This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          CguEl+Lysn/5KkRoQJibPhJwVyvdrOOvzPigdqH+W1o=
Subject key identifier:   D0:47:D8:BB:CB:21:B3:F2:E8:59:2E:A1:A8:34:83:3C:ED:BA:BF:EA
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       18FABBB9ECE3B54743C3EC84F1CC813A48DDAE95
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:30:17 +0000
ROA not before:           Thu 08 Jan 2026 21:25:17 +0000
ROA not after:            Thu 07 Jan 2027 21:30:17 +0000
asID:                     154410
IP address blocks:        103.175.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 23:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fa:bb:b9:ec:e3:b5:47:43:c3:ec:84:f1:cc:81:3a:48:dd:ae:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Jan  8 21:25:17 2026 GMT
            Not After : Jan  7 21:30:17 2027 GMT
        Subject: CN=D047D8BBCB21B3F2E8592EA1A834833CEDBABFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:a4:94:34:10:d3:ca:c0:9f:9f:b3:6e:41:
                    af:42:91:3f:df:c1:4b:26:8a:f7:0e:ef:6a:e0:a9:
                    21:cb:86:64:5e:aa:cf:65:c7:bb:a3:04:86:97:77:
                    eb:ee:80:3b:8d:38:bd:20:83:dd:52:00:a9:1f:41:
                    c9:c3:56:c4:16:54:d7:85:df:5f:6c:0f:3e:4c:56:
                    68:3a:9c:41:cc:5a:9e:59:9c:9a:b5:9a:77:37:2f:
                    fd:4f:69:73:02:79:2d:94:fc:b1:b3:9d:1e:72:cb:
                    b1:3a:db:2a:a8:42:19:5d:39:b8:4c:8c:b0:fa:06:
                    13:95:c1:35:f0:7e:2c:db:8f:dc:eb:b8:9a:f1:19:
                    a4:29:d5:28:6e:3f:82:9d:d4:66:fd:ac:ef:b4:22:
                    2d:2b:b9:61:c0:d8:ba:a0:e5:37:45:a4:fe:04:46:
                    ef:c0:c7:fc:73:8b:c5:25:5a:1a:58:e3:56:30:89:
                    2b:2f:6a:fa:e2:35:8a:db:c5:1a:09:53:4a:2c:7c:
                    31:a5:e7:cd:73:0a:09:23:4e:72:d0:8a:b3:ef:de:
                    51:bd:37:97:7c:70:2e:02:fa:5a:cc:e5:ca:c7:97:
                    32:c5:49:4e:f5:64:52:03:f8:1b:40:e9:4e:59:af:
                    79:32:7b:43:28:ae:13:ef:31:fa:66:61:a8:b0:24:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:D8:BB:CB:21:B3:F2:E8:59:2E:A1:A8:34:83:3C:ED:BA:BF:EA
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:72:c4:c5:15:63:4b:d8:21:56:bb:48:c4:27:72:ff:5d:52:
         07:b9:e7:e1:4f:84:04:54:49:46:19:52:ba:a4:d9:4c:17:e9:
         de:eb:cf:9d:57:dc:49:7f:4d:c6:c3:fb:b4:25:d8:c4:53:8c:
         1c:fe:df:ec:18:08:40:c4:be:bf:70:4f:da:a6:f5:d2:7f:21:
         5d:34:61:1e:62:d4:f9:0e:d5:8a:47:d5:c8:ed:41:0a:56:cb:
         48:a3:4a:26:a5:ad:ae:c9:07:b9:eb:98:fa:e1:28:af:f2:48:
         96:bf:16:4b:e6:8a:95:60:6b:f1:20:6c:bf:fa:95:e7:7c:4a:
         18:de:e4:ac:df:08:d1:0f:c4:57:87:4b:f8:ee:a3:13:42:fe:
         d0:32:d8:72:a4:7a:58:78:64:b0:06:9c:30:93:6a:c9:88:f3:
         91:0b:88:9c:46:87:84:c4:6c:89:96:3d:de:8e:ac:86:c4:c7:
         e2:10:8d:3f:1c:fa:6a:2c:dd:c9:9d:79:03:d0:c9:86:90:c4:
         d8:7a:42:fa:77:e6:79:84:7e:3d:02:83:22:f4:09:eb:65:dd:
         15:f3:23:2c:94:af:39:b9:0f:59:9b:d2:d7:bb:99:13:2d:d0:
         26:fd:21:56:1f:19:3b:a0:ff:b1:55:50:f3:c0:bd:cb:fd:a2:
         f4:26:9f:77
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGPq7uezjtUdDw+yE8cyBOkjdrpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4
QTA1MjVBMTAeFw0yNjAxMDgyMTI1MTdaFw0yNzAxMDcyMTMwMTdaMDMxMTAvBgNV
BAMTKEQwNDdEOEJCQ0IyMUIzRjJFODU5MkVBMUE4MzQ4MzNDRURCQUJGRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y6SUNBDTysCfn7NuQa9CkT/f
wUsmivcO72rgqSHLhmReqs9lx7ujBIaXd+vugDuNOL0gg91SAKkfQcnDVsQWVNeF
319sDz5MVmg6nEHMWp5ZnJq1mnc3L/1PaXMCeS2U/LGznR5yy7E62yqoQhldObhM
jLD6BhOVwTXwfizbj9zruJrxGaQp1ShuP4Kd1Gb9rO+0Ii0ruWHA2Lqg5TdFpP4E
Ru/Ax/xzi8UlWhpY41YwiSsvavriNYrbxRoJU0osfDGl581zCgkjTnLQirPv3lG9
N5d8cC4C+lrM5crHlzLFSU71ZFID+BtA6U5Zr3kye0MorhPvMfpmYaiwJEJ5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU0EfYu8shs/LoWS6hqDSDPO26v+owHwYDVR0j
BBgwFoAU4BTm7QNTfkU1ZdBue4oxqooFJaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMC9FMDE0RTZFRDAz
NTM3RTQ1MzU2NUQwNkU3QjhBMzFBQThBMDUyNUExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAxNEU2RUQwMzUzN0U0NTM1NjVEMDZFN0I4QTMxQUE4QTA1
MjVBMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjI5Mzc4LTQ1ZjAtNDlkMy1h
NmFmLTU3M2JlN2RjYTZkMC8wLzMxMzAzMzJlMzEzNzM1MmUzMzM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNTM0MzQzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ68mMA0GCSqG
SIb3DQEBCwUAA4IBAQAXcsTFFWNL2CFWu0jEJ3L/XVIHuefhT4QEVElGGVK6pNlM
F+ne68+dV9xJf03Gw/u0JdjEU4wc/t/sGAhAxL6/cE/apvXSfyFdNGEeYtT5DtWK
R9XI7UEKVstIo0ompa2uyQe565j64Siv8kiWvxZL5oqVYGvxIGy/+pXnfEoY3uSs
3wjRD8RXh0v47qMTQv7QMthypHpYeGSwBpwwk2rJiPORC4icRoeExGyJlj3ejqyG
xMfiEI0/HPpqLN3JnXkD0MmGkMTYekL6d+Z5hH49AoMi9AnrZd0V8yMslK85uQ9Z
m9LXu5kTLdAm/SFWHxk7oP+xVVDzwL3L/aL0Jp93
-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:01 2026 by rpki-client