This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa
File:                     3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa (raw, json)
Hash identifier:          MBFnv7ZoP4iaMV1OJ7B+JK9tAnoUgV3W7EEXgSWuTJc=
Subject key identifier:   3C:BD:87:8F:EC:7A:E7:C7:5B:F5:FB:55:A9:60:59:A1:74:2B:B0:F2
Certificate issuer:       /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial:       58AEE69D45930AED8ADE96C00A46A1DF87E12031
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa
Signing time:             Thu 22 Jan 2026 09:00:36 +0000
ROA not before:           Thu 22 Jan 2026 08:55:36 +0000
ROA not after:            Thu 21 Jan 2027 09:00:36 +0000
asID:                     59147
IP address blocks:        103.252.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
                          rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:e6:9d:45:93:0a:ed:8a:de:96:c0:0a:46:a1:df:87:e1:20:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
        Validity
            Not Before: Jan 22 08:55:36 2026 GMT
            Not After : Jan 21 09:00:36 2027 GMT
        Subject: CN=3CBD878FEC7AE7C75BF5FB55A96059A1742BB0F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:39:14:cc:43:2b:03:d1:44:8e:4f:da:4c:
                    2b:6d:31:89:04:cf:f1:11:df:c7:e1:ec:57:db:25:
                    0a:c7:49:a1:55:35:cd:ef:e9:28:a8:c4:0d:d6:ad:
                    0a:10:b2:dc:db:ce:4b:45:1e:36:89:91:4f:30:45:
                    d2:1c:7c:ef:00:4c:41:9a:95:55:2f:e8:b8:e8:fc:
                    6e:3b:51:b5:19:39:18:0b:f7:b9:3c:06:22:55:2e:
                    1e:86:41:cc:69:b0:36:db:01:29:10:33:c8:a4:ee:
                    a7:3a:fa:c2:46:d8:1a:2d:66:3d:6b:c4:94:9f:29:
                    1f:a2:ed:3a:5a:2e:10:7f:0a:dd:b8:05:cb:f9:bd:
                    0b:e8:ec:8a:fd:fe:da:b8:47:83:df:50:db:b2:bd:
                    46:3b:30:f6:6f:28:9f:dc:6e:ff:60:bf:15:71:75:
                    03:c0:aa:0c:91:98:83:fc:39:2f:f8:b3:f8:1b:bf:
                    35:44:28:0e:af:3c:6c:70:66:6e:27:cb:d3:89:68:
                    36:6c:5c:54:7a:f4:3a:c5:17:03:47:43:09:46:e2:
                    a3:8a:65:54:e2:43:e5:e6:7c:16:37:07:6c:a6:66:
                    49:0b:da:89:a2:a8:16:7a:32:e5:53:fc:57:4b:7a:
                    99:b6:d0:fa:9c:67:01:e3:e6:75:8d:e7:78:23:32:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:87:8F:EC:7A:E7:C7:5B:F5:FB:55:A9:60:59:A1:74:2B:B0:F2
            X509v3 Authority Key Identifier:
                keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32332d3233203d3e203539313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:d9:48:3e:3e:98:ad:2c:e3:ab:85:a9:a8:f3:74:35:04:
         ab:dc:fb:52:2e:ed:92:39:94:c8:c9:c7:9e:61:d8:f0:90:bb:
         4c:92:f7:15:2b:77:06:d1:c8:b0:89:1c:da:73:66:3a:d4:07:
         5e:a4:a2:70:0e:7d:dd:3c:8f:d8:ff:d9:03:c0:c8:5d:70:ba:
         2f:03:d1:68:34:1d:34:76:54:22:ef:2a:10:c3:83:2e:0d:bd:
         8c:66:1d:f1:ee:01:40:da:a7:08:f2:5a:cb:3a:b1:6d:90:70:
         09:1e:b2:13:93:ca:77:3b:16:a2:e2:d2:94:ed:38:e1:5e:50:
         fa:15:48:4a:24:4b:9c:d4:13:a7:dd:76:4a:41:d0:2e:e5:f6:
         28:d4:b0:6f:52:97:c9:6f:9f:26:bf:fe:c8:96:51:ff:77:7b:
         07:c2:97:cd:e9:70:ae:7c:64:db:90:2d:7c:27:17:b4:7e:98:
         c7:b5:dc:c3:b7:a3:c0:e2:90:15:3d:23:6b:7c:70:32:4a:d4:
         a1:59:27:eb:76:51:ea:82:6d:13:7e:4f:ed:f4:0a:3f:23:da:
         41:6d:93:9b:b8:b6:8d:0c:14:0b:06:49:2f:4c:30:d7:d0:a0:
         95:0d:a4:2f:18:2d:94:6e:fc:18:94:d0:fa:a5:11:14:51:28:
         58:fd:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:31 2026 by rpki-client