This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa
File:                     3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa (raw, json)
Hash identifier:          urXrJr87j5ESWIdZUyyvVpbnNMIBrCPErU0W2IQsIAY=
Subject key identifier:   85:60:C6:63:72:76:9D:31:42:44:58:4D:6D:6D:96:53:E2:32:D5:96
Certificate issuer:       /CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
Certificate serial:       672300A9B023F3B64610DF1FF222526416AD7105
Authority key identifier: 6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa
Signing time:             Tue 06 Jan 2026 17:00:01 +0000
ROA not before:           Tue 06 Jan 2026 16:55:01 +0000
ROA not after:            Tue 05 Jan 2027 17:00:01 +0000
asID:                     137373
IP address blocks:        103.120.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl
                          rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:23:00:a9:b0:23:f3:b6:46:10:df:1f:f2:22:52:64:16:ad:71:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B647F696A9BB5C718605E8922BEF1BEE566F94E
        Validity
            Not Before: Jan  6 16:55:01 2026 GMT
            Not After : Jan  5 17:00:01 2027 GMT
        Subject: CN=8560C66372769D314244584D6D6D9653E232D596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:83:89:5b:25:a2:cb:d1:55:47:b6:d5:43:
                    45:70:0a:39:be:2e:f0:20:3f:40:c1:ec:4c:da:bc:
                    32:82:e2:77:68:a1:c4:f3:dd:e9:53:31:bf:e0:52:
                    c8:7d:76:b9:6e:df:0b:3b:77:87:f8:76:9b:8c:1b:
                    e0:c4:9e:99:4d:5c:91:d4:81:83:c8:9c:cf:cc:0e:
                    13:98:dc:c4:12:d6:f3:c6:f6:6e:e1:09:49:ea:e9:
                    04:70:85:33:76:ae:24:34:a4:b5:5c:ce:6f:11:47:
                    4a:a0:24:70:07:54:66:16:c1:ef:f7:8d:70:94:e4:
                    57:5f:03:1c:42:3a:5c:04:7c:78:a4:b7:dd:25:ac:
                    95:f3:30:01:05:75:45:82:40:80:3b:13:99:85:89:
                    8c:70:10:9c:7a:6e:86:24:7b:14:17:f9:3a:bb:ce:
                    73:7f:9a:94:ec:3e:9b:2a:ca:81:e9:bd:a7:f9:e8:
                    3b:b2:2d:f5:37:46:6b:f4:c6:22:42:b9:b0:c3:f8:
                    26:79:12:6f:13:62:6f:ef:5b:b9:3c:2e:8d:cf:ef:
                    2c:98:53:2e:7f:3e:ed:c2:f2:7c:c3:d2:a1:13:b9:
                    b4:57:b6:ad:11:5d:33:54:50:c5:b7:b2:e6:5a:2e:
                    72:eb:63:75:ae:c3:d5:17:9b:89:40:7d:e7:cc:e1:
                    c3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:60:C6:63:72:76:9D:31:42:44:58:4D:6D:6D:96:53:E2:32:D5:96
            X509v3 Authority Key Identifier:
                keyid:6B:64:7F:69:6A:9B:B5:C7:18:60:5E:89:22:BE:F1:BE:E5:66:F9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/6B647F696A9BB5C718605E8922BEF1BEE566F94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B647F696A9BB5C718605E8922BEF1BEE566F94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e86e46ec-df5c-4b4d-a30e-10b2c688c2fc/0/3130332e3132302e36362e302f32342d3234203d3e20313337333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:b0:f3:6f:fc:2c:68:23:f3:74:e3:47:ed:79:6e:c5:9f:
         48:cc:7a:70:dc:f5:b8:a0:52:16:4d:db:4e:43:36:4d:84:da:
         80:59:13:21:0d:3c:ac:58:0c:cf:64:57:d2:cf:66:bc:5d:03:
         45:93:5f:cd:77:9d:1d:72:24:ac:b2:7c:1e:3f:5b:5a:b1:90:
         d5:b9:7b:3f:cd:4f:2c:24:22:3a:1e:ac:4c:40:b5:4f:73:0f:
         d6:88:5b:37:dc:a6:45:7d:75:a6:5d:93:7c:c2:f5:f2:ee:38:
         2d:5f:d3:e0:94:cb:93:92:b6:02:ca:6c:be:17:44:de:67:02:
         82:53:67:8f:e9:81:1e:f4:9e:b4:e8:48:6d:d2:23:24:2c:e8:
         bd:9b:3b:69:44:88:8c:70:63:6d:fe:94:4f:8a:65:27:77:40:
         63:47:fb:1f:89:fe:52:15:99:c3:bf:63:43:7a:6b:ae:8b:f7:
         0d:b2:5a:da:d6:8e:cf:1e:23:09:5f:93:6a:cc:31:07:9a:5a:
         39:20:0b:b2:e6:8a:5c:95:d4:0d:a0:1b:42:15:ef:d0:ff:f2:
         58:6b:78:f1:54:34:39:67:f5:bc:e8:1e:c4:8d:be:d0:89:4f:
         bd:b6:ac:d9:42:e8:1d:b7:45:63:ce:41:63:96:56:59:76:43:
         98:43:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:45 2026 by rpki-client