This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
File:                     3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa (raw, json)
Hash identifier:          gtw/aKJ5GQlzn7U5EpxJJq4TSnweNLDzm5xumuJJptE=
Subject key identifier:   A7:81:DE:73:97:06:C9:2E:81:4A:69:45:95:16:88:13:F2:3C:BA:50
Certificate issuer:       /CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
Certificate serial:       3F226B1A3BA94ED0263A9C7DB21F3CFFD45200FB
Authority key identifier: 13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa
Signing time:             Sat 03 Jan 2026 03:00:01 +0000
ROA not before:           Sat 03 Jan 2026 02:55:01 +0000
ROA not after:            Sat 02 Jan 2027 03:00:01 +0000
asID:                     150921
IP address blocks:        103.196.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl
                          rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:6b:1a:3b:a9:4e:d0:26:3a:9c:7d:b2:1f:3c:ff:d4:52:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85
        Validity
            Not Before: Jan  3 02:55:01 2026 GMT
            Not After : Jan  2 03:00:01 2027 GMT
        Subject: CN=A781DE739706C92E814A694595168813F23CBA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:67:d0:67:a6:62:d0:40:1b:e2:6f:00:e9:
                    4c:41:59:f1:24:90:cd:70:7e:ce:f8:d9:f4:bc:ec:
                    43:09:e7:a1:1a:00:5f:48:d4:67:2f:2d:9d:eb:8f:
                    29:fd:07:cc:6d:84:19:ac:de:37:4d:a6:1b:a7:f9:
                    52:cc:be:ee:8f:32:d8:2e:a2:ec:48:71:4a:8d:b3:
                    65:6b:1a:e7:08:00:3e:69:5f:b6:5c:23:c8:22:3c:
                    f8:dd:90:12:fe:b2:31:48:d5:2a:6b:c4:b1:e8:ba:
                    aa:6a:7e:c2:73:51:de:d7:e3:7a:29:33:0a:27:96:
                    13:85:68:f6:5f:77:85:ab:79:4d:9c:e5:3d:ed:30:
                    91:bf:fb:eb:8c:e0:00:e1:4d:fb:65:fb:c6:e4:0b:
                    f3:64:d3:cf:6d:cb:7d:f9:91:7e:6a:00:6b:9d:40:
                    e2:66:07:10:c6:c3:3c:8b:12:ca:5e:e9:03:52:19:
                    ae:70:93:1e:6d:c5:ed:b2:6f:5a:d7:0e:a2:67:9b:
                    bd:0f:14:53:5b:74:13:02:6a:cf:10:e8:69:ec:92:
                    63:68:c3:d3:a9:70:c6:1c:71:27:9a:9a:04:e4:5d:
                    f1:88:84:e5:82:2b:6a:29:b1:3a:90:5b:fe:87:db:
                    82:3c:f9:de:46:f3:cd:5e:7e:6a:b9:ef:f3:9d:45:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:DE:73:97:06:C9:2E:81:4A:69:45:95:16:88:13:F2:3C:BA:50
            X509v3 Authority Key Identifier:
                keyid:13:4F:AD:F5:0F:30:6A:61:C4:DB:EA:14:DB:F9:B8:AF:F4:6C:8A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/134FADF50F306A61C4DBEA14DBF9B8AFF46C8A85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e90234fe-a715-43e5-8aa4-d979cd357d39/0/3130332e3139362e31352e302f32342d3234203d3e20313530393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:84:a8:7d:1d:01:b7:82:6a:73:8a:d7:f7:70:3c:60:d6:e6:
         8b:f8:7c:06:ab:7f:7a:2a:b6:44:89:a3:ea:56:40:60:d2:3f:
         f6:1a:16:d4:3c:fe:b3:78:eb:15:93:f2:05:9a:83:d1:2a:e1:
         ec:68:df:34:33:cf:24:91:3b:71:2c:aa:69:8b:c6:84:fb:2c:
         ed:3b:29:fc:0a:0a:e1:69:b6:d6:ad:53:4d:02:bc:e1:a6:7f:
         8d:c8:ed:42:bb:f7:1f:e1:de:4f:2e:e5:8e:46:7d:5e:49:3f:
         10:39:e3:f6:e8:98:45:4e:02:3c:d9:a2:e6:95:37:15:a2:22:
         77:92:5d:d8:1b:29:f4:c9:7c:dc:85:2a:07:1b:9d:64:92:7d:
         c9:42:a0:e6:f1:a0:0e:bc:30:de:f7:f6:a0:3f:89:97:cd:f0:
         e5:21:99:17:27:c0:12:72:99:b8:5f:37:58:7a:7f:36:54:5d:
         39:07:53:f9:dc:b1:6e:f3:6a:a3:d6:b6:37:9c:e8:ff:c7:23:
         ad:cd:63:ba:34:95:ba:7e:0a:2c:07:5a:f1:e6:3a:80:9a:a6:
         b3:e1:1b:ec:0e:ac:0f:dd:65:09:ca:00:33:2a:9c:2b:50:cd:
         17:f1:40:d8:a9:00:b0:5c:91:ab:e8:f6:6e:46:b4:d7:bf:34:
         a4:2a:03:d8
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPyJrGjupTtAmOpx9sh88/9RSAPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZG
NDZDOEE4NTAeFw0yNjAxMDMwMjU1MDFaFw0yNzAxMDIwMzAwMDFaMDMxMTAvBgNV
BAMTKEE3ODFERTczOTcwNkM5MkU4MTRBNjk0NTk1MTY4ODEzRjIzQ0JBNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9mfQZ6Zi0EAb4m8A6UxBWfEk
kM1wfs742fS87EMJ56EaAF9I1GcvLZ3rjyn9B8xthBms3jdNphun+VLMvu6PMtgu
ouxIcUqNs2VrGucIAD5pX7ZcI8giPPjdkBL+sjFI1SprxLHouqpqfsJzUd7X43op
MwonlhOFaPZfd4WreU2c5T3tMJG/++uM4ADhTftl+8bkC/Nk089ty335kX5qAGud
QOJmBxDGwzyLEspe6QNSGa5wkx5txe2yb1rXDqJnm70PFFNbdBMCas8Q6GnskmNo
w9OpcMYccSeamgTkXfGIhOWCK2opsTqQW/6H24I8+d5G881efmq57/OdRQ15AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUp4Hec5cGyS6BSmlFlRaIE/I8ulAwHwYDVR0j
BBgwFoAUE0+t9Q8wamHE2+oU2/m4r/RsioUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OTAyMzRmZS1hNzE1LTQzZTUtOGFhNC1kOTc5Y2QzNTdkMzkvMC8xMzRGQURGNTBG
MzA2QTYxQzREQkVBMTREQkY5QjhBRkY0NkM4QTg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTM0RkFERjUwRjMwNkE2MUM0REJFQTE0REJGOUI4QUZGNDZD
OEE4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MDIzNGZlLWE3MTUtNDNlNS04
YWE0LWQ5NzljZDM1N2QzOS8wLzMxMzAzMzJlMzEzOTM2MmUzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8QPMA0GCSqG
SIb3DQEBCwUAA4IBAQAdhKh9HQG3gmpzitf3cDxg1uaL+HwGq396KrZEiaPqVkBg
0j/2GhbUPP6zeOsVk/IFmoPRKuHsaN80M88kkTtxLKppi8aE+yztOyn8CgrhabbW
rVNNArzhpn+NyO1Cu/cf4d5PLuWORn1eST8QOeP26JhFTgI82aLmlTcVoiJ3kl3Y
Gyn0yXzchSoHG51kkn3JQqDm8aAOvDDe9/agP4mXzfDlIZkXJ8AScpm4XzdYen82
VF05B1P53LFu82qj1rY3nOj/xyOtzWO6NJW6fgosB1rx5jqAmqaz4RvsDqwP3WUJ
ygAzKpwrUM0X8UDYqQCwXJGr6PZuRrTXvzSkKgPY
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:04:21 2026 by rpki-client