This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
File:                     3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          BXImbGD0gQ/N6bJsY3EceoekzYvvly2E1FsJUbVpe+g=
Subject key identifier:   E7:91:47:B5:98:D7:0D:8E:F3:FA:0A:93:8B:E6:68:E5:98:7B:A2:C6
Certificate issuer:       /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial:       56BF5707B1B52985B393756B8FF08DF52473A5DE
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
Signing time:             Tue 30 Dec 2025 03:00:03 +0000
ROA not before:           Tue 30 Dec 2025 02:55:03 +0000
ROA not after:            Tue 29 Dec 2026 03:00:03 +0000
asID:                     150552
IP address blocks:        103.86.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
                          rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:57:07:b1:b5:29:85:b3:93:75:6b:8f:f0:8d:f5:24:73:a5:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
        Validity
            Not Before: Dec 30 02:55:03 2025 GMT
            Not After : Dec 29 03:00:03 2026 GMT
        Subject: CN=E79147B598D70D8EF3FA0A938BE668E5987BA2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:3b:e5:ac:d3:6d:28:ba:2d:29:ab:8b:12:
                    eb:dc:df:2a:f2:2b:4d:10:85:0b:b0:88:a0:f3:2a:
                    5d:c1:d8:cf:96:d8:2d:47:56:79:22:4a:f6:66:09:
                    24:d7:61:cb:65:c2:ad:93:64:0d:f4:e2:85:ef:99:
                    9a:76:76:9c:5e:e6:96:a0:7b:bf:ae:d3:0b:03:8e:
                    a4:f0:04:f7:ff:ad:5f:f2:91:76:21:2a:b5:07:0e:
                    91:c0:a6:fc:5d:48:da:fc:38:0f:c6:6e:99:9a:0f:
                    d6:86:e0:67:2c:6e:76:73:be:c2:ac:91:fd:4a:ce:
                    2d:69:12:e2:d9:4b:c4:e1:b8:09:a5:04:d6:4d:e3:
                    3d:d6:00:1f:d3:91:46:62:3a:a4:90:0c:b4:da:22:
                    13:8b:42:4b:d2:c6:19:d5:f5:6f:89:c7:c1:dc:95:
                    74:fd:61:bf:ae:c0:fb:19:a2:0b:14:81:86:65:ee:
                    c2:c3:ca:36:08:a6:f3:72:eb:77:dc:ad:a2:94:ee:
                    ba:7f:48:92:33:41:7a:2c:32:5e:52:ed:98:6e:cb:
                    d3:a7:41:7e:57:17:1a:c6:c4:d2:f2:2c:76:06:0f:
                    63:bc:d6:1b:53:02:4c:0d:d5:e0:ff:8d:6a:b8:4a:
                    27:41:95:21:64:20:ea:4d:bc:14:8f:60:02:d9:f3:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:91:47:B5:98:D7:0D:8E:F3:FA:0A:93:8B:E6:68:E5:98:7B:A2:C6
            X509v3 Authority Key Identifier:
                keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:66:ba:f7:45:19:ab:ae:3e:3c:5c:f7:24:88:f3:14:5d:3b:
         35:2b:66:b6:94:54:d5:0d:eb:72:1b:9e:5b:1f:02:94:20:4e:
         7b:0d:28:d2:fd:f0:91:5c:cc:6d:07:e3:5d:0e:e5:ad:92:43:
         17:85:fd:c4:6b:bd:fe:64:19:d0:13:a2:67:9f:cb:1c:23:5e:
         0e:37:ce:31:0c:13:9f:f3:ec:1f:30:47:c0:07:7c:80:ff:ae:
         66:42:d3:56:68:b5:2a:4b:49:84:e2:23:70:19:3e:08:54:50:
         f1:16:7b:7a:6c:5b:53:c4:02:d6:43:2d:9c:dd:7b:0a:e2:f9:
         b5:ec:63:99:3a:dc:bd:84:2d:4e:d8:54:76:3e:53:3a:9f:ce:
         4c:72:fd:dd:4e:67:8b:f2:07:80:5b:67:68:30:e4:12:93:b2:
         d7:4d:e4:83:0b:ba:58:14:d8:c3:e1:12:59:01:2b:c9:c4:52:
         19:29:54:af:0e:96:da:04:47:8f:d3:be:4b:5e:3e:2b:ff:b0:
         9e:ff:21:30:38:e0:84:2c:31:3f:92:87:7f:71:d9:88:41:3a:
         4f:21:aa:48:41:a9:2e:b7:0f:8f:be:40:6c:fc:f3:3a:2d:31:
         4e:3f:a2:74:ff:6b:54:41:02:b9:43:a7:9c:8c:dc:fd:c7:55:
         44:bf:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:07:16 2026 by rpki-client