This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa
File:                     3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa (raw, json)
Hash identifier:          Sa1fK6pgYDElHHofY035RXNXkmiq5pXQ+mZ92ple4FU=
Subject key identifier:   B2:D8:DF:6B:0C:D7:0B:45:3E:F6:49:32:85:B6:69:8D:01:47:95:15
Certificate issuer:       /CN=35AF7B054A8CC95835EC5A2F9275004D39521553
Certificate serial:       5B91D69718175E2F6F4D3D0C77907F4911811CB2
Authority key identifier: 35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa
Signing time:             Sat 03 Jan 2026 13:00:59 +0000
ROA not before:           Sat 03 Jan 2026 12:55:59 +0000
ROA not after:            Sat 02 Jan 2027 13:00:59 +0000
asID:                     147081
IP address blocks:        103.173.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl
                          rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:91:d6:97:18:17:5e:2f:6f:4d:3d:0c:77:90:7f:49:11:81:1c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35AF7B054A8CC95835EC5A2F9275004D39521553
        Validity
            Not Before: Jan  3 12:55:59 2026 GMT
            Not After : Jan  2 13:00:59 2027 GMT
        Subject: CN=B2D8DF6B0CD70B453EF6493285B6698D01479515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:4b:fd:72:5e:fb:da:a5:15:da:dd:c7:fd:
                    f1:b2:e6:86:96:a7:39:ba:33:90:da:e9:94:22:82:
                    fa:ee:ac:a4:9a:6f:e3:f5:6a:e0:25:76:1d:1f:05:
                    83:a1:dd:54:32:d2:32:a6:a2:80:68:96:2e:e2:82:
                    cb:df:be:1a:09:98:d5:60:b9:d4:36:23:3e:dd:23:
                    b0:86:0f:90:81:48:40:c3:bb:1f:99:b0:5e:a1:29:
                    dd:54:4c:ae:e2:60:84:c0:9e:2b:e3:86:f1:ae:8f:
                    b9:ec:d8:7c:8d:60:e3:79:7f:cf:18:f4:aa:67:3c:
                    f8:27:ec:0b:be:0e:69:19:c8:bb:ac:e6:be:d0:47:
                    bb:7b:fe:17:07:6a:2a:b9:33:00:3f:16:ab:fc:0c:
                    70:b3:4e:23:88:4c:82:b9:83:86:83:78:72:ef:b4:
                    69:49:a0:cd:2e:7c:b3:28:39:8b:80:23:64:74:cc:
                    ed:0f:ca:86:9c:3b:5f:87:da:3f:a0:c1:f4:e2:e2:
                    d7:ce:90:d1:67:df:bf:f8:a2:b0:db:72:87:bd:14:
                    a7:56:42:b4:09:99:39:20:e1:28:45:a1:2c:11:19:
                    d6:b0:56:6c:22:61:f4:ad:56:42:b7:dc:32:15:28:
                    00:fc:df:81:cf:2f:6f:47:d7:be:44:4b:a8:87:88:
                    83:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D8:DF:6B:0C:D7:0B:45:3E:F6:49:32:85:B6:69:8D:01:47:95:15
            X509v3 Authority Key Identifier:
                keyid:35:AF:7B:05:4A:8C:C9:58:35:EC:5A:2F:92:75:00:4D:39:52:15:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/35AF7B054A8CC95835EC5A2F9275004D39521553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35AF7B054A8CC95835EC5A2F9275004D39521553.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d46a9ca-1096-4fe4-8993-d0be97b54a76/0/3130332e3137332e3136342e302f32332d3233203d3e20313437303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:11:01:31:6f:bd:57:cb:88:16:4e:e9:04:ee:47:49:4b:80:
         27:22:fa:59:45:77:92:af:35:14:68:06:e2:1f:d7:72:39:c0:
         d6:2e:bc:c0:20:bb:9d:89:0e:58:a5:21:22:7c:24:c0:50:5c:
         2d:70:ee:c3:e6:9d:2c:b7:aa:9d:f8:1a:22:40:de:ef:50:78:
         05:b8:90:30:5c:d4:75:e3:c4:59:03:e2:a5:c1:94:7c:fe:1d:
         fe:33:bc:df:f8:07:ba:b3:87:7b:80:79:43:7b:a2:e9:2d:c2:
         4f:56:27:2a:d0:58:30:df:fb:ca:e6:df:49:b9:f1:e0:ea:bc:
         a9:e6:38:33:25:b9:59:00:ee:60:db:81:e7:94:93:00:f5:1b:
         5c:79:70:87:fb:86:cd:ff:97:b0:9a:13:fc:2d:ec:30:fe:e3:
         76:c6:3f:c8:27:92:cb:46:d0:ff:79:1b:a8:c2:9a:61:47:89:
         4b:dd:d1:56:c8:b2:b1:39:ab:8d:72:3f:71:36:e1:ec:7d:dd:
         c4:8a:50:1f:f1:60:5d:fd:5c:e8:e1:2a:45:2e:82:18:8c:da:
         65:33:87:d0:cb:4a:60:6b:13:c9:22:8a:02:2d:be:35:ba:bc:
         85:b6:e7:a5:74:6d:de:c8:1f:ef:47:90:01:15:7e:23:38:f7:
         7b:a6:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:43 2026 by rpki-client