This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa
File:                     3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (raw, json)
Hash identifier:          w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=
Subject key identifier:   4A:4A:68:2F:1E:5B:F5:13:7D:52:27:6C:8F:8D:79:92:5D:C1:02:43
Certificate issuer:       /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Certificate serial:       0E3B4CC861540A304A22CE8B50289E4E12815686
Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa
Signing time:             Tue 06 Jan 2026 13:43:57 +0000
ROA not before:           Tue 06 Jan 2026 13:38:57 +0000
ROA not after:            Tue 05 Jan 2027 13:43:57 +0000
asID:                     139416
IP address blocks:        103.144.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl
                          rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3b:4c:c8:61:54:0a:30:4a:22:ce:8b:50:28:9e:4e:12:81:56:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
        Validity
            Not Before: Jan  6 13:38:57 2026 GMT
            Not After : Jan  5 13:43:57 2027 GMT
        Subject: CN=4A4A682F1E5BF5137D52276C8F8D79925DC10243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:5a:ce:16:8e:9d:e4:d4:db:1a:93:b0:3d:
                    e0:f4:30:97:f9:6c:88:a6:65:9a:b5:ea:37:25:5b:
                    38:a3:20:7e:71:4f:de:dd:af:ac:cd:a7:ff:90:80:
                    6c:27:7f:52:70:70:dc:3c:dd:fc:49:5b:ed:52:d7:
                    e8:c0:a9:2a:19:8f:84:40:ef:b7:dc:9a:e8:de:04:
                    81:09:69:72:b5:7a:05:6c:63:24:98:a1:21:8b:15:
                    66:a7:31:d8:b2:f5:d9:e3:2d:a6:48:cf:63:19:a2:
                    8a:97:80:90:2a:50:3b:68:50:b7:a1:0e:df:43:0b:
                    c6:2a:e4:cd:31:d0:76:50:22:cc:16:5d:cd:3c:44:
                    dc:cf:41:3e:c9:eb:89:5f:3e:35:73:21:37:a9:4a:
                    fb:44:18:32:c8:4d:1c:a2:0e:37:17:ed:2a:72:1b:
                    2f:84:2e:06:08:98:2c:46:7b:89:e0:ab:18:71:a7:
                    dc:c9:b5:1d:90:8d:4d:ad:32:4d:2f:8e:35:c1:cf:
                    86:81:ca:f4:2b:18:a4:84:95:fb:9e:f0:d2:ac:4c:
                    d4:20:0c:79:ae:4c:44:45:66:d3:36:1c:2e:54:f9:
                    64:a9:de:9a:1d:00:9f:01:a5:13:91:75:36:ac:93:
                    9c:72:dc:cd:29:07:2e:a2:66:31:29:a3:ac:7d:1d:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:68:2F:1E:5B:F5:13:7D:52:27:6C:8F:8D:79:92:5D:C1:02:43
            X509v3 Authority Key Identifier:
                keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:60:b9:a0:82:40:44:5a:51:aa:3b:be:42:28:54:cf:98:74:
         27:ec:26:67:65:26:49:6a:a6:bc:0c:91:f3:aa:b8:d4:42:ab:
         c2:4b:db:76:04:a8:89:ea:a7:0f:0e:2d:db:5b:9a:6c:05:a3:
         31:a2:2e:b4:89:bf:ca:fc:74:0b:01:4f:af:b0:3e:98:03:a5:
         cc:23:54:ad:30:aa:82:71:c5:a8:cf:31:9d:b7:76:06:05:36:
         6c:db:c3:57:ca:b8:9d:ce:87:3c:fa:be:57:57:8c:bb:b4:17:
         a6:92:6d:ea:c8:3d:dc:ec:99:0f:eb:1b:b7:1c:ef:e1:d3:08:
         cc:c8:38:ae:47:d3:ec:4b:6c:31:e5:0e:64:ca:cb:64:74:13:
         7c:4e:07:d7:db:26:3e:b9:b5:64:a2:73:e9:c3:5d:44:bc:0d:
         85:11:39:7e:b7:39:70:57:9e:b1:7c:9a:fa:76:fa:9f:0d:50:
         85:21:a3:26:e5:5f:fb:47:0e:b7:27:57:c5:be:8c:b1:9c:75:
         86:83:48:fa:01:3b:65:ad:4b:27:b0:d3:fc:8e:b2:60:47:9e:
         b9:ff:f4:b6:00:95:ab:18:53:af:65:ac:c0:cc:32:2d:c9:a6:
         61:dc:c0:3d:4d:89:14:70:71:8a:20:e7:84:e6:6f:d5:7d:13:
         60:0b:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:44:46 2026 by rpki-client