This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa
File:                     3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (raw, json)
Hash identifier:          H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=
Subject key identifier:   C1:22:22:66:F2:82:A7:51:90:60:44:AA:90:B1:23:75:91:D8:D2:28
Certificate issuer:       /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
Certificate serial:       78714FE21B581CE7ECA071CEAED624E14C81E9A8
Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa
Signing time:             Mon 02 Feb 2026 04:02:35 +0000
ROA not before:           Mon 02 Feb 2026 03:57:35 +0000
ROA not after:            Mon 01 Feb 2027 04:02:35 +0000
asID:                     140481
IP address blocks:        103.154.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl
                          rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:71:4f:e2:1b:58:1c:e7:ec:a0:71:ce:ae:d6:24:e1:4c:81:e9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3
        Validity
            Not Before: Feb  2 03:57:35 2026 GMT
            Not After : Feb  1 04:02:35 2027 GMT
        Subject: CN=C1222266F282A751906044AA90B1237591D8D228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:e5:0a:09:ba:03:b3:5c:37:8e:3d:d0:8d:
                    c3:d4:e4:28:8f:06:87:2b:ff:03:13:ba:85:e9:72:
                    85:67:ca:79:86:66:eb:72:10:6b:9a:a4:09:72:9d:
                    6b:3b:ae:69:9b:3f:7a:7b:0d:7f:c2:5e:b4:c2:92:
                    39:0f:e3:86:c9:9c:c6:ff:4b:e5:82:88:f2:cf:fd:
                    cd:a1:8a:76:35:46:f8:38:c4:88:81:c5:87:8e:be:
                    47:b5:07:8c:46:c3:3b:9f:d1:1f:9b:9f:5f:39:dd:
                    9f:85:9a:f1:12:20:6b:e7:b7:eb:fe:41:b5:e1:87:
                    bf:c0:20:ec:7f:c6:95:29:58:c6:e8:1c:33:33:13:
                    ab:ff:db:56:18:81:ec:18:ad:3b:ca:d8:74:00:01:
                    65:fd:05:ac:87:14:70:15:48:20:99:af:32:a4:48:
                    99:9e:39:36:47:51:cc:29:4a:3d:5b:6d:8f:71:95:
                    ba:c7:b6:2f:f5:1c:21:74:ef:b4:c1:10:39:c2:66:
                    f3:59:f1:85:d5:f7:f6:21:f7:f6:7d:a1:27:2d:de:
                    58:61:59:60:8a:ca:36:a8:c0:d4:56:9f:c1:9f:d8:
                    43:9a:8c:d6:e4:9e:8f:48:1f:71:66:92:44:de:19:
                    ff:21:d3:f6:e0:27:64:8c:cc:72:ff:1c:c8:0a:00:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:22:66:F2:82:A7:51:90:60:44:AA:90:B1:23:75:91:D8:D2:28
            X509v3 Authority Key Identifier:
                keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:61:14:27:62:17:86:2e:17:ed:72:51:ef:dd:08:d6:20:1a:
         96:69:3a:b2:9b:ea:25:93:d1:a7:1e:04:51:39:7b:d8:ef:7b:
         fb:66:ec:bc:8d:84:ab:c1:12:ce:8b:0c:77:69:b4:93:d1:6a:
         85:ac:9e:09:fd:93:2e:c1:8c:5b:c0:29:41:d4:af:e6:31:e7:
         a2:3a:11:07:bc:67:45:c1:3d:30:43:92:83:77:c5:5d:78:13:
         85:76:a1:6b:8a:f1:f3:40:2e:81:8a:88:14:36:d3:4a:be:ba:
         5e:89:1d:9f:cb:bb:f4:6c:b1:9d:e5:b4:9c:05:58:6c:ef:07:
         2b:74:7c:55:f4:1b:d8:b5:38:ea:80:66:20:43:7b:a1:d4:1c:
         94:4c:ae:9f:ac:48:47:ee:54:f6:71:82:90:1c:06:e7:20:9e:
         ee:9c:f3:98:41:29:53:02:d6:7d:61:d6:cd:69:44:f9:41:cb:
         08:54:8c:84:76:8c:9f:5b:1b:5e:8d:71:31:d2:d4:67:a5:37:
         68:60:e3:cc:96:28:1a:9c:39:41:5d:07:e6:a8:e3:7f:83:d6:
         cf:08:0b:c0:01:1a:c3:1a:a5:a0:87:6e:c1:73:77:76:6f:78:
         72:a1:1e:68:82:d8:28:cb:1e:bd:f1:77:70:06:38:28:39:92:
         16:c5:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:39 2026 by rpki-client