This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
File:                     3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (raw, json)
Hash identifier:          TDJsbNMl+lAMAT0NLVIT8psIHchVbCcnWDmPVMhPBr8=
Subject key identifier:   29:EE:C0:2C:A9:5B:BB:45:39:80:42:B2:AB:DF:7E:7B:65:83:BC:94
Certificate issuer:       /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
Certificate serial:       790215F14DAAFF3A2CDAAE3DF5E7C7890F2B24F1
Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa
Signing time:             Thu 22 Jan 2026 06:00:01 +0000
ROA not before:           Thu 22 Jan 2026 05:55:01 +0000
ROA not after:            Thu 21 Jan 2027 06:00:01 +0000
asID:                     139450
IP address blocks:        103.145.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl
                          rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 19:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:02:15:f1:4d:aa:ff:3a:2c:da:ae:3d:f5:e7:c7:89:0f:2b:24:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C
        Validity
            Not Before: Jan 22 05:55:01 2026 GMT
            Not After : Jan 21 06:00:01 2027 GMT
        Subject: CN=29EEC02CA95BBB45398042B2ABDF7E7B6583BC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:4c:6b:ee:ae:f4:4f:53:9a:78:e4:63:02:
                    ae:27:1c:0c:3d:ea:94:0d:15:ae:38:3f:d1:61:46:
                    1f:dd:eb:ff:a9:b7:6e:aa:ac:ad:d7:e9:df:ba:c0:
                    0e:f8:c7:72:d2:b7:59:79:d7:ba:55:66:75:08:bd:
                    a1:c9:58:16:c0:7a:a9:7a:48:b2:2c:8b:aa:a5:c5:
                    e4:19:1e:7a:33:50:15:26:28:00:d9:2c:94:5d:d3:
                    ce:b7:3b:6d:df:81:61:78:a0:2f:52:93:ff:f1:9e:
                    81:5d:69:64:06:f4:38:0e:bf:50:c8:6a:ac:66:b5:
                    1f:90:05:d8:c0:40:03:d5:8f:b1:e5:b1:84:47:33:
                    8d:23:b9:48:21:fd:a1:d8:bb:71:8a:5d:cd:ac:43:
                    03:f0:82:17:11:b6:35:c0:0a:71:dc:eb:fb:c2:d8:
                    0b:ec:b5:7e:ed:0a:a6:cf:be:3c:0f:ca:66:04:22:
                    91:0b:02:a1:f5:65:8a:d6:c5:86:4d:e4:52:36:33:
                    83:a0:24:8c:be:d1:aa:fc:2b:79:f9:4f:c7:f4:03:
                    5c:6b:03:aa:c4:4b:6e:a5:1b:3f:23:5b:a9:3d:ed:
                    01:6b:bc:62:33:0e:ec:45:8b:d6:f4:06:ba:c2:14:
                    07:eb:cb:89:51:5e:bb:a3:86:98:0c:a0:2e:bb:51:
                    fe:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:C0:2C:A9:5B:BB:45:39:80:42:B2:AB:DF:7E:7B:65:83:BC:94
            X509v3 Authority Key Identifier:
                keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:42:2e:9f:1c:4d:e1:69:ff:47:70:e9:0a:d8:11:9d:f3:
         90:6d:fd:b2:30:f5:46:13:2a:32:72:a9:dd:67:e5:e0:87:64:
         eb:6f:d3:1f:88:c2:78:a8:87:83:c9:a5:f8:31:f4:6e:ef:a4:
         f1:f5:9d:80:80:79:16:8c:0e:8a:60:bb:95:5d:b3:12:44:56:
         a2:37:08:95:3d:cd:77:35:8e:35:10:92:2a:c8:9d:f2:60:24:
         98:96:f5:e5:40:08:27:cd:30:59:d9:eb:5b:30:67:1c:e0:aa:
         cc:5d:e8:9f:14:7d:49:6e:ec:c5:55:a0:c9:ad:27:27:05:69:
         a5:c0:5a:63:81:86:63:cb:c1:f6:e3:33:11:c0:9f:01:ee:a8:
         ea:7c:c7:59:5f:ea:3c:df:97:4d:ec:45:c2:59:4f:40:d7:69:
         af:78:2c:1e:a8:7a:c2:35:d8:9b:29:11:74:8a:5d:44:d2:d4:
         79:95:86:21:f2:9b:3b:be:e5:77:f9:4e:dd:fd:42:9d:3b:10:
         80:8e:fb:1d:37:f9:41:45:cb:04:53:47:50:91:f2:5d:cd:8a:
         15:0b:4c:89:e5:f4:98:65:e1:b8:14:18:5f:4a:e8:cc:45:75:
         2b:75:a7:31:56:a4:b0:8c:1c:7c:c5:a6:7b:fb:27:0e:31:ae:
         25:ce:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:11:16 2026 by rpki-client