This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
File:                     3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (raw, json)
Hash identifier:          wuNIHLORz4Vdmg8tO/nySnMFBaLuy8MnBl+qb8R+V1Q=
Subject key identifier:   FC:57:AF:09:42:0B:E3:B6:63:95:44:D4:B3:FD:15:E1:A8:FB:C7:FB
Certificate issuer:       /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
Certificate serial:       6220ED9FA3FA5609FA8020901F14F5877B1CE1A4
Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa
Signing time:             Tue 30 Dec 2025 04:02:35 +0000
ROA not before:           Tue 30 Dec 2025 03:57:35 +0000
ROA not after:            Tue 29 Dec 2026 04:02:35 +0000
asID:                     141905
IP address blocks:        103.217.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl
                          rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:20:ed:9f:a3:fa:56:09:fa:80:20:90:1f:14:f5:87:7b:1c:e1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC
        Validity
            Not Before: Dec 30 03:57:35 2025 GMT
            Not After : Dec 29 04:02:35 2026 GMT
        Subject: CN=FC57AF09420BE3B6639544D4B3FD15E1A8FBC7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:8d:2e:4b:f4:02:cb:6a:66:30:64:f0:b8:
                    8f:ef:20:34:00:9a:a4:99:2a:70:e7:b0:92:2d:28:
                    03:9c:50:e3:05:32:60:a0:1c:92:81:1c:da:13:20:
                    61:6d:65:24:94:33:0b:c5:fe:3c:ca:f8:04:b9:02:
                    e0:c8:81:42:63:65:7b:05:6f:24:f0:ff:d3:c8:87:
                    59:bd:3f:32:00:d9:8b:a7:96:40:32:ed:7d:ac:c4:
                    3b:8b:27:85:cf:18:de:6b:70:c6:42:67:aa:3f:e9:
                    4e:7b:0d:f5:7e:37:e0:fe:79:01:35:2f:b5:3b:56:
                    3f:22:c6:71:1c:4a:e0:fe:45:b4:bf:7c:7f:71:54:
                    ca:09:a5:c9:eb:c5:40:cb:45:1a:a6:d7:ee:7d:3b:
                    49:94:c9:bc:ff:fd:61:91:b9:3b:d5:0e:e8:5c:23:
                    ea:a5:c3:ba:46:40:09:87:1a:10:53:5b:94:4c:9d:
                    38:cd:fb:16:8a:72:de:ac:2e:9e:db:0c:d5:10:b5:
                    95:56:71:2b:e3:e9:b4:70:50:f0:71:f3:28:7a:98:
                    f7:06:1c:80:8c:e4:a7:ca:b1:a4:59:ad:02:a6:c1:
                    96:50:58:96:b5:c6:44:15:72:f2:46:a1:20:61:9a:
                    35:4c:9c:d4:d3:37:ed:14:ed:5c:6f:6e:8f:ce:0b:
                    27:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:AF:09:42:0B:E3:B6:63:95:44:D4:B3:FD:15:E1:A8:FB:C7:FB
            X509v3 Authority Key Identifier:
                keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.217.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:52:36:a9:20:18:99:f2:0b:8b:12:a0:2a:56:3e:1c:78:70:
         2f:d1:b4:f0:7b:04:4b:24:9a:57:0c:51:19:b7:6b:5c:0e:30:
         63:75:5d:9f:ba:71:7b:db:5b:05:69:20:e2:b4:04:67:7c:9e:
         81:47:84:0d:66:9e:4e:6d:59:53:59:de:21:5c:ee:4f:bd:45:
         3e:b5:62:96:e8:06:d0:1a:36:62:5c:9d:c4:1e:27:34:20:3a:
         12:33:64:8c:65:f6:9e:6c:9f:3c:4e:83:7b:bd:4f:12:cf:14:
         85:7f:06:ba:46:f6:64:69:f7:dc:c8:ba:98:ac:45:5d:d0:d2:
         c8:d5:8a:7a:48:69:42:c7:49:8d:08:dd:de:ee:97:bc:e3:da:
         83:0d:1e:46:3f:75:33:9a:82:c0:fe:db:0e:39:1b:51:b6:8f:
         b3:4f:5d:dd:d0:3b:83:af:4d:35:cf:60:f2:13:5b:36:96:11:
         ae:43:7e:33:43:0a:4c:86:a6:c4:32:a9:49:76:32:85:7c:b7:
         31:c2:ad:08:7a:79:61:41:df:8e:68:4f:50:05:59:0c:81:95:
         f6:81:be:8d:62:9b:4f:6e:b4:7a:74:3a:7f:99:19:27:98:64:
         a8:db:fd:04:66:a4:4d:79:a6:c8:c7:e6:62:49:a7:74:fd:37:
         e4:0b:fc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:39 2026 by rpki-client