBbQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:18 2026 by rpki-client