This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa
File:                     3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa (raw, json)
Hash identifier:          Q18iWCzyIgnJ03JWHzXheCWpGYNBjtSoC3dIdyCS6t0=
Subject key identifier:   E6:99:4B:59:69:EA:56:B6:BB:90:2B:A5:10:AF:82:A2:3B:32:BF:DF
Certificate issuer:       /CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
Certificate serial:       41A74C989A04F266A58F4E14248629AC6EC82320
Authority key identifier: 0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa
Signing time:             Thu 22 Jan 2026 08:00:01 +0000
ROA not before:           Thu 22 Jan 2026 07:55:01 +0000
ROA not after:            Thu 21 Jan 2027 08:00:01 +0000
asID:                     59147
IP address blocks:        103.252.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl
                          rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 22:54:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:a7:4c:98:9a:04:f2:66:a5:8f:4e:14:24:86:29:ac:6e:c8:23:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7BF2CE27D899D8E985DBD9311DF8B250C58581
        Validity
            Not Before: Jan 22 07:55:01 2026 GMT
            Not After : Jan 21 08:00:01 2027 GMT
        Subject: CN=E6994B5969EA56B6BB902BA510AF82A23B32BFDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:cb:1a:d2:cc:75:ea:0e:4c:c1:95:64:66:
                    0a:bf:ce:84:9e:a2:e4:4c:69:ec:1f:a6:1e:74:c7:
                    64:8c:50:e1:17:f8:13:ee:db:57:40:27:ed:06:9a:
                    6b:a6:1b:38:1d:1a:bb:db:29:9f:d6:00:0d:9e:36:
                    0c:d0:a7:f4:e0:f2:38:28:85:3a:76:df:9b:ad:4e:
                    cc:b0:14:16:b4:ca:df:77:94:fb:9a:6d:d8:71:40:
                    33:dc:70:1b:84:6f:b2:17:6e:a0:76:3f:2c:42:36:
                    fc:bd:c2:29:c3:f9:a4:70:b5:99:ba:0e:6e:33:d2:
                    89:d9:79:5f:34:92:18:55:a1:24:f5:dd:0f:85:a0:
                    63:dc:c3:e3:9a:e1:1a:e8:27:6b:d2:aa:cd:6b:34:
                    22:52:0c:4f:d5:cd:3a:98:47:6e:8f:8e:bd:04:1e:
                    ed:ca:c5:25:66:bf:1d:2c:7e:9c:8e:5f:49:81:8f:
                    c0:21:0a:c6:2f:75:75:3f:fb:de:7c:3a:f7:33:be:
                    c4:f5:90:06:59:7b:7f:68:76:f1:b4:74:80:09:dd:
                    e6:06:52:11:38:52:16:f8:19:2b:26:27:de:1d:0a:
                    03:81:f5:90:8c:1a:90:f9:cd:76:6e:39:f7:91:48:
                    2c:d6:50:bd:59:5d:5c:c0:c1:b8:a1:9a:b9:69:f2:
                    93:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:99:4B:59:69:EA:56:B6:BB:90:2B:A5:10:AF:82:A2:3B:32:BF:DF
            X509v3 Authority Key Identifier:
                keyid:0E:7B:F2:CE:27:D8:99:D8:E9:85:DB:D9:31:1D:F8:B2:50:C5:85:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E7BF2CE27D899D8E985DBD9311DF8B250C58581.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0c55034-5f36-4173-b64c-a975e323138a/0/3130332e3235322e3130302e302f32342d3234203d3e203539313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.252.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1e:ab:d5:6e:73:11:2c:8c:b6:32:91:8f:c8:50:c8:a5:6a:
         c1:5f:da:17:7c:65:3d:97:cf:52:d7:20:91:a0:fd:15:08:8f:
         1a:53:28:66:39:c1:49:81:4b:61:8d:fa:aa:86:32:89:dd:33:
         40:25:f3:bb:fd:0e:07:6d:fc:76:9d:77:3f:00:3d:e8:df:6d:
         6a:1f:0b:77:90:be:eb:4a:3a:32:46:c4:8d:b7:87:48:55:82:
         e7:be:10:c1:e8:27:0a:7d:f4:13:69:4d:16:48:69:bd:87:9b:
         21:34:eb:7d:85:1c:55:14:de:07:56:e4:bc:f6:97:16:42:71:
         fa:65:b8:ac:33:4b:b4:61:d9:62:1c:2e:33:79:02:76:37:4d:
         01:26:ab:c5:8d:90:23:1f:6f:49:75:a4:3c:ec:8e:97:08:45:
         79:26:b6:6c:d4:28:cd:3f:1f:d7:2a:10:17:e7:8b:9b:4a:ba:
         43:2c:b2:68:31:60:c6:cd:72:0f:62:cd:39:a7:e2:0c:cb:db:
         91:6b:3f:1b:20:6a:f3:6f:e4:74:46:1b:72:9e:52:a3:6f:48:
         a9:ad:4f:13:02:39:00:6a:50:f6:62:44:a7:0b:d1:19:09:88:
         5b:1e:9b:be:87:3e:f7:93:2f:c8:d6:ae:ad:68:08:93:14:2a:
         03:96:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:48:14 2026 by rpki-client