This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          JOaRhY/bLlBtJRnSgu58P0++I9wpyJMQc7vHKmf/yaA=
Subject key identifier:   A9:18:8C:C2:90:56:FE:A7:23:DC:3C:1E:58:C6:7E:4A:8F:DF:FA:16
Certificate issuer:       /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial:       6577F31DC145F4F0436D394C46D0D512F87D789A
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa
Signing time:             Fri 02 Jan 2026 02:02:04 +0000
ROA not before:           Fri 02 Jan 2026 01:57:04 +0000
ROA not after:            Fri 01 Jan 2027 02:02:04 +0000
asID:                     137349
IP address blocks:        103.114.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
                          rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:77:f3:1d:c1:45:f4:f0:43:6d:39:4c:46:d0:d5:12:f8:7d:78:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
        Validity
            Not Before: Jan  2 01:57:04 2026 GMT
            Not After : Jan  1 02:02:04 2027 GMT
        Subject: CN=A9188CC29056FEA723DC3C1E58C67E4A8FDFFA16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9f:f6:6e:cc:3b:cb:e4:c1:81:b3:ad:eb:93:
                    4f:db:c1:87:09:e4:04:c1:9c:07:a7:5c:67:7a:dc:
                    9a:66:68:27:72:6e:58:70:ef:85:af:81:82:1a:42:
                    72:25:f1:e4:1d:bf:73:40:4a:04:f9:ba:0e:cb:ed:
                    5e:d9:3c:03:c2:b1:c7:9d:2f:3e:7e:f4:d1:ca:57:
                    f0:bb:dc:a5:58:74:72:c7:c9:9d:44:d6:fe:a9:8b:
                    f3:82:7d:f5:c3:2d:d0:bd:bc:8b:95:31:46:c4:af:
                    3b:e0:3e:89:12:5d:02:bf:93:63:b4:94:de:b8:88:
                    45:f2:09:9e:d8:e8:39:8c:a2:e6:e2:c2:e3:c1:ed:
                    97:d1:62:97:42:2e:9b:0b:a2:e1:b4:05:57:4b:7a:
                    79:f3:12:e2:bd:af:15:bd:47:b3:a9:cc:af:4d:7e:
                    5b:13:76:1c:b8:bd:4a:a0:fc:c8:16:fd:e9:73:2d:
                    78:9a:5c:2e:de:bc:4f:f2:8a:f3:69:38:96:6d:c7:
                    18:fc:36:6c:ad:8d:83:ee:92:39:e5:35:e8:26:34:
                    b9:eb:44:8b:2d:c0:f1:c9:33:c1:96:68:aa:dd:bc:
                    2c:8f:38:67:23:89:04:30:40:e9:57:3f:b6:1a:2e:
                    36:c4:de:e2:53:54:be:b3:8c:34:12:9f:ad:4e:3f:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:18:8C:C2:90:56:FE:A7:23:DC:3C:1E:58:C6:7E:4A:8F:DF:FA:16
            X509v3 Authority Key Identifier:
                keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35332e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:77:b7:32:55:78:54:10:fd:7f:99:7a:83:2c:27:d3:f0:00:
         91:b4:27:67:58:71:9b:8b:79:15:5c:82:25:b7:66:89:38:c6:
         79:99:8a:36:7d:51:f2:a7:9f:cc:59:dd:85:80:3a:c8:75:f9:
         60:b8:44:10:43:c6:af:3c:e5:40:2c:1a:e8:98:2b:16:20:16:
         64:50:3d:5b:5e:a1:b2:85:f9:37:31:da:f2:06:d6:8e:3d:03:
         79:e7:8b:a9:b7:3c:82:67:24:a1:90:7d:7a:8a:5e:02:8c:b4:
         3e:50:02:20:5c:47:b3:3a:bc:ca:60:8f:9a:f3:f3:1b:f4:c0:
         6f:f4:fd:31:29:02:f5:4a:78:c6:76:8c:31:15:28:8e:7b:f8:
         5a:25:3d:c7:b1:d1:3e:9c:1c:73:e3:af:c6:26:5d:ef:af:16:
         da:5a:8f:b1:d7:ae:00:9c:a6:c0:4a:0f:28:e7:93:38:05:1b:
         43:00:5f:57:b9:a8:d6:a9:3b:06:58:18:99:0e:03:7a:4e:b8:
         c1:62:09:6a:4a:9e:76:22:28:80:db:a4:88:31:b3:01:73:68:
         db:9e:bf:ce:59:6e:01:70:b3:f7:6d:62:44:db:98:d3:10:00:
         88:03:6d:b5:ad:0b:11:16:74:7b:68:e0:a6:01:e6:c0:3f:07:
         f6:ea:fd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:46 2026 by rpki-client