This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa
File:                     3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (raw, json)
Hash identifier:          qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=
Subject key identifier:   1D:B7:51:F5:F0:A1:39:AE:05:FA:98:BE:BE:C6:48:B6:48:75:7A:AA
Certificate issuer:       /CN=3BA10823C279932D7573B930625CD2884433C744
Certificate serial:       377843C5110FFDC7E04BAFC930F45EA3DF1AACFA
Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa
Signing time:             Sat 31 Jan 2026 12:00:00 +0000
ROA not before:           Sat 31 Jan 2026 11:55:00 +0000
ROA not after:            Sat 30 Jan 2027 12:00:00 +0000
asID:                     142368
IP address blocks:        103.170.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
                          rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 20:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:78:43:c5:11:0f:fd:c7:e0:4b:af:c9:30:f4:5e:a3:df:1a:ac:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA10823C279932D7573B930625CD2884433C744
        Validity
            Not Before: Jan 31 11:55:00 2026 GMT
            Not After : Jan 30 12:00:00 2027 GMT
        Subject: CN=1DB751F5F0A139AE05FA98BEBEC648B648757AAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:62:15:aa:d9:da:d6:7c:3d:5e:a6:62:6f:
                    cc:ac:d6:64:74:79:85:a3:19:e2:86:a2:76:ca:43:
                    c2:62:c8:61:89:5b:b5:19:9a:63:10:51:b6:2e:b8:
                    c3:7b:34:75:8f:7b:e2:a5:33:f0:07:75:34:f4:9c:
                    07:7a:10:80:12:4f:ba:50:96:96:31:ef:2b:e8:25:
                    ef:ce:a9:4e:92:7b:e0:c0:a5:83:1d:09:a5:04:c8:
                    a6:74:20:15:69:3c:99:d9:e0:9d:f2:6f:a6:7a:62:
                    02:89:16:c8:c0:59:9d:9e:f5:4c:5b:fc:67:77:bb:
                    0f:d0:64:8d:a5:e1:44:eb:79:bd:7c:3e:4f:3f:2f:
                    9a:e5:92:47:3b:1e:91:13:c7:c8:0b:4e:77:1d:bf:
                    1c:6f:ed:75:de:6f:35:c8:16:ca:79:4e:25:b3:32:
                    83:e8:0b:13:24:cc:b7:3d:ac:1f:18:25:41:ce:1a:
                    3c:aa:fd:69:8a:18:c9:e2:00:d3:4d:f0:d1:b3:63:
                    a3:b1:27:6e:5d:cd:06:88:20:11:94:64:0c:e6:40:
                    b2:84:89:9e:31:0e:40:0b:a7:a4:7b:d6:e3:3c:ea:
                    48:f1:69:78:5e:f8:e2:d3:cd:66:ff:b6:1a:d5:37:
                    24:48:3a:2d:3c:1b:df:64:6e:48:2e:18:ce:58:ee:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B7:51:F5:F0:A1:39:AE:05:FA:98:BE:BE:C6:48:B6:48:75:7A:AA
            X509v3 Authority Key Identifier:
                keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:ce:13:84:69:c9:5d:2e:6b:7c:55:73:9f:fd:1f:59:05:
         fe:ed:40:4e:3a:83:c6:b3:1c:f6:6e:91:49:86:3d:8e:94:e6:
         51:c1:9e:93:e9:8c:08:f2:d4:25:6d:fb:e8:2a:90:70:22:f7:
         44:92:88:4d:c0:d4:82:5c:5b:11:42:d0:dd:6c:94:1c:aa:72:
         d6:24:37:f8:ea:7f:fc:cc:54:55:5c:6c:14:9f:3b:f1:6d:6b:
         14:4b:74:b1:d3:6a:c0:5e:29:d0:77:f6:8e:0e:5e:e3:60:fb:
         4c:1f:02:38:56:22:ca:ca:55:6c:b7:16:73:53:19:12:57:0e:
         8d:8e:49:77:d2:bb:0e:25:91:8d:0a:f8:5f:61:7b:96:6e:99:
         68:4e:c5:27:da:43:63:66:71:41:2a:c6:e4:93:d1:be:83:72:
         9a:ad:21:d6:f4:cd:f0:bc:bf:53:82:5f:03:bb:01:d4:8c:d7:
         76:41:f8:b0:39:51:da:92:94:43:5a:f4:0e:d9:5b:e4:94:21:
         d2:0f:b0:9a:f1:d5:be:4d:82:56:df:5a:c8:4c:af:eb:06:e2:
         1c:1a:dd:8e:81:94:ff:2f:12:36:67:5b:93:e3:e0:81:51:63:
         67:98:a0:bc:cb:a8:c7:7a:85:f0:9b:df:22:90:91:b3:7c:88:
         f9:2d:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:02:16 2026 by rpki-client