This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35312e302f32342d3234203d3e20313530343830.roa
File:                     3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (raw, json)
Hash identifier:          SmM4mYg5qX3DKk4SmFEHZwLHzjGeZ9J+aWfv6Lp7DCw=
Subject key identifier:   4B:28:64:FD:E4:34:A5:52:AD:D9:6C:8B:6B:E2:81:CB:2F:DA:D8:0B
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       54920F854A5531D871D79C1923959ACA1D29D611
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35312e302f32342d3234203d3e20313530343830.roa
Signing time:             Fri 30 Jan 2026 08:00:00 +0000
ROA not before:           Fri 30 Jan 2026 07:55:00 +0000
ROA not after:            Fri 29 Jan 2027 08:00:00 +0000
asID:                     150480
IP address blocks:        103.49.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 23:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:0f:85:4a:55:31:d8:71:d7:9c:19:23:95:9a:ca:1d:29:d6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Jan 30 07:55:00 2026 GMT
            Not After : Jan 29 08:00:00 2027 GMT
        Subject: CN=4B2864FDE434A552ADD96C8B6BE281CB2FDAD80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8a:76:0c:ea:02:97:60:1a:2a:9d:b8:9f:6b:
                    b4:12:31:75:57:15:15:79:fc:2b:4d:e7:85:df:18:
                    96:cf:87:79:d9:68:b1:39:1c:5d:08:9d:7a:62:cf:
                    1c:c8:df:24:52:92:31:74:4f:2f:c7:eb:8d:c9:4d:
                    9c:9c:5d:64:05:e9:57:9c:2b:64:94:79:79:9a:af:
                    02:e4:a6:88:12:df:d6:8a:7b:f0:3f:a8:01:8e:6b:
                    2c:ec:59:44:f5:36:67:57:04:84:99:27:d8:f2:29:
                    dc:70:79:b8:16:d4:0b:48:e6:ad:d3:d7:3f:c6:d6:
                    b5:b8:0c:53:97:a6:8b:bb:55:d5:8f:1c:6b:3e:76:
                    0b:29:a1:56:38:9a:0e:ab:0e:e0:54:1f:8e:0f:80:
                    e6:1e:67:2a:89:33:99:d3:7e:ae:84:49:a5:43:fb:
                    74:8c:af:06:9d:8a:fe:30:1d:f9:d6:30:60:04:12:
                    f3:b8:d0:ff:ac:20:e6:2e:b2:5f:60:63:84:0f:8d:
                    19:bd:f8:50:a9:38:b9:ca:89:d5:58:23:da:63:7c:
                    f9:1a:78:c4:88:87:85:18:82:7c:1e:6a:b3:8b:8e:
                    d8:ac:a1:9c:3f:cc:3f:0b:a9:68:2e:b2:35:46:8a:
                    26:45:97:f1:23:71:da:9c:5c:7c:66:45:3b:a3:e8:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:64:FD:E4:34:A5:52:AD:D9:6C:8B:6B:E2:81:CB:2F:DA:D8:0B
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35312e302f32342d3234203d3e20313530343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:86:b6:de:ca:22:90:96:8a:80:f5:66:f8:13:e3:e6:0e:77:
         06:16:f3:74:bd:42:34:35:1d:de:81:62:46:25:99:26:14:f5:
         41:cc:9a:2d:d9:71:6e:86:6f:59:ec:46:8b:1e:cc:70:b8:fd:
         78:0c:88:a3:27:f4:79:10:79:9c:50:85:3a:dd:13:53:31:01:
         3d:6f:67:98:aa:92:83:c2:56:6b:45:0f:6f:a5:10:c7:3d:46:
         b9:6d:4c:34:83:78:a5:dd:1c:c8:67:8c:64:bc:dd:80:ef:0e:
         47:01:37:57:f7:44:26:92:e2:ae:a7:07:63:f3:8c:2f:9a:55:
         9c:70:14:0d:2d:e5:35:75:22:8b:81:a5:d5:63:09:a1:a1:9d:
         08:d5:4e:79:de:74:49:34:ea:28:b9:c3:b3:67:0e:bd:98:a8:
         03:fb:a1:a2:6c:77:8d:bf:f2:8f:62:e8:ec:7e:45:15:b0:96:
         40:71:6e:b5:6c:3d:8a:11:35:d1:24:56:89:d6:d5:27:72:d5:
         63:09:54:18:64:08:8d:f2:6c:4b:b3:aa:f4:c8:62:7e:4e:94:
         5e:3f:e2:a2:d1:b4:45:0a:a2:ef:0a:28:ab:6b:ef:56:02:e7:
         1f:c6:94:25:05:20:35:86:f5:b7:5b:9f:b6:f6:1a:95:5a:bc:
         ec:a2:b8:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVJIPhUpVMdhx15wZI5Wayh0p1hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3
MDYwRDE5NTAeFw0yNjAxMzAwNzU1MDBaFw0yNzAxMjkwODAwMDBaMDMxMTAvBgNV
BAMTKDRCMjg2NEZERTQzNEE1NTJBREQ5NkM4QjZCRTI4MUNCMkZEQUQ4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7inYM6gKXYBoqnbifa7QSMXVX
FRV5/CtN54XfGJbPh3nZaLE5HF0InXpizxzI3yRSkjF0Ty/H643JTZycXWQF6Vec
K2SUeXmarwLkpogS39aKe/A/qAGOayzsWUT1NmdXBISZJ9jyKdxwebgW1AtI5q3T
1z/G1rW4DFOXpou7VdWPHGs+dgspoVY4mg6rDuBUH44PgOYeZyqJM5nTfq6ESaVD
+3SMrwadiv4wHfnWMGAEEvO40P+sIOYusl9gY4QPjRm9+FCpOLnKidVYI9pjfPka
eMSIh4UYgnwearOLjtisoZw/zD8LqWgusjVGiiZFl/EjcdqcXHxmRTuj6HVPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUSyhk/eQ0pVKt2WyLa+KByy/a2AswHwYDVR0j
BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG
OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw
RDE5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjZThkYTljLWJkYmQtNDkwOC1i
YTkyLWQ5MGZlYTljOGYwNS8wLzMxMzAzMzJlMzQzOTJlMzUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcxMzANBgkqhkiG
9w0BAQsFAAOCAQEAKIa23soikJaKgPVm+BPj5g53BhbzdL1CNDUd3oFiRiWZJhT1
QcyaLdlxboZvWexGix7McLj9eAyIoyf0eRB5nFCFOt0TUzEBPW9nmKqSg8JWa0UP
b6UQxz1GuW1MNIN4pd0cyGeMZLzdgO8ORwE3V/dEJpLirqcHY/OML5pVnHAUDS3l
NXUii4Gl1WMJoaGdCNVOed50STTqKLnDs2cOvZioA/uhomx3jb/yj2Lo7H5FFbCW
QHFutWw9ihE10SRWidbVJ3LVYwlUGGQIjfJsS7Oq9Mhifk6UXj/iotG0RQqi7woo
q2vvVgLnH8aUJQUgNYb1t1uftvYalVq87KK4xw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:59 2026 by rpki-client