This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa
File:                     3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (raw, json)
Hash identifier:          kq+NuC2L3vEb1GZ+wb9CoyHOvi8YFEOs7gaELxt5HT4=
Subject key identifier:   A9:AD:C0:59:23:AF:B1:C5:0C:1A:5B:9E:35:64:03:B7:BC:1C:24:61
Certificate issuer:       /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA
Certificate serial:       582883512CDC68734697C0195F73048BC14F00E5
Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa
Signing time:             Fri 26 Dec 2025 00:00:01 +0000
ROA not before:           Thu 25 Dec 2025 23:55:01 +0000
ROA not after:            Fri 25 Dec 2026 00:00:01 +0000
asID:                     150924
IP address blocks:        103.199.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl
                          rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 01:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:83:51:2c:dc:68:73:46:97:c0:19:5f:73:04:8b:c1:4f:00:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA
        Validity
            Not Before: Dec 25 23:55:01 2025 GMT
            Not After : Dec 25 00:00:01 2026 GMT
        Subject: CN=A9ADC05923AFB1C50C1A5B9E356403B7BC1C2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:ce:67:29:e0:ab:c4:7d:a7:1a:fa:d5:19:
                    41:e8:54:69:c9:53:06:cc:17:e0:e3:4b:88:19:54:
                    97:bf:08:fe:87:29:6d:26:f9:bd:8a:6c:08:db:7b:
                    2d:c0:78:ee:20:57:da:4b:d1:d7:bf:a0:ef:f7:c1:
                    fa:3a:46:e5:66:11:52:ec:d3:fc:1b:1f:15:d6:13:
                    33:49:83:a4:f1:e3:6b:35:29:fc:22:3b:2e:87:5c:
                    d9:f2:46:91:da:19:49:91:c7:a3:d7:7f:45:9e:d3:
                    e5:4e:0f:18:d4:0d:41:6a:54:6e:14:0e:1b:02:e0:
                    16:57:b0:2e:2d:96:42:64:13:12:b1:71:c7:d6:1f:
                    11:04:5a:48:ed:ec:07:d5:ec:ca:07:36:ef:bd:cb:
                    7d:7f:48:c8:68:6f:ae:52:92:14:0d:d7:95:2c:0e:
                    67:00:01:86:f0:36:6d:c3:fd:7d:05:aa:64:42:bb:
                    05:ca:76:c8:7e:1d:61:a9:72:a0:d4:b9:b1:a4:3b:
                    5a:81:8f:91:f5:ca:7c:b6:97:9c:75:ec:05:3e:33:
                    21:d3:a0:8a:62:8a:00:fb:a8:b4:44:e0:a0:59:62:
                    00:5f:b0:fe:2d:96:bb:a5:d0:f3:d9:93:47:69:4c:
                    8d:63:fc:c3:26:76:08:ae:41:84:68:6a:f6:77:93:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:C0:59:23:AF:B1:C5:0C:1A:5B:9E:35:64:03:B7:BC:1C:24:61
            X509v3 Authority Key Identifier:
                keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:40:2d:f2:1b:16:89:c8:b4:ea:8a:e1:65:e7:43:c8:df:c7:
         96:f7:83:99:1a:d8:90:06:a3:a0:7d:82:1f:4d:3b:93:37:52:
         ef:5f:b7:bd:15:6c:dc:36:5e:20:bc:18:d8:69:d0:bb:e2:f2:
         7a:fc:f2:4e:04:73:b0:ac:71:e0:ab:13:06:15:a3:f9:e1:1f:
         62:66:96:89:bb:98:7e:07:a1:86:f4:ca:cd:6a:ac:92:07:5c:
         4f:5b:4a:8c:6b:cc:da:94:31:fd:3b:50:8d:9a:a2:8d:42:35:
         12:48:9c:95:02:1a:a5:69:00:b5:32:c5:42:cb:1d:f0:cc:67:
         38:ae:17:7c:3f:40:b7:34:e5:3f:7e:3c:a9:c6:a5:45:8d:4f:
         59:a1:31:8e:23:f6:17:a6:9f:08:e7:20:f1:b3:65:cb:5e:c6:
         f7:cd:81:0a:27:ec:85:83:4f:52:a9:98:e8:82:49:6f:d9:90:
         92:1a:31:e3:ab:61:62:78:a5:f6:5c:b8:31:c0:fc:e3:9e:b4:
         25:79:c8:bc:e4:9d:67:c3:ad:7f:8b:2d:96:1b:1d:75:23:d4:
         26:5f:21:ae:4f:0a:7c:dc:05:1c:5c:fa:b7:6a:00:f8:77:d4:
         d5:69:e4:61:8a:55:8b:fc:0d:01:d4:bc:77:4d:08:56:bc:26:
         af:dd:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:11 2026 by rpki-client