This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa
File:                     3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (raw, json)
Hash identifier:          cnuV3XBMOXYCEsZye3rtB+j/sH8H265eHTPTRDcKOJM=
Subject key identifier:   DD:BE:0D:B1:5E:D3:CC:B5:73:D0:0E:ED:8C:90:75:89:EA:26:F4:35
Certificate issuer:       /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Certificate serial:       29BEEB92AA3A09EBB261BD2D4D83FA343A95CA79
Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa
Signing time:             Tue 30 Dec 2025 04:02:35 +0000
ROA not before:           Tue 30 Dec 2025 03:57:35 +0000
ROA not after:            Tue 29 Dec 2026 04:02:35 +0000
asID:                     141905
IP address blocks:        103.164.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl
                          rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:eb:92:aa:3a:09:eb:b2:61:bd:2d:4d:83:fa:34:3a:95:ca:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
        Validity
            Not Before: Dec 30 03:57:35 2025 GMT
            Not After : Dec 29 04:02:35 2026 GMT
        Subject: CN=DDBE0DB15ED3CCB573D00EED8C907589EA26F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:ed:39:0e:55:4f:52:36:e4:aa:24:8b:30:
                    96:ad:03:25:5f:91:23:6b:cb:0b:32:a5:66:58:57:
                    f5:1d:64:a0:d5:53:8e:47:8f:22:3a:84:16:23:fb:
                    a0:40:8c:fc:84:2a:18:1f:27:99:97:b9:dc:59:65:
                    ea:fb:e1:78:7b:6c:e1:28:b9:09:d1:79:31:ef:86:
                    dc:13:bb:4d:49:e8:eb:04:de:ee:dd:aa:5d:6f:1a:
                    64:23:ba:c1:f2:66:5b:22:11:1c:08:03:73:3f:17:
                    be:1c:24:a9:76:96:96:41:87:a1:4e:b3:19:b8:92:
                    93:b1:9c:0c:8a:20:92:9d:1a:d8:fd:e3:f3:05:97:
                    74:ce:03:cb:34:3b:7a:6d:29:b4:9f:5b:82:0f:5c:
                    06:cf:01:f1:9f:eb:66:bb:6c:f9:f9:b6:f7:0e:7f:
                    7d:98:27:58:76:2c:4a:0c:e8:a9:6b:c5:80:a3:99:
                    16:09:b2:9b:f0:2b:a5:78:30:9c:1c:ed:c5:a7:cc:
                    77:ad:11:d5:ac:f1:68:6e:c2:16:44:bd:64:41:64:
                    be:70:1c:49:1d:5a:48:3d:fa:e8:6e:e0:c1:6e:7d:
                    e7:06:07:e9:60:3e:cc:84:6c:92:87:cb:15:39:f7:
                    f2:ef:d8:02:0d:6c:b2:07:36:22:7d:26:ff:0e:2d:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BE:0D:B1:5E:D3:CC:B5:73:D0:0E:ED:8C:90:75:89:EA:26:F4:35
            X509v3 Authority Key Identifier:
                keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:fe:5c:be:d0:0f:2a:8f:fd:83:8b:c1:86:6c:95:f3:c4:b8:
         b3:db:ef:c1:7b:39:cb:41:7f:4e:cb:26:4f:1f:2b:41:00:2b:
         cc:69:1e:5a:8e:56:17:03:48:12:9c:45:0f:6e:16:2f:58:10:
         60:2a:50:ac:61:bf:82:6f:15:37:69:ad:08:f5:87:0d:a8:1c:
         e8:8c:c3:2f:2a:a4:c5:51:24:fe:31:67:9a:94:65:fc:28:30:
         5c:28:48:07:0e:3b:f2:43:7c:eb:d6:b1:a9:ff:6b:3b:56:5f:
         23:b8:c1:ba:1b:8f:0e:e9:1f:b5:15:14:20:7c:1e:44:d5:d0:
         28:4f:74:a5:6c:24:77:ba:f7:f8:39:2f:e7:cd:d4:f4:1a:52:
         f7:88:ed:b5:35:7f:b3:65:f8:61:cc:d2:3f:b6:30:64:3a:bf:
         60:54:ab:cf:e4:de:5f:cf:1c:bc:39:8e:cc:1b:6e:31:c6:ce:
         d9:23:2b:08:4f:80:88:44:54:30:c7:96:26:31:c1:b4:1d:49:
         a4:e0:e3:ac:ce:ac:4c:9e:ef:90:63:c4:2c:c9:2e:d0:41:aa:
         2f:9b:e6:d7:9b:6b:d2:3e:e3:f5:0d:ec:b3:9d:96:34:c7:20:
         bc:cb:20:18:30:3a:f7:57:8f:d3:f0:a8:29:cd:4e:33:88:dd:
         85:03:d6:e4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKb7rkqo6CeuyYb0tTYP6NDqVynkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5
NzUxOERDQzAeFw0yNTEyMzAwMzU3MzVaFw0yNjEyMjkwNDAyMzVaMDMxMTAvBgNV
BAMTKEREQkUwREIxNUVEM0NDQjU3M0QwMEVFRDhDOTA3NTg5RUEyNkY0MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl8u05DlVPUjbkqiSLMJatAyVf
kSNrywsypWZYV/UdZKDVU45HjyI6hBYj+6BAjPyEKhgfJ5mXudxZZer74Xh7bOEo
uQnReTHvhtwTu01J6OsE3u7dql1vGmQjusHyZlsiERwIA3M/F74cJKl2lpZBh6FO
sxm4kpOxnAyKIJKdGtj94/MFl3TOA8s0O3ptKbSfW4IPXAbPAfGf62a7bPn5tvcO
f32YJ1h2LEoM6KlrxYCjmRYJspvwK6V4MJwc7cWnzHetEdWs8WhuwhZEvWRBZL5w
HEkdWkg9+uhu4MFufecGB+lgPsyEbJKHyxU59/Lv2AINbLIHNiJ9Jv8OLc8fAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU3b4NsV7TzLVz0A7tjJB1ieom9DUwHwYDVR0j
BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE
MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx
OERDQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZWU2YmYzLTJiZGEtNGNhNC1h
NWU3LTZlNzA2MzI0MDRiNC8wLzMxMzAzMzJlMzEzNjM0MmUzODM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6RUMA0GCSqG
SIb3DQEBCwUAA4IBAQAh/ly+0A8qj/2Di8GGbJXzxLiz2+/BeznLQX9OyyZPHytB
ACvMaR5ajlYXA0gSnEUPbhYvWBBgKlCsYb+CbxU3aa0I9YcNqBzojMMvKqTFUST+
MWealGX8KDBcKEgHDjvyQ3zr1rGp/2s7Vl8juMG6G48O6R+1FRQgfB5E1dAoT3Sl
bCR3uvf4OS/nzdT0GlL3iO21NX+zZfhhzNI/tjBkOr9gVKvP5N5fzxy8OY7MG24x
xs7ZIysIT4CIRFQwx5YmMcG0HUmk4OOszqxMnu+QY8QsyS7QQaovm+bXm2vSPuP1
DeyznZY0xyC8yyAYMDr3V4/T8KgpzU4ziN2FA9bk
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:52 2026 by rpki-client