This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa
File:                     3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (raw, json)
Hash identifier:          viIMDthrb71zqv1fZqfsi9l1jzw0Csy97g9EKJWFEFg=
Subject key identifier:   23:45:16:B0:10:90:03:24:43:43:CF:49:FA:A4:AA:CC:32:E5:B1:22
Certificate issuer:       /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Certificate serial:       3A771F6D5C9B5D4860631C202244F3E8F4ADF6AB
Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa
Signing time:             Mon 02 Feb 2026 04:00:00 +0000
ROA not before:           Mon 02 Feb 2026 03:55:00 +0000
ROA not after:            Mon 01 Feb 2027 04:00:00 +0000
asID:                     141606
IP address blocks:        103.160.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl
                          rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:1f:6d:5c:9b:5d:48:60:63:1c:20:22:44:f3:e8:f4:ad:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
        Validity
            Not Before: Feb  2 03:55:00 2026 GMT
            Not After : Feb  1 04:00:00 2027 GMT
        Subject: CN=234516B0109003244343CF49FAA4AACC32E5B122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:98:cf:72:3e:d9:8a:cc:49:b8:19:28:16:
                    c1:1c:f1:7c:1d:1f:59:9d:ad:ff:4f:7c:2d:22:64:
                    f4:e9:55:d8:97:8b:35:c0:62:ce:bf:08:a8:2a:9a:
                    3b:af:28:a1:b5:a4:59:ab:1f:29:38:56:0d:db:af:
                    0d:43:d3:24:87:a3:f5:f5:d5:25:27:0f:f0:65:e8:
                    13:25:da:cf:87:b6:68:b7:d6:00:bd:1c:20:a3:cb:
                    c2:d7:01:93:67:b5:1a:e8:8c:23:9e:eb:7a:bc:99:
                    90:48:8a:88:bf:bd:58:b2:b9:c5:8f:54:20:f0:3a:
                    1b:db:16:85:44:ef:bc:c8:c8:b0:93:d4:25:29:05:
                    e2:b8:6e:d6:86:7f:26:40:c4:62:b5:a7:0e:62:e6:
                    94:c0:4b:bc:40:8d:22:ca:cc:47:9a:e1:5a:be:b8:
                    dd:52:71:8f:c0:03:27:67:76:7a:2b:2d:c7:f4:66:
                    60:21:c0:ec:b6:ff:0d:ca:60:f4:57:1d:bd:cb:4a:
                    9b:13:c5:d1:a8:60:4e:5f:0d:c6:8c:6e:2d:92:84:
                    1b:f9:7b:82:a8:18:d9:85:f6:20:e2:9f:d3:bc:ef:
                    ca:04:1d:14:85:ed:0a:0e:c6:c5:c1:21:71:2b:ef:
                    c0:05:de:d3:3b:dd:ba:8f:bc:d6:f5:03:55:a1:7e:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:16:B0:10:90:03:24:43:43:CF:49:FA:A4:AA:CC:32:E5:B1:22
            X509v3 Authority Key Identifier:
                keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:97:ad:d0:e9:56:4b:18:30:f7:7e:a2:f7:a0:17:96:08:74:
         4b:ae:3a:9c:6c:2c:aa:44:7e:de:c8:e7:01:86:28:13:46:56:
         03:91:d3:5b:ed:a8:3d:0f:da:5c:76:24:b2:16:60:9b:85:66:
         81:24:78:e2:92:e6:de:e8:a4:03:e3:3d:a1:06:f9:09:5d:be:
         5c:b1:41:be:f6:0b:15:f2:ac:12:d6:03:35:5c:5a:ff:63:d9:
         d8:47:fe:b5:38:39:9f:cd:44:8f:27:f4:97:aa:8b:b0:3f:dc:
         52:27:76:e5:77:43:7c:7b:1b:eb:43:b3:3a:be:de:e6:00:2f:
         86:35:d1:5e:b8:37:ca:7c:14:b7:42:1b:87:6b:8e:ae:09:1b:
         e6:29:bc:cb:3a:fe:30:bd:b4:d1:0f:fc:27:ac:6d:b5:b1:c1:
         3c:1c:e2:63:8a:00:54:3f:dc:49:9f:a6:4c:90:4e:ee:4e:3b:
         19:b7:74:ad:11:86:26:c3:cf:80:38:6d:9c:ae:a9:41:6b:82:
         1d:d0:67:42:b4:1f:46:a6:c1:03:54:1b:29:02:ca:75:fb:b8:
         86:93:41:c7:1a:4b:80:d1:35:09:7b:74:c1:ad:1d:4d:4a:d3:
         90:8c:6f:6c:31:fc:7b:d2:6c:62:07:94:55:c1:0d:af:de:35:
         2e:94:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:23 2026 by rpki-client