This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          6lkF35ri6uYPakCCX2pr0zjkUKU+eMFqvXgf24o+vlE=
Subject key identifier:   44:D3:16:A7:8B:24:51:E3:CB:A8:7F:B8:21:A5:FD:C8:A5:8C:10:E0
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       68B3D81184CB7F03CAA4484266CAACF8F3EA1E9F
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:32:39 +0000
ROA not before:           Thu 08 Jan 2026 21:27:39 +0000
ROA not after:            Thu 07 Jan 2027 21:32:39 +0000
asID:                     154410
IP address blocks:        103.175.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 23:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:d8:11:84:cb:7f:03:ca:a4:48:42:66:ca:ac:f8:f3:ea:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Jan  8 21:27:39 2026 GMT
            Not After : Jan  7 21:32:39 2027 GMT
        Subject: CN=44D316A78B2451E3CBA87FB821A5FDC8A58C10E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:01:fb:c8:4f:c4:0b:dd:69:46:58:92:4b:bc:
                    6a:32:84:f2:d9:40:1e:eb:da:43:67:9b:88:b3:93:
                    f4:93:ad:9c:b7:6b:12:f4:2f:17:23:9c:07:a0:1a:
                    d8:37:39:b9:7b:91:f0:80:3a:ab:2e:46:f9:6d:4e:
                    da:fd:1a:f5:21:42:4b:8f:0e:f0:95:76:0a:d7:66:
                    1b:30:d6:0f:ba:fb:b2:55:06:3b:2b:9b:db:ec:d8:
                    ce:ee:2e:fd:a8:09:dc:bf:53:15:72:63:c1:db:f1:
                    eb:5c:37:24:61:f2:13:e4:94:8f:9f:5a:81:45:fe:
                    14:25:f8:9d:c4:54:d3:22:b1:6b:00:fe:af:c2:56:
                    ee:63:ba:e6:99:d4:a5:64:32:5f:73:01:e0:3d:82:
                    e3:d6:cb:28:8b:fd:6c:49:12:6a:0a:aa:ba:90:9e:
                    2e:1e:8c:c3:59:d1:5f:ce:d5:d5:9f:51:65:d7:69:
                    3c:11:7d:21:16:b1:8f:a3:a6:ad:ed:b5:72:ea:ae:
                    ff:39:0f:32:92:03:bd:a5:dc:37:e2:f7:80:74:32:
                    54:a4:f8:44:78:a3:0b:10:fc:5f:23:fe:e6:ae:86:
                    33:5d:41:4b:de:9e:eb:84:56:56:f7:ec:1e:55:27:
                    9c:56:45:e6:47:22:c4:e1:c4:36:a5:93:fa:ba:25:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:16:A7:8B:24:51:E3:CB:A8:7F:B8:21:A5:FD:C8:A5:8C:10:E0
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:02:79:b0:13:53:9c:a6:fa:99:30:ce:e2:74:e8:60:60:
         94:80:e7:b0:e7:cf:71:a4:17:f3:d1:2f:e1:49:17:62:d8:84:
         f3:4f:4d:44:29:5a:60:44:97:39:ae:0a:b2:d6:8e:10:fe:b7:
         17:38:fb:d5:a1:8a:42:b2:2d:aa:39:52:ea:99:72:79:be:62:
         4c:8f:db:ea:4a:8d:0a:65:fa:76:a2:d8:e7:0d:e1:b6:d7:dc:
         d5:c5:b8:0a:9d:6c:50:ab:36:d7:55:fa:08:1e:b1:79:e6:1b:
         97:62:38:0c:20:af:23:c4:c7:34:57:f2:38:44:15:1e:71:cc:
         47:ff:9b:03:c8:ef:d1:49:a4:d1:ca:22:84:6a:d8:83:e4:4c:
         12:1e:a3:ac:3f:93:25:d6:c6:47:26:69:b7:85:78:7f:c4:fa:
         2d:f6:c2:8d:47:c1:b5:62:82:8b:e4:9f:60:d3:e8:1e:a9:5d:
         a3:39:e6:ed:5b:fd:7f:a0:96:4b:92:15:52:d9:41:80:39:df:
         57:cf:0f:81:fd:09:50:30:07:e8:eb:d1:77:e7:44:78:84:f6:
         d4:b7:c8:90:f4:43:59:a9:cd:0e:94:75:7b:2a:c1:40:ad:2c:
         28:17:6b:ed:50:21:61:53:68:66:19:c9:c7:c7:6e:19:75:d7:
         ae:d5:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:00 2026 by rpki-client