This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31372e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          a77WyK1qTdgIRkUuNKGD5zyWCvIAGB4ZwYU+fJ2Gtpw=
Subject key identifier:   F3:72:36:2E:01:34:F9:25:D0:4A:6E:2C:90:0F:8B:7B:FD:7E:9E:CD
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       46CAD638B0788A47C22BB12A95143395D0C9DFD8
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 31 Jan 2026 05:01:41 +0000
ROA not before:           Sat 31 Jan 2026 04:56:41 +0000
ROA not after:            Sat 30 Jan 2027 05:01:41 +0000
asID:                     135462
IP address blocks:        103.70.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 17:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ca:d6:38:b0:78:8a:47:c2:2b:b1:2a:95:14:33:95:d0:c9:df:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Jan 31 04:56:41 2026 GMT
            Not After : Jan 30 05:01:41 2027 GMT
        Subject: CN=F372362E0134F925D04A6E2C900F8B7BFD7E9ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:1c:c5:24:6a:5b:2f:8c:22:d8:a9:b1:e1:
                    52:65:31:74:c1:db:cd:c0:d1:42:07:68:85:03:70:
                    61:f0:85:49:0c:2f:9e:27:c0:7f:65:47:f6:37:7b:
                    1b:a8:da:c2:bd:2d:fa:2d:80:3f:f0:89:f6:47:1e:
                    3e:85:20:a8:4d:9f:4a:06:2d:00:93:e2:09:d0:ad:
                    22:a3:80:2f:b2:a8:84:d9:9b:83:36:8b:49:99:26:
                    f4:a7:77:34:a0:b8:e0:d9:6e:21:26:88:3c:d7:97:
                    b0:5c:3a:10:95:4e:49:c8:4c:4f:b8:01:a8:5c:2a:
                    0b:44:03:de:83:eb:d9:5f:35:74:5a:68:e3:70:ce:
                    98:59:c0:37:46:52:dd:ad:6c:5b:f3:56:95:e8:93:
                    6b:18:db:dd:8d:26:10:16:77:f8:e4:d4:5f:aa:d5:
                    de:49:23:bb:ec:e3:d0:e9:2e:2f:c5:7f:79:f6:cd:
                    03:d6:bf:a3:bd:29:cc:12:dc:c1:4c:e5:23:1e:87:
                    96:36:62:5d:dd:c4:01:7e:3e:d9:dd:7d:34:95:27:
                    0d:b9:5c:9b:39:29:5a:4e:ab:82:f6:ed:60:d5:62:
                    4f:c5:47:2c:b1:87:ea:a6:a3:02:cf:52:39:36:e0:
                    43:16:76:8c:ca:3d:cb:a1:2a:6c:a5:d1:d5:b0:84:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:72:36:2E:01:34:F9:25:D0:4A:6E:2C:90:0F:8B:7B:FD:7E:9E:CD
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31372e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:af:b1:c8:b0:9c:08:ff:0b:34:f6:b6:67:51:3a:c9:15:
         7f:03:e3:fb:c2:f3:77:a1:e1:bb:2a:fd:d6:0f:e5:92:36:89:
         55:8a:4f:8c:c0:d6:fd:b7:2c:cc:e5:d9:1f:b6:8a:7e:09:f9:
         3c:39:3b:3b:0a:a7:a4:3f:3a:d3:14:eb:fa:5d:5d:8a:c0:21:
         22:87:12:41:8a:a9:d2:ca:72:9f:98:26:e7:f9:d5:69:ab:ae:
         1f:36:44:99:e2:4c:a4:35:b7:b0:36:d5:f0:b9:d1:45:02:45:
         f0:c3:47:8f:bf:c3:67:ab:54:b5:81:7d:51:52:e3:54:c3:60:
         32:cb:9d:09:e6:cf:ff:5e:02:ea:5d:1c:18:92:c7:ed:f1:34:
         18:cf:99:ec:81:94:5f:06:be:ba:58:b6:d8:70:ac:c1:86:43:
         ea:9f:07:ce:d4:0b:d0:2f:dc:2d:f0:7a:94:3f:61:80:4a:97:
         fd:f7:66:11:49:65:06:b5:59:4b:ac:66:ad:e8:73:d5:6a:d1:
         4b:c6:ca:4a:64:07:49:fc:db:01:8b:2a:4b:f4:a1:6c:67:ad:
         7c:8c:c4:87:84:0a:0e:a7:52:94:82:fd:39:86:19:c2:2a:48:
         cb:99:f2:bb:a0:a3:e0:92:51:9a:fd:cd:23:42:59:0a:92:81:
         9a:f7:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:40 2026 by rpki-client