This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa
File:                     3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (raw, json)
Hash identifier:          /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=
Subject key identifier:   12:A1:A9:E5:2F:E0:0D:4E:B5:B9:D9:6D:81:01:BA:48:F1:4A:59:A9
Certificate issuer:       /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
Certificate serial:       26DA5A95ECEE0A53B023E24645A2F04AE2588E85
Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa
Signing time:             Sat 17 Jan 2026 05:19:34 +0000
ROA not before:           Sat 17 Jan 2026 05:14:34 +0000
ROA not after:            Sat 16 Jan 2027 05:19:34 +0000
asID:                     142310
IP address blocks:        103.168.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl
                          rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:da:5a:95:ec:ee:0a:53:b0:23:e2:46:45:a2:f0:4a:e2:58:8e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70
        Validity
            Not Before: Jan 17 05:14:34 2026 GMT
            Not After : Jan 16 05:19:34 2027 GMT
        Subject: CN=12A1A9E52FE00D4EB5B9D96D8101BA48F14A59A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:40:07:01:89:d2:3c:e2:0a:a9:c8:9e:26:4e:
                    ca:d4:34:62:3b:1e:60:73:50:76:99:3e:c3:04:d4:
                    6a:49:12:ba:1e:b5:8e:d0:fc:8c:4c:99:c7:f1:a5:
                    76:4b:2d:a1:95:25:1b:27:76:7a:f0:54:ab:76:b6:
                    b5:3b:89:53:52:de:e6:de:b4:10:89:6c:2f:73:b5:
                    f1:0f:41:eb:74:23:2f:08:3c:0a:38:f5:6c:a0:58:
                    83:b4:c0:e3:7e:79:a6:0b:b1:d3:fa:e7:ef:98:48:
                    02:2a:72:80:01:c9:49:67:16:e7:f8:7e:2e:f3:ae:
                    de:cd:99:fe:f4:12:f5:fb:70:06:44:35:56:6d:a8:
                    88:c2:49:be:e1:b3:7b:71:b5:b0:a5:06:83:ef:fe:
                    ef:fe:29:9c:05:8b:73:09:65:ae:60:f4:f2:31:4a:
                    17:50:20:47:ed:00:2d:06:16:c1:94:71:70:5a:f6:
                    1e:4f:01:bc:54:68:97:70:31:5e:a3:99:d5:60:4e:
                    0b:c6:f5:d7:d5:ae:c9:0c:63:05:a5:20:3a:32:92:
                    35:20:de:22:7d:9b:07:6e:ce:ae:dd:6c:85:e5:7c:
                    bb:6b:5c:e0:48:10:ce:5f:71:9d:f2:f0:09:d8:8a:
                    1a:35:b5:e5:bf:30:86:45:d1:36:98:04:22:bb:92:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A1:A9:E5:2F:E0:0D:4E:B5:B9:D9:6D:81:01:BA:48:F1:4A:59:A9
            X509v3 Authority Key Identifier:
                keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:f6:3f:c0:9d:eb:dc:0d:9a:ee:a7:fb:9f:0b:5a:4c:51:
         7a:f1:c1:bd:df:4e:17:c9:10:f3:e4:34:3e:c8:e8:fc:46:61:
         05:7f:ea:8a:77:31:d9:a6:3c:5c:dd:c2:35:9b:c7:d1:57:8d:
         26:79:bf:8d:c7:09:95:ea:e5:ed:95:ad:22:7a:aa:0b:d2:dd:
         5a:ea:37:e5:25:9b:c3:15:bb:e2:4c:9f:79:54:69:50:db:d7:
         bb:bb:3e:b2:b4:47:e8:5f:c4:0e:05:90:52:6f:82:c9:7b:17:
         10:c1:93:3f:d9:90:cf:61:70:7a:62:b7:c3:b2:74:9e:ad:36:
         95:c7:8a:1a:b5:05:92:d2:21:e2:ec:53:04:9c:02:17:12:ce:
         ae:f2:07:06:b3:26:06:2a:91:17:7a:3c:d2:d8:41:cb:a3:24:
         24:28:16:1b:75:44:ac:58:3b:b7:33:11:a7:04:e7:f6:7c:8a:
         af:7e:35:ee:a6:74:60:4a:87:b9:de:ca:5a:4e:30:ce:11:f7:
         d2:c4:0b:f9:6d:a4:ed:31:84:67:2f:ee:f2:46:5a:93:e9:3c:
         32:65:7e:6d:0a:31:bc:b3:d2:67:37:bf:5d:7c:9b:29:80:ab:
         36:85:03:a7:5c:47:1f:d3:98:cb:49:30:80:ad:f2:4e:d3:5a:
         3e:e8:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:35:04 2026 by rpki-client