This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa
File:                     3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (raw, json)
Hash identifier:          NvKxe3HHk9zHNuvCE6DN5lywX6x8QCyX3832DuoeqaY=
Subject key identifier:   2E:73:4C:F5:6F:13:C9:0C:E2:F1:31:A3:AB:9D:DB:11:7A:47:1A:59
Certificate issuer:       /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
Certificate serial:       41107C753737EB77B4ED5629A588EA15D79B34A2
Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa
Signing time:             Fri 09 Jan 2026 02:00:02 +0000
ROA not before:           Fri 09 Jan 2026 01:55:02 +0000
ROA not after:            Fri 08 Jan 2027 02:00:02 +0000
asID:                     141078
IP address blocks:        103.155.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl
                          rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 02:54:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:10:7c:75:37:37:eb:77:b4:ed:56:29:a5:88:ea:15:d7:9b:34:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710
        Validity
            Not Before: Jan  9 01:55:02 2026 GMT
            Not After : Jan  8 02:00:02 2027 GMT
        Subject: CN=2E734CF56F13C90CE2F131A3AB9DDB117A471A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:e6:e2:67:59:16:26:24:ef:a0:99:f6:68:
                    f4:3c:9f:18:2a:f0:8c:76:6f:ae:3d:ca:65:ba:ba:
                    e5:bd:e0:46:89:00:65:f2:e7:f0:ea:8d:69:0a:18:
                    c3:49:34:75:4e:54:97:a2:4d:f5:66:8c:8a:56:71:
                    49:b1:11:98:0a:27:e6:1a:0f:18:be:e5:70:6e:58:
                    23:e5:ed:96:5a:e0:ba:00:d2:ef:15:07:24:c4:90:
                    ab:dc:b3:6e:12:e6:66:ef:35:db:5c:e3:54:98:5b:
                    34:06:96:07:8a:80:50:6c:da:cf:6d:be:a5:60:92:
                    02:ea:77:ad:8f:1b:94:28:53:38:6f:21:14:16:05:
                    29:3c:7f:e6:35:9b:fc:db:6c:b9:3e:0c:4c:c2:c9:
                    53:08:89:0e:e7:79:51:ff:a6:b7:b3:5b:53:9d:d6:
                    86:31:96:cf:c0:70:85:84:66:d8:05:9f:71:fc:8e:
                    28:ca:01:ba:b7:33:21:94:d7:bd:51:35:f7:39:91:
                    f0:a6:ec:6a:36:9e:01:e5:4c:01:68:e2:6f:7b:62:
                    ae:e3:0f:30:ec:10:df:8b:ea:92:3f:bb:5b:45:7b:
                    03:cf:84:fa:14:93:64:89:61:47:76:92:55:92:51:
                    f0:5c:8f:30:a9:af:2e:01:a3:e0:bd:03:49:10:e2:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:4C:F5:6F:13:C9:0C:E2:F1:31:A3:AB:9D:DB:11:7A:47:1A:59
            X509v3 Authority Key Identifier:
                keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:d8:1b:9c:31:74:e7:31:fe:c9:e8:44:a6:bd:d2:a8:71:
         18:a6:06:ff:f3:bc:36:9a:d4:89:ab:4c:8a:4c:75:6a:99:bc:
         1a:45:9c:13:c4:aa:70:68:3b:dd:66:9d:15:39:92:38:4d:61:
         23:ba:63:e1:ba:91:ae:21:77:e6:67:f9:41:28:70:c2:be:01:
         97:7b:f1:3d:90:be:2f:74:3c:83:d1:e6:af:65:7e:16:a7:9c:
         b6:14:6b:9d:10:35:62:2b:76:58:dd:a4:58:8d:4a:f4:ab:ea:
         57:a7:bf:5d:28:7c:14:6d:19:4c:09:b7:25:f5:12:0d:af:65:
         d3:5f:91:3f:66:e9:2c:00:95:5c:db:30:f4:de:8d:f5:27:76:
         70:2d:0f:b0:86:81:63:6a:54:74:be:0f:02:4f:6b:1f:c6:a5:
         64:5b:59:b3:0e:2b:51:07:62:6a:7d:00:32:db:4d:79:09:36:
         1b:a6:f8:67:1c:bd:aa:e3:f1:32:40:f0:35:22:63:0b:68:9e:
         5c:2f:69:3e:ce:0d:b1:d5:1b:74:ee:70:c3:19:0e:37:cf:e6:
         bf:eb:54:a9:9b:25:89:b9:07:9e:d0:29:ab:25:7f:64:ab:ad:
         ef:ce:b4:d2:9a:48:ed:28:5a:5c:e8:9b:54:2b:f5:5a:f1:72:
         07:3f:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:01:12 2026 by rpki-client