This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          r8NqRUCsHtvXIJ0/QDdvuNRC6uOu98LXcwUGX23wEMs=
Subject key identifier:   A5:0F:55:00:A9:8A:D4:A8:F6:C2:C6:EC:D2:69:83:D0:6C:E3:82:8C
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       12A0B3D8631CF9188533FBE4921146BC84D8A643
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 31 Jan 2026 05:01:41 +0000
ROA not before:           Sat 31 Jan 2026 04:56:41 +0000
ROA not after:            Sat 30 Jan 2027 05:01:41 +0000
asID:                     135462
IP address blocks:        103.70.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a0:b3:d8:63:1c:f9:18:85:33:fb:e4:92:11:46:bc:84:d8:a6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Jan 31 04:56:41 2026 GMT
            Not After : Jan 30 05:01:41 2027 GMT
        Subject: CN=A50F5500A98AD4A8F6C2C6ECD26983D06CE3828C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6e:e9:21:37:05:1d:a7:80:93:c7:28:29:82:
                    37:a0:f8:06:4f:3f:b9:03:16:d0:70:52:2d:49:60:
                    59:0f:50:78:a8:f3:6a:9b:44:fa:27:b4:8b:bd:8f:
                    04:1c:46:76:88:cf:ea:d4:cb:d3:16:75:21:32:da:
                    bc:f6:25:47:c9:8e:cd:c0:26:b2:53:9f:44:42:27:
                    60:84:e6:ba:e8:24:76:99:02:2d:5c:66:d5:3e:0d:
                    0d:d4:3e:80:09:1a:b1:52:14:c3:7e:4a:fd:e1:3f:
                    65:4b:20:49:46:3b:13:ac:1d:4e:1a:98:e6:f2:3c:
                    37:e9:10:13:8a:5e:9f:34:b8:4d:62:07:33:35:77:
                    57:0f:92:ff:43:c6:d2:02:66:44:dc:42:b0:d9:29:
                    d1:96:01:73:55:9c:86:5c:09:d6:93:bd:f3:07:8b:
                    0b:67:cb:ef:4b:c3:a0:83:d9:98:d7:b4:bf:3e:6c:
                    7e:9a:e2:2e:b6:50:49:53:78:db:7e:7b:e2:8d:3b:
                    e6:a2:7a:9b:9e:77:51:c7:25:bc:4a:f1:f5:07:1d:
                    85:9f:ca:07:76:56:0e:c0:fa:6a:24:85:15:05:82:
                    27:ef:a1:db:ca:e3:8a:d1:25:14:27:bb:7b:87:16:
                    6b:7f:f3:89:5c:6d:5a:d7:99:f2:c0:55:1c:24:c0:
                    e4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0F:55:00:A9:8A:D4:A8:F6:C2:C6:EC:D2:69:83:D0:6C:E3:82:8C
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:70:56:a7:b0:22:09:9a:ef:e1:63:56:e4:a7:b1:5e:b3:
         2a:10:f5:02:72:6e:42:2a:9a:63:9d:de:b7:39:6b:ef:a3:94:
         6b:05:1b:32:23:c5:c9:05:9a:9d:41:22:01:96:50:84:68:e6:
         6d:7a:34:aa:31:36:21:a8:d4:a4:a8:0d:67:a0:fd:92:87:8e:
         f3:81:bb:9f:3d:6b:d1:08:57:a4:78:ce:5f:b5:d9:db:7e:a2:
         21:d4:e0:97:b8:bf:83:cd:dc:c7:19:ba:f5:11:a6:c2:6e:14:
         f3:4f:fc:9d:58:c7:f2:6c:20:52:a1:73:8c:c9:36:7d:da:55:
         5a:da:21:3d:28:7b:1f:8f:8f:0b:b9:10:e6:4c:a9:b5:a6:43:
         f0:e0:48:5a:ce:bf:32:3c:d8:cc:59:35:24:f0:45:b1:b5:1f:
         be:7e:da:01:c1:2e:7e:e1:37:1e:1c:79:28:90:cf:e8:88:7f:
         c9:c7:ac:d2:e7:51:65:a9:35:c5:ba:03:f0:aa:fd:ca:67:77:
         9a:f6:4e:a7:f8:b0:8a:9a:f0:03:df:c3:8d:fd:e6:51:0b:f8:
         b5:4f:5b:63:27:aa:04:04:03:14:5f:fb:3c:93:a9:80:62:ef:
         44:7c:7c:8c:37:92:74:dd:47:ef:01:c2:16:69:0e:29:b7:3c:
         10:56:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:38 2026 by rpki-client