This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31382e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31382e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          BDEKh8gnBvlltX9WR1GmG6qKqh+pe65R6Xx0+s/IyP8=
Subject key identifier:   45:52:4C:FD:CD:CE:51:AF:48:F4:C6:AB:15:70:22:9E:6F:81:3B:62
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       5FBCB70F1E51C8A0CBCBD013DAEFE16B6E8FA97E
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31382e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 31 Jan 2026 05:01:41 +0000
ROA not before:           Sat 31 Jan 2026 04:56:41 +0000
ROA not after:            Sat 30 Jan 2027 05:01:41 +0000
asID:                     135462
IP address blocks:        103.70.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 17:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bc:b7:0f:1e:51:c8:a0:cb:cb:d0:13:da:ef:e1:6b:6e:8f:a9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Jan 31 04:56:41 2026 GMT
            Not After : Jan 30 05:01:41 2027 GMT
        Subject: CN=45524CFDCDCE51AF48F4C6AB1570229E6F813B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:92:7c:e0:b8:7c:4f:8a:5b:d4:e7:e9:83:
                    03:25:41:1a:2b:40:bb:fa:54:06:32:38:27:9e:94:
                    60:75:d2:7a:53:28:3e:5c:eb:30:d3:32:b9:0c:c1:
                    7f:00:5f:7b:27:a5:8e:06:47:e4:05:fe:68:8e:bd:
                    57:43:42:5c:18:3a:c2:b4:ee:ff:79:28:0a:bb:e1:
                    89:f9:d6:a9:c0:de:79:24:8e:a0:6e:2f:5a:f7:c8:
                    57:81:9b:5f:11:01:cf:c3:c9:aa:39:ea:37:f7:99:
                    9c:fd:39:15:ec:12:88:38:48:39:c3:f3:0a:22:fd:
                    b8:79:45:6e:98:2b:f7:4f:61:cd:0c:5d:d8:bb:01:
                    50:37:90:56:d8:f3:05:88:71:53:1b:18:50:9c:f4:
                    c6:a9:bd:df:03:3b:a0:df:24:4c:82:4d:6b:98:f9:
                    35:b7:f6:82:77:f0:71:67:02:5f:55:8a:fc:a7:fe:
                    8f:68:1b:17:14:35:a1:bd:59:63:53:a4:4e:a8:33:
                    56:c0:73:b4:43:f8:2f:f8:36:1a:fe:61:a4:8c:b5:
                    41:87:4f:81:0e:c4:c7:14:25:b0:cb:7b:2c:c6:60:
                    dd:6c:ca:05:22:11:2a:d5:f9:37:c3:f1:61:eb:2b:
                    6b:93:de:02:4d:c3:f8:c2:3f:e8:9b:20:bd:79:12:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:52:4C:FD:CD:CE:51:AF:48:F4:C6:AB:15:70:22:9E:6F:81:3B:62
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31382e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:95:89:9d:e9:39:62:65:71:2b:c4:b7:be:94:c6:6e:1d:75:
         06:ce:db:65:80:36:c2:8e:59:37:3a:d4:bb:f2:cb:3b:db:34:
         0e:66:bd:e3:f8:cc:32:41:84:82:ab:5b:bb:bc:25:2d:fd:b5:
         86:1d:ff:f8:99:67:8d:9a:39:c6:7a:89:b1:c1:21:8d:a3:4e:
         12:f5:7c:6c:bb:d0:e5:35:9e:fc:a9:38:c4:95:5c:e5:35:5d:
         68:6b:15:7b:c2:c8:6c:71:4b:96:7c:8a:12:8e:58:5e:fd:a5:
         7e:19:11:a2:ac:ff:3e:d6:55:da:a8:16:11:cd:ce:c1:92:1d:
         6e:81:5c:3e:fe:8c:8c:ae:e1:c6:dc:22:cb:2e:5d:ea:34:61:
         d5:60:c9:24:82:24:55:ac:18:2d:04:7f:04:d8:22:35:fe:0f:
         a3:86:16:13:bb:90:bf:cc:e4:26:c5:cf:8f:95:d5:8b:3a:25:
         25:1a:df:01:41:c6:d9:26:78:7f:da:33:e9:9d:e4:41:12:16:
         df:4b:28:91:d7:1a:82:fb:aa:9b:56:99:5c:1e:be:8d:50:76:
         9f:88:9f:59:1c:6f:c3:cb:11:33:92:c3:b4:df:23:4d:9e:a8:
         08:8c:f1:7c:2d:52:41:47:e2:1a:d9:26:34:58:c8:3b:61:86:
         3e:72:8c:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUX7y3Dx5RyKDLy9AT2u/ha26PqX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC
NTM2OTVGQzAeFw0yNjAxMzEwNDU2NDFaFw0yNzAxMzAwNTAxNDFaMDMxMTAvBgNV
BAMTKDQ1NTI0Q0ZEQ0RDRTUxQUY0OEY0QzZBQjE1NzAyMjlFNkY4MTNCNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkpJ84Lh8T4pb1OfpgwMlQRor
QLv6VAYyOCeelGB10npTKD5c6zDTMrkMwX8AX3snpY4GR+QF/miOvVdDQlwYOsK0
7v95KAq74Yn51qnA3nkkjqBuL1r3yFeBm18RAc/Dyao56jf3mZz9ORXsEog4SDnD
8woi/bh5RW6YK/dPYc0MXdi7AVA3kFbY8wWIcVMbGFCc9Mapvd8DO6DfJEyCTWuY
+TW39oJ38HFnAl9Vivyn/o9oGxcUNaG9WWNTpE6oM1bAc7RD+C/4Nhr+YaSMtUGH
T4EOxMcUJbDLeyzGYN1sygUiESrV+TfD8WHrK2uT3gJNw/jCP+ibIL15Em2TAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQURVJM/c3OUa9I9MarFXAinm+BO2IwHwYDVR0j
BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz
RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2
OTVGQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04
ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGEjANBgkqhkiG
9w0BAQsFAAOCAQEARpWJnek5YmVxK8S3vpTGbh11Bs7bZYA2wo5ZNzrUu/LLO9s0
Dma94/jMMkGEgqtbu7wlLf21hh3/+JlnjZo5xnqJscEhjaNOEvV8bLvQ5TWe/Kk4
xJVc5TVdaGsVe8LIbHFLlnyKEo5YXv2lfhkRoqz/PtZV2qgWEc3OwZIdboFcPv6M
jK7hxtwiyy5d6jRh1WDJJIIkVawYLQR/BNgiNf4Po4YWE7uQv8zkJsXPj5XVizol
JRrfAUHG2SZ4f9oz6Z3kQRIW30sokdcagvuqm1aZXB6+jVB2n4ifWRxvw8sRM5LD
tN8jTZ6oCIzxfC1SQUfiGtkmNFjIO2GGPnKMvw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:58:41 2026 by rpki-client