This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa
File:                     3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (raw, json)
Hash identifier:          nRBlIqwYXob/oYKswh6G4394N7ssEKCORew/z/9Ka8w=
Subject key identifier:   A2:48:B6:94:30:E8:7A:CA:B4:40:A4:BC:42:33:FA:FB:CA:2F:A5:5A
Certificate issuer:       /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
Certificate serial:       0F546E42D5C1F82766400C56DD662DF5B87F4861
Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa
Signing time:             Tue 06 Jan 2026 15:00:00 +0000
ROA not before:           Tue 06 Jan 2026 14:55:00 +0000
ROA not after:            Tue 05 Jan 2027 15:00:00 +0000
asID:                     136054
IP address blocks:        103.80.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl
                          rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Jan 2026 14:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:54:6e:42:d5:c1:f8:27:66:40:0c:56:dd:66:2d:f5:b8:7f:48:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70
        Validity
            Not Before: Jan  6 14:55:00 2026 GMT
            Not After : Jan  5 15:00:00 2027 GMT
        Subject: CN=A248B69430E87ACAB440A4BC4233FAFBCA2FA55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:a2:f6:16:46:48:7c:98:a6:59:24:88:8f:
                    b9:3c:88:2f:c4:0a:e0:5a:26:0e:d7:42:15:5a:cb:
                    f3:e3:f5:db:d0:fd:3a:c9:d3:d0:8d:47:d1:fc:d4:
                    11:84:a0:56:86:96:07:61:70:84:8d:6b:27:66:71:
                    b5:e1:eb:02:2b:66:70:15:94:6b:b6:90:f9:a7:cf:
                    29:32:5f:2b:fb:01:f6:9e:4f:8d:96:c4:70:0f:86:
                    7f:49:31:78:a1:f5:6e:ac:9b:39:45:9c:22:8a:e5:
                    5f:fc:65:65:c1:b6:47:91:c6:cc:fe:9b:3c:cc:6d:
                    ab:e8:c7:ee:83:6c:93:1c:62:47:c9:85:50:a0:50:
                    f5:06:46:0e:f2:e8:24:8f:b1:ba:54:f1:c0:c3:39:
                    41:52:a9:2c:e9:15:30:88:41:58:dc:45:0d:73:75:
                    32:d0:b9:92:47:71:17:08:4e:fb:61:76:67:d4:d0:
                    9a:8b:c4:cc:eb:10:d3:34:4c:27:0f:b0:94:c0:8e:
                    15:99:a9:9e:e6:38:d5:92:7c:64:e8:94:f5:05:c4:
                    45:b9:87:f5:58:ff:9a:6e:9a:35:e2:fc:17:3a:c8:
                    4a:ac:fb:b7:28:33:d5:b9:ff:8f:74:8e:65:9a:07:
                    52:72:20:cc:53:54:32:c4:b9:d1:91:76:a4:62:91:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:48:B6:94:30:E8:7A:CA:B4:40:A4:BC:42:33:FA:FB:CA:2F:A5:5A
            X509v3 Authority Key Identifier:
                keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:73:cd:8e:89:50:aa:65:ac:fe:61:98:7e:bd:4b:59:9d:2a:
         29:55:69:9c:7f:ba:b2:25:05:58:b2:4c:ea:39:e5:0b:22:90:
         2d:67:9d:1f:4d:a2:c0:fe:25:22:4c:74:18:6b:db:7d:db:f1:
         a3:55:c6:bd:16:cd:89:f5:a4:98:16:b1:6a:0b:3b:90:e0:f3:
         d2:09:b5:2e:aa:78:cf:91:15:0a:c6:c2:43:67:fe:98:f1:9b:
         d4:7e:0e:c6:59:bf:e0:a0:ca:12:4e:aa:26:54:79:8f:d0:e0:
         95:19:2a:3f:e8:0b:f2:24:44:ce:78:34:0b:96:f9:87:b5:1f:
         44:f0:37:a7:f5:65:be:ed:b0:0d:f0:1f:d1:43:ea:34:ae:ba:
         95:b8:12:47:aa:c2:69:45:f8:b0:a2:dc:a6:2d:0e:1d:53:eb:
         37:b7:6d:14:df:47:f7:2e:b4:db:6d:b9:f7:fd:92:14:01:34:
         02:97:49:1e:4f:28:13:c0:dc:88:6b:34:94:4a:43:4c:e3:17:
         aa:bc:49:15:44:a4:84:31:2d:c4:38:8e:2e:b9:e5:5f:d4:f2:
         d8:4f:82:9f:6a:3f:35:a8:48:0f:ff:93:91:84:93:8b:a6:5c:
         c1:42:f5:d8:d8:45:96:38:67:73:33:4b:53:9a:1e:5f:0b:37:
         ec:8f:be:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:59:09 2026 by rpki-client