This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          2L8dIdFnu3el0R5ZJrBbgHyyhcGR7++TSiT4qb543Dw=
Subject key identifier:   4A:A0:AB:C2:F3:69:BB:9B:B2:00:28:8F:EF:2E:7A:01:80:57:B0:3D
Certificate issuer:       /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
Certificate serial:       20B6E5A19DA0043D40F7D4E54621CF486EFB7BD6
Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:35:41 +0000
ROA not before:           Thu 08 Jan 2026 21:30:41 +0000
ROA not after:            Thu 07 Jan 2027 21:35:41 +0000
asID:                     154410
IP address blocks:        103.112.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl
                          rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 02:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:e5:a1:9d:a0:04:3d:40:f7:d4:e5:46:21:cf:48:6e:fb:7b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C
        Validity
            Not Before: Jan  8 21:30:41 2026 GMT
            Not After : Jan  7 21:35:41 2027 GMT
        Subject: CN=4AA0ABC2F369BB9BB200288FEF2E7A018057B03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:7c:d3:e7:64:c2:81:44:1c:e0:c0:df:1c:
                    b3:6e:25:5f:53:c8:0e:69:9e:cf:9f:30:65:b9:2c:
                    5a:6b:17:4d:5d:34:f1:e8:5a:c6:d1:d5:2f:a4:34:
                    50:8a:b2:33:6f:1d:3a:f8:4a:34:7e:d1:13:00:39:
                    cf:d6:6c:2c:d3:16:d5:e5:1b:40:2c:9b:19:16:4c:
                    5d:6c:f9:8f:96:37:f1:dd:f6:d1:52:5d:78:da:58:
                    d6:cb:62:c3:e3:f4:45:d4:13:1c:47:23:46:83:d3:
                    f5:f3:5c:00:a1:dc:af:07:a1:c0:29:b3:28:2e:02:
                    35:aa:84:5b:97:c4:0f:25:34:e7:54:f6:c9:76:84:
                    7d:27:f8:9a:a5:6e:32:71:91:b5:41:06:a4:66:3b:
                    11:6c:c8:7e:94:0f:fd:55:58:8d:60:e9:2a:5d:ad:
                    7a:9c:ac:ad:c8:62:75:0b:81:52:48:ce:1d:c1:22:
                    07:68:cd:55:b2:0d:a1:f1:0d:3f:04:34:32:2c:db:
                    ed:26:64:d3:eb:82:b6:44:75:89:ff:9a:20:e4:6c:
                    2b:4c:5d:36:b4:10:e8:01:bc:47:09:b2:48:b9:d8:
                    52:4f:7c:48:ba:a8:68:af:b7:cc:7f:18:89:79:f6:
                    b2:17:3e:9d:70:b7:64:7f:4b:15:99:d4:30:10:33:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A0:AB:C2:F3:69:BB:9B:B2:00:28:8F:EF:2E:7A:01:80:57:B0:3D
            X509v3 Authority Key Identifier:
                keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134342e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:af:7f:fe:5c:c4:74:2e:07:5f:f6:d5:db:14:2f:d0:5b:b2:
         2d:84:3f:15:95:e2:16:33:78:57:be:7e:2b:cb:b7:1b:82:19:
         d6:43:52:67:ae:23:0a:e0:95:ef:96:52:0e:c5:78:b9:33:72:
         5e:35:0a:d1:50:a9:ae:98:ee:e5:8d:21:3b:e3:76:29:3d:ea:
         df:69:5c:54:ac:4a:17:b2:83:6b:34:73:fd:dd:0e:40:44:0e:
         e7:cd:41:ce:82:d7:d6:59:85:6c:14:cf:ba:be:87:8d:cf:64:
         e2:bd:52:f4:c7:c0:f3:e0:37:96:de:1b:ef:54:94:40:c3:b6:
         5b:cc:2c:fc:e4:ce:be:b0:df:80:be:95:40:12:4e:3a:22:a8:
         df:ef:51:a5:b2:8b:f9:1a:4d:e3:4d:66:83:d0:e7:20:83:d6:
         9d:77:2d:ba:c4:ff:ba:1c:75:3d:3e:c8:db:e5:2a:cf:81:43:
         83:64:27:e3:9f:56:e6:19:36:35:79:53:27:c1:0f:10:fa:8d:
         6e:e1:dc:19:12:19:f0:19:55:18:15:cf:07:f7:aa:c6:e2:2f:
         e6:4f:19:bc:f4:15:65:94:43:da:cf:fb:62:10:52:e7:52:03:
         3e:9c:bf:2a:dd:33:9c:b7:80:4c:99:bd:a8:1f:42:73:db:5e:
         52:51:c9:af
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUILbloZ2gBD1A99TlRiHPSG77e9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC
MkM5ODEzQzAeFw0yNjAxMDgyMTMwNDFaFw0yNzAxMDcyMTM1NDFaMDMxMTAvBgNV
BAMTKDRBQTBBQkMyRjM2OUJCOUJCMjAwMjg4RkVGMkU3QTAxODA1N0IwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCci3zT52TCgUQc4MDfHLNuJV9T
yA5pns+fMGW5LFprF01dNPHoWsbR1S+kNFCKsjNvHTr4SjR+0RMAOc/WbCzTFtXl
G0AsmxkWTF1s+Y+WN/Hd9tFSXXjaWNbLYsPj9EXUExxHI0aD0/XzXACh3K8HocAp
syguAjWqhFuXxA8lNOdU9sl2hH0n+JqlbjJxkbVBBqRmOxFsyH6UD/1VWI1g6Spd
rXqcrK3IYnULgVJIzh3BIgdozVWyDaHxDT8ENDIs2+0mZNPrgrZEdYn/miDkbCtM
XTa0EOgBvEcJski52FJPfEi6qGivt8x/GIl59rIXPp1wt2R/SxWZ1DAQM6SfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUSqCrwvNpu5uyACiP7y56AYBXsD0wHwYDVR0j
BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew
QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5
ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05
MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzQzNDMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncJAwDQYJ
KoZIhvcNAQELBQADggEBAFivf/5cxHQuB1/21dsUL9Bbsi2EPxWV4hYzeFe+fivL
txuCGdZDUmeuIwrgle+WUg7FeLkzcl41CtFQqa6Y7uWNITvjdik96t9pXFSsShey
g2s0c/3dDkBEDufNQc6C19ZZhWwUz7q+h43PZOK9UvTHwPPgN5beG+9UlEDDtlvM
LPzkzr6w34C+lUASTjoiqN/vUaWyi/kaTeNNZoPQ5yCD1p13LbrE/7ocdT0+yNvl
Ks+BQ4NkJ+OfVuYZNjV5UyfBDxD6jW7h3BkSGfAZVRgVzwf3qsbiL+ZPGbz0FWWU
Q9rP+2IQUudSAz6cvyrdM5y3gEyZvagfQnPbXlJRya8=
-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:26 2026 by rpki-client