This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
File:                     3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (raw, json)
Hash identifier:          TGvstWaba6dweQVEmTIVysFvdJ7+Wysk/kSHerlZ+i4=
Subject key identifier:   4A:FA:2F:BA:67:58:27:B8:36:B4:0E:80:A5:D5:7D:6A:44:3E:4A:43
Certificate issuer:       /CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Certificate serial:       438C5BFADBC614667736D58A4D7B45BA96D27A7E
Authority key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
Signing time:             Mon 02 Feb 2026 10:00:00 +0000
ROA not before:           Mon 02 Feb 2026 09:55:00 +0000
ROA not after:            Mon 01 Feb 2027 10:00:00 +0000
asID:                     147130
IP address blocks:        103.176.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
                          rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8c:5b:fa:db:c6:14:66:77:36:d5:8a:4d:7b:45:ba:96:d2:7a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
        Validity
            Not Before: Feb  2 09:55:00 2026 GMT
            Not After : Feb  1 10:00:00 2027 GMT
        Subject: CN=4AFA2FBA675827B836B40E80A5D57D6A443E4A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:4f:ae:ce:1a:a9:a7:4e:3a:68:b9:b6:fe:
                    8e:1f:da:e9:3f:1f:5d:2b:99:94:77:86:07:a2:27:
                    12:97:2d:9d:f7:aa:f0:78:20:e9:c3:3b:7f:85:48:
                    58:66:3b:c5:42:12:c7:02:6c:b9:0d:4b:0c:c7:7b:
                    d6:65:a2:05:6e:90:17:e9:96:6f:e5:53:b9:df:4e:
                    50:3b:26:e2:c9:32:2c:bc:36:6e:e1:68:c3:4d:b7:
                    38:cc:91:7a:59:69:bf:ac:01:59:7c:8e:82:72:69:
                    d2:8b:fb:a1:d7:e8:96:91:a2:83:af:32:86:f9:d9:
                    ca:e1:2e:81:84:af:92:58:78:7a:6f:c0:4f:20:da:
                    31:6a:52:08:bc:3f:1c:7a:6e:d7:18:83:93:c4:d6:
                    86:6c:f4:d4:13:ca:1c:10:21:d5:5c:b2:ee:19:9e:
                    b5:8d:88:c9:25:58:5e:97:8f:33:28:3b:54:a4:f7:
                    8f:b9:7a:c3:93:3c:33:70:db:6f:6b:d3:bf:af:67:
                    ca:06:2b:64:18:74:6b:06:92:41:94:c3:82:53:15:
                    5e:3a:58:4c:03:19:89:df:23:b1:59:31:0d:fc:0f:
                    17:dd:fc:12:b9:f2:d6:aa:81:09:ce:72:4b:c5:49:
                    ef:b8:a3:3d:99:aa:b6:dd:b5:81:af:66:3b:67:a0:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FA:2F:BA:67:58:27:B8:36:B4:0E:80:A5:D5:7D:6A:44:3E:4A:43
            X509v3 Authority Key Identifier:
                keyid:E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:e5:d6:44:69:92:b0:d7:4f:24:b9:65:7d:69:d4:12:73:88:
         4d:2d:d0:83:80:c3:64:48:3d:74:e9:51:4e:3a:1a:cc:df:0b:
         0a:8c:54:fd:a4:97:01:ec:09:db:9c:2d:93:d1:56:7a:20:dc:
         55:8f:d2:26:3a:2a:54:03:ca:85:ed:47:60:b2:9a:8b:d7:34:
         89:f2:5f:21:d3:c8:17:ec:54:93:e7:00:73:b9:2b:dc:bb:d3:
         c9:a9:f1:b3:ca:8e:13:e3:09:ba:45:af:e9:84:b8:b5:24:33:
         69:15:34:6b:65:05:2e:7c:a3:fa:ec:5e:39:ff:43:29:0a:a0:
         24:cd:0b:4e:dc:88:91:1f:f1:6a:1a:b3:11:5f:ca:80:05:95:
         31:1a:69:28:97:4c:86:a3:c8:b3:3b:08:b5:fd:6a:44:97:75:
         56:db:f2:ee:8d:e6:67:45:02:df:57:9e:1f:f2:5a:22:22:27:
         0f:bf:6b:d6:b7:ba:fc:cc:aa:eb:e8:44:3d:5e:f7:e9:9c:b1:
         9d:c3:43:eb:ac:a5:eb:6a:af:8d:69:9d:5c:04:c8:c4:8d:47:
         4d:8c:1a:4b:61:70:37:a7:6e:94:09:38:d9:db:f4:c8:3c:54:
         c6:d4:43:bc:77:55:70:d6:7d:d0:9d:39:dc:8b:af:69:9f:2f:
         82:14:52:40
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQ4xb+tvGFGZ3NtWKTXtFupbSen4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBCMURERTRGQTU4NzI3Njc3OEI4RUQ2NTBCNjgyQzgy
MjkwQ0M3NDAeFw0yNjAyMDIwOTU1MDBaFw0yNzAyMDExMDAwMDBaMDMxMTAvBgNV
BAMTKDRBRkEyRkJBNjc1ODI3QjgzNkI0MEU4MEE1RDU3RDZBNDQzRTRBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR30+uzhqpp046aLm2/o4f2uk/
H10rmZR3hgeiJxKXLZ33qvB4IOnDO3+FSFhmO8VCEscCbLkNSwzHe9ZlogVukBfp
lm/lU7nfTlA7JuLJMiy8Nm7haMNNtzjMkXpZab+sAVl8joJyadKL+6HX6JaRooOv
Mob52crhLoGEr5JYeHpvwE8g2jFqUgi8Pxx6btcYg5PE1oZs9NQTyhwQIdVcsu4Z
nrWNiMklWF6XjzMoO1Sk94+5esOTPDNw229r07+vZ8oGK2QYdGsGkkGUw4JTFV46
WEwDGYnfI7FZMQ38Dxfd/BK58taqgQnOckvFSe+4oz2ZqrbdtYGvZjtnoP2DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSvovumdYJ7g2tA6ApdV9akQ+SkMwHwYDVR0j
BBgwFoAU4LHd5PpYcnZ3i47WULaCyCKQzHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
OTUxZGZlZS1hNzViLTQ0MjAtYTc1NS0yYzczNThiYWY3ZDMvMC9FMEIxRERFNEZB
NTg3Mjc2Nzc4QjhFRDY1MEI2ODJDODIyOTBDQzc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTBCMURERTRGQTU4NzI3Njc3OEI4RUQ2NTBCNjgyQzgyMjkw
Q0M3NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5NTFkZmVlLWE3NWItNDQyMC1h
NzU1LTJjNzM1OGJhZjdkMy8wLzMxMzAzMzJlMzEzNzM2MmUzNjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7BEMA0GCSqG
SIb3DQEBCwUAA4IBAQBQ5dZEaZKw108kuWV9adQSc4hNLdCDgMNkSD106VFOOhrM
3wsKjFT9pJcB7AnbnC2T0VZ6INxVj9ImOipUA8qF7UdgspqL1zSJ8l8h08gX7FST
5wBzuSvcu9PJqfGzyo4T4wm6Ra/phLi1JDNpFTRrZQUufKP67F45/0MpCqAkzQtO
3IiRH/FqGrMRX8qABZUxGmkol0yGo8izOwi1/WpEl3VW2/LujeZnRQLfV54f8loi
IicPv2vWt7r8zKrr6EQ9XvfpnLGdw0PrrKXraq+NaZ1cBMjEjUdNjBpLYXA3p26U
CTjZ2/TIPFTG1EO8d1Vw1n3QnTnci69pny+CFFJA
-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:22 2026 by rpki-client