This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa
File:                     3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (raw, json)
Hash identifier:          cKBPEdRq2LZ2LdyolV1+vPX464R8Bt40w+RS4c175VU=
Subject key identifier:   FD:A4:3C:70:8F:49:E2:00:C3:D2:8B:0E:EC:F7:28:24:9A:E5:A8:A8
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       072294D6195F7694AB72BBDB4F385AEEF2B8D6FB
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa
Signing time:             Fri 09 Jan 2026 03:00:02 +0000
ROA not before:           Fri 09 Jan 2026 02:55:02 +0000
ROA not after:            Fri 08 Jan 2027 03:00:02 +0000
asID:                     141078
IP address blocks:        103.155.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:22:94:d6:19:5f:76:94:ab:72:bb:db:4f:38:5a:ee:f2:b8:d6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Jan  9 02:55:02 2026 GMT
            Not After : Jan  8 03:00:02 2027 GMT
        Subject: CN=FDA43C708F49E200C3D28B0EECF728249AE5A8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:f8:bd:01:d3:a2:42:9c:ef:8c:93:a5:e9:
                    24:d9:3c:ea:2e:00:6e:49:a1:86:97:c5:9e:7c:c4:
                    e6:e1:ac:9d:14:ff:14:1f:53:d6:b7:3f:79:15:66:
                    c8:71:bb:19:00:1f:48:d5:c4:33:df:b2:9d:29:5e:
                    d3:59:60:23:cd:b9:84:60:00:96:68:22:e5:7e:5e:
                    61:66:a9:47:18:eb:1e:4f:9e:15:06:a8:e6:ba:59:
                    3d:c3:33:27:56:0f:ab:a9:ee:1a:fa:27:77:6c:fe:
                    04:65:a5:1d:92:f0:6d:68:6a:da:92:56:4e:79:a4:
                    a1:49:c5:b6:29:a7:14:1f:6b:0b:89:52:0c:d2:73:
                    22:b5:ca:ce:70:ff:e3:c3:38:79:48:24:f2:bf:29:
                    71:25:40:54:2b:87:45:10:cc:1b:6a:3a:a2:30:6d:
                    97:c1:04:54:09:59:32:2f:76:f5:84:5d:a1:e2:f2:
                    1c:7a:a9:08:20:0b:f5:7a:33:a1:a2:65:4a:fc:39:
                    5a:ce:74:00:cf:da:62:d6:88:b2:f3:af:34:2d:84:
                    a1:c3:d8:c5:15:76:b6:b7:cf:c4:0b:53:ea:51:96:
                    cb:f9:fb:86:e3:7d:da:c5:11:d2:2b:bd:30:b7:8d:
                    65:82:55:cb:d1:7f:ae:01:16:69:00:9e:e3:c4:0e:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A4:3C:70:8F:49:E2:00:C3:D2:8B:0E:EC:F7:28:24:9A:E5:A8:A8
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9c:1f:67:70:9d:a3:04:fb:e1:5a:bb:02:47:20:87:2a:c5:
         9d:37:44:b5:4a:b6:42:f6:d8:e5:c3:90:52:b3:cf:17:0e:0c:
         13:b0:fc:2d:2e:a7:5a:8b:7a:75:5a:5c:c8:39:6c:4e:4b:a3:
         fd:54:e3:a7:78:69:2e:fd:ec:33:94:5c:13:91:09:1b:05:b4:
         71:9f:18:b8:26:2c:6b:f9:79:c5:8d:4e:95:07:6f:05:14:6b:
         4b:d8:49:25:07:e0:20:1d:37:73:24:34:46:b1:55:30:0b:61:
         46:3f:fc:20:75:cf:b4:a9:5e:11:24:87:cc:45:f3:1a:17:74:
         c7:3d:dd:a0:3a:84:e2:fe:c1:c7:42:50:c6:35:38:8a:ba:88:
         8d:9f:8a:f5:99:fb:2f:72:96:23:f7:66:d6:2a:ee:ac:08:6a:
         d4:c4:61:2c:62:04:29:a6:8a:67:19:bd:ef:fc:71:02:46:0f:
         db:92:f1:2b:8f:43:f5:78:cf:5f:9c:e1:24:76:6e:3f:62:a8:
         38:83:01:dd:70:7e:f7:65:20:08:b9:0a:d0:c7:84:26:56:b9:
         6b:3a:87:74:f6:9d:78:4d:dd:6e:55:3a:fc:5b:e7:88:45:90:
         4f:27:25:a7:8d:4e:1b:e8:a5:50:96:96:eb:fc:fc:c7:a9:ec:
         72:b3:13:73
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUByKU1hlfdpSrcrvbTzha7vK41vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1
QTlDOTcxMDAeFw0yNjAxMDkwMjU1MDJaFw0yNzAxMDgwMzAwMDJaMDMxMTAvBgNV
BAMTKEZEQTQzQzcwOEY0OUUyMDBDM0QyOEIwRUVDRjcyODI0OUFFNUE4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJ/i9AdOiQpzvjJOl6STZPOou
AG5JoYaXxZ58xObhrJ0U/xQfU9a3P3kVZshxuxkAH0jVxDPfsp0pXtNZYCPNuYRg
AJZoIuV+XmFmqUcY6x5PnhUGqOa6WT3DMydWD6up7hr6J3ds/gRlpR2S8G1oatqS
Vk55pKFJxbYppxQfawuJUgzScyK1ys5w/+PDOHlIJPK/KXElQFQrh0UQzBtqOqIw
bZfBBFQJWTIvdvWEXaHi8hx6qQggC/V6M6GiZUr8OVrOdADP2mLWiLLzrzQthKHD
2MUVdra3z8QLU+pRlsv5+4bjfdrFEdIrvTC3jWWCVcvRf64BFmkAnuPEDnuhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/aQ8cI9J4gDD0osO7PcoJJrlqKgwHwYDVR0j
BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1
QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD
OTcxMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjN2QzY2JmLTI0ZDYtNGIxYy04
NmNiLTFkNDg4NzZmM2M2Yi8wLzMxMzAzMzJlMzEzNTM1MmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm/YwDQYJ
KoZIhvcNAQELBQADggEBAA6cH2dwnaME++FauwJHIIcqxZ03RLVKtkL22OXDkFKz
zxcODBOw/C0up1qLenVaXMg5bE5Lo/1U46d4aS797DOUXBORCRsFtHGfGLgmLGv5
ecWNTpUHbwUUa0vYSSUH4CAdN3MkNEaxVTALYUY//CB1z7SpXhEkh8xF8xoXdMc9
3aA6hOL+wcdCUMY1OIq6iI2fivWZ+y9yliP3ZtYq7qwIatTEYSxiBCmmimcZve/8
cQJGD9uS8SuPQ/V4z1+c4SR2bj9iqDiDAd1wfvdlIAi5CtDHhCZWuWs6h3T2nXhN
3W5VOvxb54hFkE8nJaeNThvopVCWluv8/Mep7HKzE3M=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:29 2026 by rpki-client