This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          6CnrGX1LrXJO/2xiSh7/WQeAAu4zVMBvJoPd9Ck/Xbs=
Subject key identifier:   D6:D2:20:16:38:0C:19:1E:59:8D:A1:09:2A:70:11:7B:E3:8C:86:00
Certificate issuer:       /CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
Certificate serial:       25D28BDF23C4D3090A6B4A4C15916117D6D9DB6A
Authority key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa
Signing time:             Fri 30 Jan 2026 07:00:56 +0000
ROA not before:           Fri 30 Jan 2026 06:55:56 +0000
ROA not after:            Fri 29 Jan 2027 07:00:56 +0000
asID:                     140443
IP address blocks:        103.168.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl
                          rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d2:8b:df:23:c4:d3:09:0a:6b:4a:4c:15:91:61:17:d6:d9:db:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27
        Validity
            Not Before: Jan 30 06:55:56 2026 GMT
            Not After : Jan 29 07:00:56 2027 GMT
        Subject: CN=D6D22016380C191E598DA1092A70117BE38C8600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:bb:62:1d:d4:79:7a:0b:70:25:73:b8:15:
                    23:ed:ab:45:c5:f8:65:50:73:92:ab:d8:41:f5:86:
                    08:ba:12:64:6b:a5:67:85:4b:1f:5f:49:70:75:b4:
                    f8:d6:9b:0e:0b:ed:8a:e2:c3:a0:6b:f3:d3:07:40:
                    0b:0b:cc:96:b1:f4:f5:98:53:69:de:26:46:39:ea:
                    23:4d:3c:65:be:90:85:bb:cd:bf:02:8b:95:fd:c8:
                    f1:ef:f1:1a:9d:f1:91:ac:94:9e:31:8e:8c:24:d1:
                    24:ba:d0:20:5d:60:48:dd:c2:ba:c2:98:c0:59:5f:
                    78:b8:a9:96:91:32:1a:62:86:fc:db:db:57:cb:42:
                    b4:4e:75:d6:92:78:85:e6:66:84:22:07:cc:d5:27:
                    82:a6:2d:c6:b2:e9:c1:4e:d8:88:d4:97:5b:eb:a3:
                    c0:02:67:93:cb:df:dd:fc:0a:ca:fd:00:13:99:5d:
                    70:cc:a1:10:04:b3:3d:49:c3:8a:5f:8c:4a:1c:d8:
                    83:7b:ec:ac:f0:20:d4:5f:5e:fc:04:c4:bd:60:c1:
                    3f:6c:cc:5e:69:24:5f:3e:80:5f:f0:26:57:a5:32:
                    c8:22:dd:15:aa:23:9c:98:8e:92:28:25:0d:ce:6d:
                    cb:99:37:87:b3:bc:7b:6d:d4:5b:45:e0:8b:ee:80:
                    b0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D2:20:16:38:0C:19:1E:59:8D:A1:09:2A:70:11:7B:E3:8C:86:00
            X509v3 Authority Key Identifier:
                keyid:4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/3130332e3136382e3134362e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:5b:9b:f6:fa:f1:b1:d2:ed:47:06:fc:e8:81:50:c8:5b:
         2b:05:2d:2f:87:62:7d:6b:17:9b:00:71:69:74:f0:b6:e3:92:
         2f:8f:c7:d5:a1:b7:43:22:f4:b3:a3:fe:9b:d3:2a:e1:9c:fd:
         b4:ce:35:ba:58:ec:62:f4:3e:47:55:b6:2c:05:30:32:07:91:
         b3:83:c8:83:79:e4:ab:fa:dd:1a:2b:43:74:6f:27:b7:21:35:
         44:37:d6:ee:6e:79:df:85:d4:d9:59:a6:38:58:e7:3a:bf:d4:
         78:96:00:c9:c5:39:0f:82:f4:6c:8a:15:a8:9a:e9:54:a7:4d:
         0e:6f:bc:ce:cc:10:7f:43:30:ba:8e:02:b1:0d:bc:f1:88:a9:
         df:1d:df:26:34:f5:b6:99:b0:67:81:77:05:79:ef:6e:09:db:
         57:70:17:1d:25:33:54:4e:45:7d:fc:27:64:d9:a6:0b:2f:c5:
         db:01:3a:f3:95:1c:b3:db:fe:04:16:4a:9d:1f:37:9b:ef:54:
         b7:87:71:a1:81:5b:8a:75:02:c6:fc:a5:f2:9b:0d:d9:23:4a:
         12:f4:88:3d:74:2b:21:2f:1d:05:c7:ba:27:a6:78:e7:94:98:
         63:98:22:f5:4f:5d:fa:12:b7:d6:7a:0b:cb:5f:ad:bf:19:28:
         cd:b9:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:59 2026 by rpki-client