This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          C86D7uEekeGvTmXVujqb0bxFjg5sWER8alGR0xcQrmY=
Subject key identifier:   5E:63:A4:41:40:92:59:F8:4A:EB:DB:B8:62:AB:CD:14:96:2C:E6:AA
Certificate issuer:       /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial:       2AD27A075FE60D0D038B561C49FC310A5966F3F0
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
Signing time:             Mon 29 Dec 2025 09:02:35 +0000
ROA not before:           Mon 29 Dec 2025 08:57:35 +0000
ROA not after:            Mon 28 Dec 2026 09:02:35 +0000
asID:                     136052
IP address blocks:        103.186.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl
                          rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 04:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d2:7a:07:5f:e6:0d:0d:03:8b:56:1c:49:fc:31:0a:59:66:f3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Validity
            Not Before: Dec 29 08:57:35 2025 GMT
            Not After : Dec 28 09:02:35 2026 GMT
        Subject: CN=5E63A441409259F84AEBDBB862ABCD14962CE6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:54:eb:dd:4d:7e:1d:c8:89:92:fc:0b:5c:
                    15:e1:ee:44:a5:5c:1d:6b:1e:ed:bd:d6:19:66:94:
                    a3:48:95:a0:71:1c:af:68:0c:c4:f5:b2:e8:1a:cc:
                    cf:cf:d2:c9:53:fc:cf:87:f1:91:7c:1f:1f:cc:ad:
                    e3:cd:e7:65:47:fa:4a:23:5a:ca:5a:6f:6d:e5:c3:
                    99:6c:28:82:c4:15:e9:56:4e:93:57:82:b0:e9:4e:
                    cf:a0:45:4c:06:d8:3b:4f:4a:49:f1:03:d2:e3:14:
                    3a:0b:2a:5a:24:65:ca:9f:ab:c4:d6:4b:74:94:65:
                    a7:e0:bd:30:6e:09:72:7a:ed:f6:29:dc:af:34:69:
                    a6:e1:b9:d1:f1:e5:af:4d:2b:0e:c3:2b:0a:0d:f9:
                    82:1f:30:5a:3e:ea:96:89:2d:2e:1c:10:e4:4d:2b:
                    21:16:aa:4b:ad:91:17:f2:97:e1:6c:2a:05:00:ba:
                    13:8b:2a:59:8f:c7:d7:84:bc:ad:a8:d0:dc:c8:3a:
                    56:b8:f8:06:85:6b:ab:d0:94:08:99:d9:f9:af:67:
                    74:29:ad:c4:e8:a5:21:dd:0f:19:09:9c:e5:3e:0d:
                    62:70:92:9b:83:6b:81:f8:89:cf:35:dc:bc:cf:e9:
                    30:3a:50:76:23:a9:e5:0c:7d:46:46:c1:a3:c5:1b:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:63:A4:41:40:92:59:F8:4A:EB:DB:B8:62:AB:CD:14:96:2C:E6:AA
            X509v3 Authority Key Identifier:
                keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:2e:6a:8b:60:ee:da:f0:18:9e:85:4c:b4:21:80:80:a6:
         da:5c:1b:a3:79:e3:08:9f:fe:3b:b4:58:fd:3e:0c:02:05:f6:
         4a:e4:e3:1b:75:56:3c:e9:95:c5:4b:cd:c5:00:d8:a0:85:f4:
         07:70:58:04:1a:1f:9e:25:0f:d4:f8:6f:1c:4c:cd:e3:9d:91:
         dd:ab:c6:2e:79:c3:ad:f8:eb:8a:1e:ac:d7:f3:56:66:3c:a3:
         f1:89:ed:04:b3:c9:59:e3:3d:85:b5:fd:cb:b3:bf:88:4c:b5:
         f3:2c:dd:3d:eb:b7:71:0d:39:66:ef:98:66:18:81:0d:65:50:
         03:30:f0:6b:80:da:89:1e:3b:d3:2b:39:1b:ca:31:1a:d1:f6:
         b8:34:61:40:f3:21:90:ef:db:db:db:ce:12:2f:4a:f7:23:15:
         84:2e:2e:de:55:3b:99:a7:90:8c:24:aa:a6:45:84:52:52:54:
         f0:27:eb:12:e1:97:1a:f1:11:c4:31:31:a5:12:20:33:91:45:
         1c:dd:96:2c:4f:6a:c2:b4:c1:73:8a:14:3f:a9:78:8b:6a:96:
         38:6d:47:01:59:be:68:6b:69:f9:76:19:94:ab:90:b1:25:82:
         69:9b:cd:12:eb:47:ef:61:98:98:63:cb:09:c7:8a:6f:2f:24:
         74:27:8a:4a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKtJ6B1/mDQ0Di1YcSfwxCllm8/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0Ex
QURBNUQ3MDAeFw0yNTEyMjkwODU3MzVaFw0yNjEyMjgwOTAyMzVaMDMxMTAvBgNV
BAMTKDVFNjNBNDQxNDA5MjU5Rjg0QUVCREJCODYyQUJDRDE0OTYyQ0U2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZFTr3U1+HciJkvwLXBXh7kSl
XB1rHu291hlmlKNIlaBxHK9oDMT1sugazM/P0slT/M+H8ZF8Hx/MrePN52VH+koj
Wspab23lw5lsKILEFelWTpNXgrDpTs+gRUwG2DtPSknxA9LjFDoLKlokZcqfq8TW
S3SUZafgvTBuCXJ67fYp3K80aabhudHx5a9NKw7DKwoN+YIfMFo+6paJLS4cEORN
KyEWqkutkRfyl+FsKgUAuhOLKlmPx9eEvK2o0NzIOla4+AaFa6vQlAiZ2fmvZ3Qp
rcTopSHdDxkJnOU+DWJwkpuDa4H4ic813LzP6TA6UHYjqeUMfUZGwaPFG3LRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXmOkQUCSWfhK69u4YqvNFJYs5qowHwYDVR0j
BBgwFoAU4JZ1Se8y2J6f8WOPzxg0ehraXXAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MzdhNmRkOC1hODQzLTQ2OTgtYTVmMy0zZWVjNDY4ZDE0YTQvMC9FMDk2NzU0OUVG
MzJEODlFOUZGMTYzOEZDRjE4MzQ3QTFBREE1RDcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA5Njc1NDlFRjMyRDg5RTlGRjE2MzhGQ0YxODM0N0ExQURB
NUQ3MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzN2E2ZGQ4LWE4NDMtNDY5OC1h
NWYzLTNlZWM0NjhkMTRhNC8wLzMxMzAzMzJlMzEzODM2MmUzMDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe6ADANBgkqhkiG
9w0BAQsFAAOCAQEAoEwuaotg7trwGJ6FTLQhgICm2lwbo3njCJ/+O7RY/T4MAgX2
SuTjG3VWPOmVxUvNxQDYoIX0B3BYBBofniUP1PhvHEzN452R3avGLnnDrfjrih6s
1/NWZjyj8YntBLPJWeM9hbX9y7O/iEy18yzdPeu3cQ05Zu+YZhiBDWVQAzDwa4Da
iR470ys5G8oxGtH2uDRhQPMhkO/b29vOEi9K9yMVhC4u3lU7maeQjCSqpkWEUlJU
8CfrEuGXGvERxDExpRIgM5FFHN2WLE9qwrTBc4oUP6l4i2qWOG1HAVm+aGtp+XYZ
lKuQsSWCaZvNEutH72GYmGPLCceKby8kdCeKSg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:44 2026 by rpki-client