This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          r3WK8CrHgCN8V7Zn9QuD1b2cQJfP1EGB1oRF8Yw67HM=
Subject key identifier:   4F:42:67:D3:AE:59:85:42:20:84:FE:F0:24:A3:D9:B4:63:C1:34:78
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       477E55622FF7BF15D2F3C4317FC6A0E8A448F07E
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:32:51 +0000
ROA not before:           Thu 08 Jan 2026 21:27:51 +0000
ROA not after:            Thu 07 Jan 2027 21:32:51 +0000
asID:                     154410
IP address blocks:        103.175.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 23:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7e:55:62:2f:f7:bf:15:d2:f3:c4:31:7f:c6:a0:e8:a4:48:f0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Jan  8 21:27:51 2026 GMT
            Not After : Jan  7 21:32:51 2027 GMT
        Subject: CN=4F4267D3AE5985422084FEF024A3D9B463C13478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:44:1c:ae:3f:72:75:7c:de:6a:2e:89:6b:
                    a8:ec:de:52:73:bc:00:93:7b:03:0e:39:68:c5:22:
                    0a:53:15:0f:25:53:3d:f2:7b:bb:55:7a:cf:ad:4b:
                    5c:1f:55:3a:06:ba:96:e0:a9:3d:a2:01:69:30:e6:
                    48:0d:29:2f:17:db:d4:a2:77:1c:82:f5:bf:d2:de:
                    05:a5:04:e0:cb:63:22:e7:ad:a2:25:5a:47:8a:b0:
                    8d:fa:d3:12:0b:a5:04:5f:64:52:46:1f:05:ef:a1:
                    7b:e7:0e:33:a7:a8:2e:72:e6:d8:1e:19:90:ad:99:
                    60:25:4a:0e:ad:af:ca:f3:92:c4:94:29:57:f2:73:
                    58:7f:15:e3:ca:9c:dd:93:72:5b:47:15:99:92:fa:
                    3b:65:58:f2:ce:7c:b7:20:67:39:e4:3a:14:c2:70:
                    7d:38:7d:3f:c5:c7:a3:4b:31:f6:4e:3d:3e:01:8b:
                    0f:a6:3c:9e:4c:66:83:bc:36:17:91:5f:92:9a:65:
                    c6:b1:94:3a:ca:ed:01:d0:b2:99:05:76:b0:00:76:
                    07:35:da:51:42:a8:f5:c2:6a:cd:99:ab:dc:13:81:
                    6b:b4:6b:29:dd:a7:c9:9b:6e:eb:00:4c:c7:12:55:
                    6e:05:56:31:e8:af:7c:3f:d1:e6:dc:86:6f:28:d5:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:42:67:D3:AE:59:85:42:20:84:FE:F0:24:A3:D9:B4:63:C1:34:78
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33392e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:0f:ef:5f:95:e0:d6:07:3d:90:28:b2:e8:ec:11:57:6c:
         5e:77:f7:ac:71:e2:3a:da:e2:e7:62:94:fa:2f:35:4a:e1:70:
         0f:43:f5:43:10:c6:8c:80:10:42:22:97:86:d6:90:ba:94:a4:
         26:e9:90:d1:ff:69:03:12:81:95:e9:82:e6:e0:da:09:5d:c5:
         bf:0b:8a:19:d1:6b:de:dd:ce:a4:a2:e4:a7:5e:f5:28:7d:4c:
         d8:2c:ed:03:f3:76:e4:b2:75:b1:ed:e3:1e:ad:72:68:43:26:
         3e:a7:de:39:a3:c8:c6:62:8e:00:a6:43:1a:c3:85:05:ab:4f:
         4e:0f:c4:00:0a:52:cd:eb:74:ee:71:29:ce:00:d1:d8:fc:d0:
         db:bd:94:29:c5:9f:4a:89:d0:f1:f3:dd:7b:a8:88:3b:2c:3d:
         24:a5:55:48:55:4c:20:14:f7:22:9c:d5:19:5a:c7:71:28:70:
         49:37:db:d7:7e:e3:1f:9f:1e:e8:3e:a9:2b:d5:90:fd:2b:74:
         ad:95:22:09:7e:2c:79:80:f4:3f:58:58:9d:23:54:ec:3a:96:
         51:34:c3:7b:da:dc:96:3b:98:3c:b0:0f:a0:4e:46:8d:a4:b8:
         f7:cc:2f:58:e4:df:ac:4f:87:72:2f:19:ce:5c:bf:f6:69:a8:
         6e:2e:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:00 2026 by rpki-client