This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
File:                     3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (raw, json)
Hash identifier:          QaDcdq6N8G60VfVfn8Gce8C1GvuuPHrjO/8cVZCTT78=
Subject key identifier:   37:0F:9C:A0:BE:E2:BE:D7:92:B6:57:7E:2D:D4:74:F4:72:90:65:61
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       14D58A3CA50BD246C65E4FD619C36374BF032FDB
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
Signing time:             Fri 30 Jan 2026 07:00:00 +0000
ROA not before:           Fri 30 Jan 2026 06:55:00 +0000
ROA not after:            Fri 29 Jan 2027 07:00:00 +0000
asID:                     150480
IP address blocks:        103.49.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d5:8a:3c:a5:0b:d2:46:c6:5e:4f:d6:19:c3:63:74:bf:03:2f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Jan 30 06:55:00 2026 GMT
            Not After : Jan 29 07:00:00 2027 GMT
        Subject: CN=370F9CA0BEE2BED792B6577E2DD474F472906561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:c8:52:8d:1f:21:7a:63:21:25:d3:e1:38:
                    e8:d2:b6:cf:c4:c8:f9:2d:a7:74:cf:98:7a:d5:d0:
                    c8:7c:01:26:dd:91:30:00:2c:65:a6:e5:3d:38:6a:
                    c1:a6:85:29:1b:49:4a:4e:a0:d3:70:0e:81:27:5a:
                    38:c6:d9:85:9f:f5:b6:89:2a:13:bb:8a:1e:1c:08:
                    49:56:03:58:95:9a:22:e2:36:77:f5:dd:6e:83:5e:
                    84:07:87:98:86:f5:87:da:b1:cb:d8:3b:17:33:39:
                    0e:50:5d:90:85:56:99:a9:de:3c:b0:f1:b3:ff:5d:
                    a6:11:d6:80:91:52:21:6f:66:14:44:d2:90:7d:82:
                    b6:97:30:76:95:0e:fa:63:da:7a:19:f0:43:e3:46:
                    69:65:a3:1a:37:0e:db:4e:63:a0:f9:07:16:e2:07:
                    05:6e:29:2f:ea:45:9d:8c:37:89:57:02:8a:a5:94:
                    33:f8:a3:82:5a:85:98:08:fe:96:55:f1:58:0c:1c:
                    95:91:5d:bd:39:56:ea:2f:b8:7b:4a:70:e1:94:c0:
                    05:9e:c4:32:38:3d:a7:2c:51:9d:c7:bf:2f:28:8e:
                    05:a3:49:ae:41:c9:b8:88:6f:23:80:e8:60:17:db:
                    16:87:9a:21:f5:fa:c4:46:96:c0:fc:3a:8f:44:4c:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0F:9C:A0:BE:E2:BE:D7:92:B6:57:7E:2D:D4:74:F4:72:90:65:61
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:51:a7:d4:61:16:cf:23:c9:37:2a:5d:05:cc:32:ea:92:0c:
         91:ea:bc:fc:c9:d5:93:69:b0:bc:9e:a2:3d:b1:75:f4:29:5c:
         5b:16:de:1f:19:6d:b7:a2:a1:f5:9a:30:8b:7d:25:d1:10:47:
         9d:de:fb:26:c3:c8:84:43:0e:c9:3b:fe:59:14:82:12:27:e7:
         6d:15:e5:76:28:76:04:6f:12:71:1f:5e:18:dc:35:34:26:9b:
         e2:b0:ad:d3:3d:c5:70:7d:3a:fa:68:08:62:fb:bb:5e:65:91:
         16:b4:49:be:25:43:7e:08:a4:bd:a5:a6:dd:b2:01:0a:be:8a:
         0c:72:68:53:34:33:25:34:fc:9f:21:df:f8:c8:08:59:cf:63:
         16:b7:b2:5f:00:dd:57:b4:87:99:fa:1c:ad:59:9f:b9:6d:1b:
         91:08:c7:5d:28:d3:30:8f:1d:6d:40:a4:33:e9:06:34:19:bb:
         46:0d:89:da:d5:9d:20:ad:89:e7:6a:0c:dc:ac:d6:04:4e:0c:
         4e:6b:08:dd:b7:3b:e2:a3:30:18:3a:6f:8e:87:bb:c7:46:0d:
         c1:7c:58:aa:60:cd:a5:b1:f0:40:3f:53:32:6b:8d:9f:fb:ff:
         29:b9:22:eb:d3:40:80:a2:93:9d:42:70:7f:fe:0d:2d:93:24:
         22:c3:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:47:17 2026 by rpki-client