This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
File:                     3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (raw, json)
Hash identifier:          YYnSVH0s4DjSEyWcGqkNP3J7ej8/N95y0I96Ya7UVn0=
Subject key identifier:   06:F1:53:E5:19:70:02:16:FE:45:42:42:9B:28:31:C7:32:B6:38:B9
Certificate issuer:       /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
Certificate serial:       02EB54F86B145DBACD3DF0F6DFE1A8C24329F880
Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
Signing time:             Tue 30 Dec 2025 15:31:38 +0000
ROA not before:           Tue 30 Dec 2025 15:26:38 +0000
ROA not after:            Tue 29 Dec 2026 15:31:38 +0000
asID:                     139980
IP address blocks:        103.132.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl
                          rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 07:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:eb:54:f8:6b:14:5d:ba:cd:3d:f0:f6:df:e1:a8:c2:43:29:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A
        Validity
            Not Before: Dec 30 15:26:38 2025 GMT
            Not After : Dec 29 15:31:38 2026 GMT
        Subject: CN=06F153E519700216FE4542429B2831C732B638B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:25:1f:d0:0f:c3:d2:ee:88:58:65:15:57:9b:
                    bd:5e:e1:d0:70:42:e6:af:54:6a:de:e2:48:8b:f4:
                    e6:d8:c2:ac:39:49:34:f7:3f:50:78:42:21:f0:53:
                    c1:db:42:f9:b6:26:32:4c:69:ec:9b:57:dc:bc:7c:
                    6e:74:5a:6b:80:66:6d:9c:2c:cd:d0:e6:83:7b:2f:
                    2b:66:1f:e8:da:3a:cc:6b:5e:a3:06:f4:dd:9a:28:
                    6f:5b:c7:c0:b8:46:56:0f:a8:36:90:f3:02:59:a3:
                    53:e6:a4:55:2a:41:13:a2:03:9c:65:a6:b4:44:fb:
                    6c:6b:62:53:20:d8:23:7d:12:95:58:15:57:1a:86:
                    ee:cc:c3:d8:ea:0d:57:9f:f1:f4:cb:36:4a:4c:60:
                    f3:61:ba:0e:9b:db:3e:3a:d9:2a:b4:c6:d0:27:01:
                    75:e3:a6:c3:c1:c8:cd:4e:ca:c8:3d:e7:0e:3f:71:
                    d8:8c:ae:9e:15:c9:5a:a2:d0:28:0f:35:0d:b8:8f:
                    eb:4d:22:f6:d5:20:0e:87:1c:b2:3e:c5:47:0a:00:
                    3c:97:c3:7b:ae:96:21:a5:30:43:f7:18:40:0b:48:
                    e9:f2:db:2a:dd:b0:02:d8:a8:5b:65:1a:e9:bd:10:
                    91:fb:74:aa:05:c0:03:c7:19:01:d6:04:30:2b:89:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F1:53:E5:19:70:02:16:FE:45:42:42:9B:28:31:C7:32:B6:38:B9
            X509v3 Authority Key Identifier:
                keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:16:ee:bd:ca:03:d4:7e:34:44:23:f1:bd:4e:81:9d:01:d1:
         32:35:68:c2:f3:d1:18:80:11:66:3d:a9:0e:f5:3c:c8:9d:72:
         0d:c3:91:7d:87:c6:8c:3f:42:25:68:df:1c:df:b1:4a:af:5a:
         83:bd:c4:6f:b8:96:99:40:4c:04:cd:f0:f5:27:e2:74:9e:1e:
         e1:eb:d1:a8:af:df:4c:68:f2:f4:84:68:ca:f3:1f:ba:56:36:
         7a:83:25:f1:5d:b9:68:48:9c:af:89:56:b8:78:0b:7d:a6:f4:
         da:d0:a2:6d:7f:e2:07:40:0f:45:fb:f5:72:b0:f2:4e:92:cc:
         01:9e:65:92:25:ca:68:76:e8:ab:ed:34:1d:8f:15:ee:a9:88:
         ca:b6:6f:7d:24:c2:3e:20:ed:6c:52:ba:cb:0b:18:1c:40:2c:
         a4:79:78:3b:3e:8d:f3:96:52:21:35:e7:27:e6:84:c0:b1:ac:
         dc:b5:a4:55:d6:cc:02:fc:30:41:09:1a:c5:a6:8f:8b:81:4b:
         7c:7c:67:84:1f:ee:e8:99:0a:00:f1:2c:0c:5f:87:42:fd:53:
         25:3b:63:16:57:84:84:c4:75:f7:f9:f2:7e:d1:ce:6b:d6:8a:
         d2:49:2d:ed:01:5e:89:7f:0d:71:99:1a:fb:4c:e9:4e:fc:90:
         4f:c6:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:57:01 2026 by rpki-client