This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa
File:                     3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa (raw, json)
Hash identifier:          39SdZBT8G8X+WZ5lEwXOpRf3T2DX1nTTj3OeQb4f5Zk=
Subject key identifier:   81:ED:AE:96:45:E2:52:7A:CF:53:F0:F4:04:FB:5B:B0:43:00:54:8D
Certificate issuer:       /CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
Certificate serial:       15316700DFEF1410FD7590A8C185158E70CFC110
Authority key identifier: 8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa
Signing time:             Sat 03 Jan 2026 14:00:01 +0000
ROA not before:           Sat 03 Jan 2026 13:55:01 +0000
ROA not after:            Sat 02 Jan 2027 14:00:01 +0000
asID:                     139417
IP address blocks:        103.138.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl
                          rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 17:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:31:67:00:df:ef:14:10:fd:75:90:a8:c1:85:15:8e:70:cf:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6
        Validity
            Not Before: Jan  3 13:55:01 2026 GMT
            Not After : Jan  2 14:00:01 2027 GMT
        Subject: CN=81EDAE9645E2527ACF53F0F404FB5BB04300548D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:a8:85:c2:55:88:9b:fe:93:c2:4a:3a:42:
                    5d:cb:b5:8f:a7:79:ed:44:81:92:5b:02:2d:a3:f8:
                    e7:30:98:e0:db:ce:08:8a:6a:1b:ed:3b:2b:9c:ba:
                    11:e1:e0:e9:bc:12:d1:79:b4:2e:71:62:81:c0:36:
                    ec:60:46:d8:de:3b:f1:5a:45:53:94:ff:68:2d:b2:
                    a8:bf:98:ed:6d:71:a3:24:09:fd:32:75:4c:7f:56:
                    2a:17:d0:57:6d:48:fe:dd:8b:6e:dd:85:ab:55:d6:
                    9c:e3:5b:6c:1e:fe:7d:da:16:80:ec:f8:3e:48:7d:
                    6a:e4:30:c8:e4:9b:f8:6a:9a:5e:4b:93:ea:9d:b8:
                    51:b5:cc:12:3c:8e:3e:b3:d4:c1:9d:cf:3b:a8:dd:
                    d2:1d:73:2b:de:e7:fc:c5:f9:54:c4:4f:84:cb:4e:
                    b8:ff:f1:24:5a:68:42:30:a8:d0:c1:70:e8:7a:51:
                    21:44:34:86:c3:a1:f9:34:3a:ad:a1:6c:68:b9:eb:
                    fc:d1:da:d3:a4:12:aa:3d:b0:44:11:81:a2:cc:4c:
                    f7:4a:e6:75:f8:7e:c8:e7:5c:99:c9:65:0d:f8:0c:
                    dd:44:4c:56:23:dc:f7:ec:5d:4d:ab:1b:dd:c4:79:
                    49:bf:11:7a:b9:25:53:53:c4:e0:2f:c0:92:58:ac:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:ED:AE:96:45:E2:52:7A:CF:53:F0:F4:04:FB:5B:B0:43:00:54:8D
            X509v3 Authority Key Identifier:
                keyid:8F:C4:89:9C:A3:D6:12:A4:5C:1C:1D:C0:2A:21:F6:33:72:DA:ED:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FC4899CA3D612A45C1C1DC02A21F63372DAEDD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5413ff4-202b-4999-b45d-73c972f10116/0/3130332e3133382e3131372e302f32342d3234203d3e20313339343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:94:3b:1f:15:e9:d6:74:2b:c2:13:98:7b:56:6b:41:e0:
         09:6b:d3:5f:d1:3c:60:e0:e8:79:33:ae:89:6c:85:cf:9d:e5:
         0f:9f:ba:dc:f4:bb:7d:fc:4e:05:52:86:95:7c:d6:b8:9e:64:
         9b:12:c5:e2:08:f7:4a:7c:89:38:65:72:20:74:1f:f6:79:fb:
         6d:13:05:12:17:fd:c9:f9:79:81:46:a9:43:6d:21:6c:09:cd:
         9e:a7:23:6d:c1:9d:b2:b9:52:2a:cd:d1:3c:66:b1:f8:7c:57:
         71:01:8c:80:c4:9d:1a:26:70:cc:a3:6e:ca:15:cd:44:52:8b:
         d1:3c:67:63:af:16:ce:9f:a6:19:ea:09:64:6b:c5:a7:da:84:
         cf:9f:73:f6:21:aa:ca:fd:4c:90:4d:13:be:56:75:5e:7c:c7:
         ef:af:50:e3:35:43:64:4b:62:fc:74:de:59:f6:94:47:6e:84:
         84:2f:97:8e:a0:8b:7d:70:c1:9e:c7:7a:26:4c:e6:28:51:d1:
         81:c7:1d:19:d2:4c:76:b8:9f:17:8e:41:b9:0d:61:68:76:9c:
         0d:7e:09:0a:b8:50:69:0b:9c:4f:66:e0:dd:82:aa:8c:9e:92:
         2e:f7:2d:a4:0e:1b:a9:9d:31:91:de:3b:65:93:d3:45:04:fb:
         bd:92:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:59:22 2026 by rpki-client