This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          AXguxGCyMmqijzUfDJ6sW4bhnWRijiQgcsQ13oNgZs4=
Subject key identifier:   17:8D:7E:D7:0A:EC:16:9C:37:8F:BD:D0:8E:4F:2B:72:B3:13:41:51
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       63AA7F14AED2A590935B78615D0F4CBF4476E2EB
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 31 Jan 2026 05:01:41 +0000
ROA not before:           Sat 31 Jan 2026 04:56:41 +0000
ROA not after:            Sat 30 Jan 2027 05:01:41 +0000
asID:                     135462
IP address blocks:        103.70.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:38:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:aa:7f:14:ae:d2:a5:90:93:5b:78:61:5d:0f:4c:bf:44:76:e2:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Jan 31 04:56:41 2026 GMT
            Not After : Jan 30 05:01:41 2027 GMT
        Subject: CN=178D7ED70AEC169C378FBDD08E4F2B72B3134151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:c0:31:43:b6:46:e0:ea:f8:f0:63:a7:01:
                    8e:7b:75:30:22:28:34:e6:5d:1e:64:ae:7a:51:a9:
                    4a:8d:b2:d6:aa:0b:92:fe:c5:1e:ee:0a:e9:8c:a6:
                    12:90:09:79:f2:af:25:59:ea:fe:ff:cc:91:fb:bc:
                    1a:70:cc:ce:5f:d9:ed:58:91:47:96:92:4e:a3:bb:
                    e1:20:f3:d7:45:4a:6c:b9:cf:6e:80:f1:31:5e:13:
                    25:74:7b:24:97:c1:75:13:fe:6e:e3:5d:f8:85:b5:
                    b1:40:2d:9f:ad:da:5c:13:37:ef:c1:d9:79:c8:97:
                    06:e9:3d:85:5c:c5:f4:1f:be:bc:7c:e5:05:81:73:
                    15:9d:96:8f:2f:d1:76:9a:50:53:40:b6:ef:3a:3d:
                    c2:67:39:0f:e0:6b:4b:37:df:b9:17:88:49:05:9c:
                    6b:0f:e7:99:17:2d:c3:6c:75:41:a8:99:e1:80:10:
                    fa:c2:46:8b:ec:e3:64:5c:68:c5:b4:19:c1:e1:32:
                    ae:37:e2:df:3b:41:02:0b:78:44:ca:68:b6:8f:ab:
                    5e:3e:8e:6f:03:04:d9:8f:4d:4a:a6:74:11:2d:bc:
                    44:17:f2:49:29:cc:17:83:9c:f7:7a:b2:6c:f2:f0:
                    05:69:a8:ae:3b:64:22:a5:0d:09:54:98:70:28:d9:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:7E:D7:0A:EC:16:9C:37:8F:BD:D0:8E:4F:2B:72:B3:13:41:51
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:e1:52:f6:d5:82:76:8e:2f:1d:f0:ab:af:0e:92:e6:4e:
         c7:63:8d:59:9c:bf:67:84:6d:f9:15:7c:3e:f8:62:fd:70:7e:
         e5:a0:0e:0c:cb:09:50:24:e6:f2:af:6a:7e:39:58:bb:bd:51:
         7a:c7:75:43:3a:0a:32:71:38:64:0f:95:50:8f:4a:3d:a4:22:
         4f:61:62:9c:aa:53:90:f8:95:8b:d0:21:85:f9:60:54:36:75:
         6e:52:58:24:b9:ab:a6:fb:0e:93:a7:86:6c:48:6c:f0:be:95:
         e8:ed:1a:02:4a:95:a8:3a:1e:2b:db:8a:99:be:77:4d:6c:03:
         d3:4c:99:19:b6:83:24:dd:5c:f0:d0:31:c7:d8:02:c0:a2:df:
         f7:8e:11:41:33:ad:00:3f:4b:32:37:df:fb:ff:7c:7f:a2:58:
         44:87:8b:59:e0:00:b4:b8:6d:eb:7f:0c:34:05:b2:eb:1a:d7:
         c0:0a:a1:b6:d7:ed:c5:39:bc:e0:b4:ba:ff:ca:45:f6:67:bb:
         9e:73:07:53:e0:41:46:5b:da:b0:f1:08:90:a3:78:df:94:e2:
         06:bf:0d:fc:b5:81:1e:b0:93:03:58:61:21:eb:58:2b:d5:ef:
         6e:13:47:38:77:bd:99:d6:d1:bc:52:10:bf:3d:e1:33:a7:09:
         40:2f:63:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:40 2026 by rpki-client