This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          zomwNLCe0VyAqDz92tIZrE0AVW1Hd75UHhQ0Qjvp8io=
Subject key identifier:   FC:B6:EC:6D:2A:15:CD:BD:2A:DA:6B:A2:88:EC:FB:68:DD:5D:E0:35
Certificate issuer:       /CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Certificate serial:       645BE004179B37409309E46F44AC9315C31447AE
Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
Signing time:             Fri 02 Jan 2026 05:00:02 +0000
ROA not before:           Fri 02 Jan 2026 04:55:02 +0000
ROA not after:            Fri 01 Jan 2027 05:00:02 +0000
asID:                     150915
IP address blocks:        103.97.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
                          rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5b:e0:04:17:9b:37:40:93:09:e4:6f:44:ac:93:15:c3:14:47:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
        Validity
            Not Before: Jan  2 04:55:02 2026 GMT
            Not After : Jan  1 05:00:02 2027 GMT
        Subject: CN=FCB6EC6D2A15CDBD2ADA6BA288ECFB68DD5DE035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:1e:12:8a:6a:97:0e:bc:b1:ca:e3:96:a4:
                    05:6b:82:8d:6f:8c:3b:b6:9a:85:9e:a5:a3:66:53:
                    62:3e:09:3b:83:09:05:fe:fe:39:b6:0e:65:bb:46:
                    c9:a2:0a:79:fc:36:f1:2f:a9:50:7e:c6:06:5e:71:
                    0f:25:6b:c8:fd:c8:9e:5d:33:a4:5f:38:d9:08:91:
                    48:2e:6c:63:5e:07:ef:33:bb:60:e3:bf:f8:bf:cd:
                    79:9e:27:19:27:ef:b4:8b:2c:e1:77:14:c3:07:cd:
                    25:fd:4b:d1:2b:b6:2f:bd:8e:da:b4:a4:2c:0c:21:
                    29:1b:b4:9e:9d:87:26:91:ec:5b:8c:c2:01:7a:43:
                    64:b6:4f:5b:83:83:d1:98:cd:67:67:25:a4:9b:76:
                    e3:59:53:d9:52:0f:ea:f7:f4:36:47:70:05:70:39:
                    96:4a:38:ec:68:54:7d:e3:d3:9f:72:f2:ab:34:f8:
                    de:e1:2c:c1:09:64:f0:b8:13:60:7a:e3:b7:61:21:
                    8f:5a:e3:4e:2d:c2:ff:fb:82:02:09:c8:e1:73:d5:
                    ae:fa:54:1f:a5:44:a0:3b:9b:3c:36:66:ad:f6:29:
                    26:dc:ce:30:b4:ce:95:68:1a:5c:57:2f:2b:4a:fc:
                    cf:40:cf:6e:f2:61:cb:47:3e:18:93:ef:03:19:2b:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:EC:6D:2A:15:CD:BD:2A:DA:6B:A2:88:EC:FB:68:DD:5D:E0:35
            X509v3 Authority Key Identifier:
                keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:f6:07:41:e2:8b:29:bd:4d:88:a8:de:2a:61:8b:fb:79:
         6b:9c:97:5f:0d:8b:ab:e5:15:93:12:ce:61:a2:eb:be:8a:46:
         37:89:c4:6e:c2:99:0d:37:39:79:70:ce:53:d5:61:70:34:73:
         c1:d1:da:dd:f4:52:b9:54:a0:88:70:d0:e0:e1:cc:64:dc:1a:
         2f:21:b7:9a:a3:4c:dc:eb:a2:f1:d0:5f:45:0c:a6:c9:09:93:
         34:e5:31:20:fc:2f:76:63:b6:4a:a5:95:41:8d:07:09:d2:e5:
         3e:4e:3b:8b:7b:9b:68:02:f7:00:d4:d8:6f:1d:01:55:13:d9:
         54:4a:a9:55:9e:54:84:14:e0:72:07:02:35:a1:f5:21:57:ac:
         ae:ff:fc:2a:b5:a1:bb:23:5f:c8:a7:73:ab:8b:3f:4a:b8:c9:
         f6:48:2c:c5:e9:bb:38:63:0b:d0:fb:be:7c:2d:f3:df:b5:33:
         db:2c:0d:ff:c9:a6:13:20:18:0c:c2:6d:a5:67:6c:46:ae:22:
         1b:f0:78:70:91:58:d7:f8:b1:ca:dd:de:96:5e:02:ec:e3:81:
         73:00:18:89:77:53:73:a3:10:92:d9:0c:fd:cd:0f:7d:06:ea:
         c9:ef:12:f8:45:75:b3:77:5e:da:a4:76:d5:41:6f:f4:d4:fe:
         b2:2b:17:ea
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZFvgBBebN0CTCeRvRKyTFcMUR64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw
MzlENjEzRDAeFw0yNjAxMDIwNDU1MDJaFw0yNzAxMDEwNTAwMDJaMDMxMTAvBgNV
BAMTKEZDQjZFQzZEMkExNUNEQkQyQURBNkJBMjg4RUNGQjY4REQ1REUwMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGh4SimqXDryxyuOWpAVrgo1v
jDu2moWepaNmU2I+CTuDCQX+/jm2DmW7RsmiCnn8NvEvqVB+xgZecQ8la8j9yJ5d
M6RfONkIkUgubGNeB+8zu2Djv/i/zXmeJxkn77SLLOF3FMMHzSX9S9Erti+9jtq0
pCwMISkbtJ6dhyaR7FuMwgF6Q2S2T1uDg9GYzWdnJaSbduNZU9lSD+r39DZHcAVw
OZZKOOxoVH3j059y8qs0+N7hLMEJZPC4E2B647dhIY9a404twv/7ggIJyOFz1a76
VB+lRKA7mzw2Zq32KSbczjC0zpVoGlxXLytK/M9Az27yYctHPhiT7wMZK9q5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/LbsbSoVzb0q2muiiOz7aN1d4DUwHwYDVR0j
BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx
MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE
NjEzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HHMA0GCSqG
SIb3DQEBCwUAA4IBAQBNc/YHQeKLKb1NiKjeKmGL+3lrnJdfDYur5RWTEs5houu+
ikY3icRuwpkNNzl5cM5T1WFwNHPB0drd9FK5VKCIcNDg4cxk3BovIbeao0zc66Lx
0F9FDKbJCZM05TEg/C92Y7ZKpZVBjQcJ0uU+TjuLe5toAvcA1NhvHQFVE9lUSqlV
nlSEFOByBwI1ofUhV6yu//wqtaG7I1/Ip3Oriz9KuMn2SCzF6bs4YwvQ+758LfPf
tTPbLA3/yaYTIBgMwm2lZ2xGriIb8HhwkVjX+LHK3d6WXgLs44FzABiJd1NzoxCS
2Qz9zQ99BurJ7xL4RXWzd17apHbVQW/01P6yKxfq
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:15 2026 by rpki-client