This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
File:                     3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (raw, json)
Hash identifier:          BzG6yaz8K9d2yaZJbxZR2wDQbC5lgAeoiJLMdERwWfo=
Subject key identifier:   BD:B7:77:74:0F:64:90:33:23:AA:54:CB:97:7E:00:EA:44:82:F2:47
Certificate issuer:       /CN=07087494011A8BD71E0AB56E4A29820B0C265D45
Certificate serial:       3EDB3C5A5E722E035EA5C10460D1D820E2C0312F
Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa
Signing time:             Thu 29 Jan 2026 06:00:02 +0000
ROA not before:           Thu 29 Jan 2026 05:55:02 +0000
ROA not after:            Thu 28 Jan 2027 06:00:02 +0000
asID:                     136099
IP address blocks:        103.89.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl
                          rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 23:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:db:3c:5a:5e:72:2e:03:5e:a5:c1:04:60:d1:d8:20:e2:c0:31:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45
        Validity
            Not Before: Jan 29 05:55:02 2026 GMT
            Not After : Jan 28 06:00:02 2027 GMT
        Subject: CN=BDB777740F64903323AA54CB977E00EA4482F247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:7d:c5:fd:33:7f:59:f1:30:9b:ea:8e:fd:
                    35:99:b0:ae:fd:83:1c:fb:ba:9a:90:cc:b9:fa:bc:
                    2c:d5:fd:6d:36:21:71:83:5d:e6:97:32:97:c8:65:
                    d9:ec:60:33:e5:d9:94:48:2e:8e:71:7e:cc:dc:16:
                    f2:e5:e3:d9:e9:93:83:e7:79:14:cf:3a:c6:b3:6d:
                    91:9b:31:e9:85:69:b7:4c:61:16:42:da:f3:4e:98:
                    3c:36:e1:d0:f5:f7:60:fb:2a:a1:bf:87:2c:48:c3:
                    48:31:62:93:12:ca:ba:2f:a5:56:0d:46:83:44:89:
                    6e:bb:a7:1d:83:fd:e7:9c:d3:ed:80:d9:bc:14:30:
                    ef:2a:af:d4:6d:15:c7:46:57:f9:5d:40:38:b1:e4:
                    29:fe:e0:71:7f:45:25:62:6f:fe:aa:99:dc:40:1c:
                    ee:a5:5f:b6:a5:a2:85:3c:b8:d2:17:67:75:48:fd:
                    97:32:99:1a:4c:7f:e1:35:eb:6f:a4:ea:f9:a8:2a:
                    71:b3:3a:c4:f7:de:03:bc:dd:8f:60:8a:c9:b4:e1:
                    b1:cb:13:0e:fb:48:b9:19:0c:53:7b:07:34:53:7b:
                    fc:10:46:a6:17:73:74:1b:a1:2c:6d:bc:06:87:cd:
                    09:8e:f7:4a:e4:06:51:3f:69:9a:b7:59:74:97:83:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:77:74:0F:64:90:33:23:AA:54:CB:97:7E:00:EA:44:82:F2:47
            X509v3 Authority Key Identifier:
                keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b0:e1:bc:7f:9f:0f:d6:72:fe:92:08:27:47:89:6e:72:bf:
         dc:2a:fe:60:d5:9a:cf:03:15:e0:a5:0d:bb:66:1a:b6:01:ed:
         9e:45:8d:00:02:33:7d:0b:bb:99:c7:47:08:22:87:16:8f:54:
         69:c2:7e:d8:3f:4e:2b:af:4a:39:3c:6c:d3:cc:df:a2:3a:3d:
         be:92:dc:ee:24:d7:3e:8d:a9:db:d0:9c:ad:31:c9:23:d6:3c:
         30:bf:de:fd:ee:e3:6a:93:0c:5d:52:09:89:4f:a4:47:07:b4:
         a5:3d:99:5a:46:23:6d:d0:ae:b2:02:6c:f9:c4:32:f9:87:7f:
         62:1a:76:ef:39:9e:7b:82:4f:d3:c3:6f:b7:2b:da:f9:81:fe:
         f0:74:1e:aa:98:6c:34:b4:37:1e:e1:63:eb:84:0a:47:93:1e:
         de:5c:f3:27:8e:2c:fa:25:2c:f2:f8:7e:4a:b1:75:3d:3b:23:
         bd:5e:f6:d4:64:55:a6:6d:86:46:7c:23:25:d5:29:bb:68:05:
         4a:25:7d:9f:18:d4:ba:01:a4:1f:32:af:d8:9f:11:af:97:a1:
         1c:60:b9:68:15:8f:9d:2c:7a:b5:6f:cc:e4:60:31:59:3d:4f:
         ab:4e:ab:03:94:3d:4d:32:0c:c9:37:cc:09:92:e1:28:88:ca:
         9e:00:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:08:19 2026 by rpki-client