This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          Er3SZg2wUj/P2Phj94Rs/pKQreK157hBoR/0FApk3DI=
Subject key identifier:   C1:4C:53:A8:B0:C7:D4:FA:4D:C5:0D:6B:6D:77:49:CD:3D:59:07:26
Certificate issuer:       /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
Certificate serial:       294820CDB77E226C58BD385BF35EC5592019F177
Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa
Signing time:             Mon 05 Jan 2026 09:00:00 +0000
ROA not before:           Mon 05 Jan 2026 08:55:00 +0000
ROA not after:            Mon 04 Jan 2027 09:00:00 +0000
asID:                     131769
IP address blocks:        103.177.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl
                          rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:48:20:cd:b7:7e:22:6c:58:bd:38:5b:f3:5e:c5:59:20:19:f1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16
        Validity
            Not Before: Jan  5 08:55:00 2026 GMT
            Not After : Jan  4 09:00:00 2027 GMT
        Subject: CN=C14C53A8B0C7D4FA4DC50D6B6D7749CD3D590726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:fa:36:34:82:dd:e8:9d:af:2f:20:fe:ad:
                    c6:6e:7e:29:12:f8:8e:5b:b1:1e:3b:8b:b4:60:94:
                    40:cb:b8:5c:c0:13:10:8a:04:ef:1b:cd:45:4c:e8:
                    8a:d1:3a:81:92:ff:6f:b0:7f:d0:47:b7:0b:b9:04:
                    8c:2d:8f:24:d2:3f:b1:c1:b8:fe:05:86:1f:73:6e:
                    9b:4e:af:38:9c:18:fe:68:46:e9:65:cb:cb:c6:4d:
                    f3:a7:0a:02:ff:02:a4:09:b5:82:57:d5:e5:b5:ee:
                    f1:4c:be:59:e0:37:fd:43:7e:7a:d0:6f:f7:2e:c7:
                    fa:ff:ca:96:c1:0c:be:2d:31:cc:2b:e2:46:90:de:
                    a1:9a:e9:3c:08:92:5b:f1:6f:15:64:52:91:78:36:
                    63:17:4f:02:3a:0f:2d:f9:04:3f:9e:8b:f9:d8:63:
                    a9:c3:d4:f4:04:ed:01:6d:d6:2c:48:fd:80:6e:1e:
                    8f:a8:9d:80:2e:79:17:42:bc:b2:c4:62:a6:d9:b4:
                    6c:4c:68:c0:fd:41:f4:35:a8:5f:a3:46:b7:f6:3a:
                    f9:74:77:c2:b9:d8:bc:74:10:68:66:70:45:71:c6:
                    ac:a3:10:4e:5e:f3:a5:ec:f3:1f:e6:b2:f4:ef:24:
                    38:bf:03:bc:ae:5c:d8:fa:3c:b4:92:be:37:c8:5d:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4C:53:A8:B0:C7:D4:FA:4D:C5:0D:6B:6D:77:49:CD:3D:59:07:26
            X509v3 Authority Key Identifier:
                keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:ed:90:03:f2:34:60:56:c4:4c:2e:62:db:4f:d0:73:1b:
         01:cc:04:04:eb:5d:34:5b:e3:c9:28:84:60:ae:2c:ad:90:0f:
         c0:a3:1d:df:a9:47:73:87:78:a6:dd:18:ea:e3:07:ff:ae:5b:
         11:c1:92:25:6d:3c:67:33:80:da:fa:f0:61:24:80:05:4b:dc:
         7b:62:9a:f8:95:ab:ac:36:59:b1:4d:cb:fd:78:5d:f4:12:14:
         84:31:cb:c2:b0:c0:8c:90:7a:f7:eb:87:de:f1:60:7e:93:b6:
         b7:ef:ac:4d:ae:a3:1a:63:cc:f0:c0:83:ec:6e:76:87:f2:63:
         33:11:42:e2:63:ee:c7:99:50:80:9a:51:f3:fc:e8:58:b7:ad:
         53:03:77:d2:ea:57:57:f6:af:05:ff:79:14:bc:14:bb:89:bf:
         ee:f5:0a:bc:68:d1:70:b7:ba:e6:0b:51:47:83:3b:0f:29:be:
         e2:d1:98:f1:31:d0:98:2c:3a:72:e9:55:11:cd:6e:13:81:23:
         d1:dd:8e:f8:c1:92:06:3c:f6:e3:6f:ea:4f:01:8c:19:75:87:
         5b:8f:cf:67:57:71:d6:19:95:12:9c:7d:a4:ca:01:ee:b0:fa:
         b7:d3:45:df:40:93:6a:77:f2:cc:29:e1:59:27:c6:cc:ea:11:
         1e:47:88:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 13:27:46 2026 by rpki-client