This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa
File:                     3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa (raw, json)
Hash identifier:          Bi9nY1p0p/LL12T0+GcY0uwFY1cTRYvh/8l06MWKr+o=
Subject key identifier:   8C:FD:1D:A1:24:42:15:1F:3D:C0:CE:72:C5:64:D7:57:67:76:F4:BD
Certificate issuer:       /CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
Certificate serial:       5377321D1BF7C52D08059C56AC5B719FBAEFE06A
Authority key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa
Signing time:             Wed 24 Dec 2025 06:02:35 +0000
ROA not before:           Wed 24 Dec 2025 05:57:35 +0000
ROA not after:            Wed 23 Dec 2026 06:02:35 +0000
asID:                     137288
IP address blocks:        103.107.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl
                          rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:32:1d:1b:f7:c5:2d:08:05:9c:56:ac:5b:71:9f:ba:ef:e0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51
        Validity
            Not Before: Dec 24 05:57:35 2025 GMT
            Not After : Dec 23 06:02:35 2026 GMT
        Subject: CN=8CFD1DA12442151F3DC0CE72C564D7576776F4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:50:e9:9a:4a:ee:9b:be:3a:0e:c4:24:55:
                    72:c3:31:ac:a1:cf:94:4d:21:c8:a4:bb:74:c4:43:
                    46:62:cd:50:39:a0:71:18:3d:4a:63:e0:c5:cc:43:
                    6e:d8:ac:47:7d:fd:dd:08:1b:de:e9:ab:76:66:98:
                    46:d3:97:0e:48:d1:0e:14:c3:e9:df:cb:0a:0e:bf:
                    1a:b5:d8:42:4c:e6:6d:56:3d:97:62:30:e2:da:eb:
                    4e:a4:c4:2c:59:d2:60:64:1c:58:30:6b:a0:1a:a1:
                    09:06:16:40:a0:c4:73:25:32:08:19:33:1f:fa:b8:
                    b5:e6:e0:e5:b5:85:1a:ac:34:7d:57:d6:ec:1e:b1:
                    90:36:e4:dd:93:aa:63:f9:c5:fc:29:3b:20:35:a8:
                    f1:55:20:b9:54:a4:f1:a0:fa:26:58:eb:b8:c8:24:
                    bd:04:4d:ae:97:b0:d8:77:d6:40:f7:d9:bb:46:99:
                    41:38:07:93:0c:cf:2c:ee:9f:9e:c3:53:99:91:37:
                    67:2f:03:2d:d2:0b:dc:8b:27:10:61:14:73:4f:36:
                    c8:98:bd:51:f8:10:10:0c:6b:14:34:19:f6:52:98:
                    b5:1b:3a:91:3d:5a:b6:71:08:a6:01:ec:d6:64:4c:
                    18:a7:fd:ad:e3:d6:16:14:32:6c:99:36:9b:b8:4a:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:1D:A1:24:42:15:1F:3D:C0:CE:72:C5:64:D7:57:67:76:F4:BD
            X509v3 Authority Key Identifier:
                keyid:30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/3130332e3130372e31382e302f32342d3234203d3e20313337323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:49:b6:a8:37:d6:96:ff:00:6c:26:85:d5:4a:8b:87:26:
         37:ef:e2:e2:c9:15:fd:da:c4:31:8f:eb:03:6c:40:03:8b:90:
         a9:e2:1a:dd:55:e9:56:3e:2d:f1:9a:d8:fd:06:08:d5:9f:7b:
         e9:bb:01:fd:35:ea:52:13:61:b6:7d:dd:2e:f6:b8:ff:39:dc:
         30:b7:15:21:32:f7:d8:7b:4b:6b:86:00:d2:c1:fc:ae:90:a9:
         ed:d0:9d:60:5b:56:56:76:ab:ae:5e:3a:b5:6a:43:a7:4e:88:
         5b:b2:83:19:fa:c2:0a:f6:4c:0c:6b:b0:80:3f:81:9a:a1:e4:
         84:10:f8:0c:0f:69:94:81:f2:17:6a:26:20:83:bb:04:d2:f7:
         a8:a0:9f:63:a8:6f:02:82:2c:ce:a7:30:10:d4:d2:fd:10:64:
         47:46:75:ea:df:c0:53:33:8e:bd:63:fb:af:e1:5c:b5:72:99:
         fb:8c:26:1c:12:f6:67:65:a3:c8:51:51:c3:d4:2e:eb:35:c3:
         0a:f5:9a:40:e1:b5:67:17:1d:a4:c7:56:3c:3e:7d:ff:07:c7:
         fe:1b:3f:6a:5f:98:19:7e:39:6e:b6:77:c5:41:00:57:82:00:
         09:a3:5e:73:fa:72:d1:56:2c:2f:e9:5a:cc:6e:f7:8b:a2:09:
         6e:e3:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:01:10 2026 by rpki-client