This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa
File:                     3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (raw, json)
Hash identifier:          INkpUO7QcpsFX9uRfCsq0kQs6LP2TMwC7sWQRzGxwL4=
Subject key identifier:   6A:7B:97:DF:8A:BD:52:C0:78:0A:2E:69:4E:D0:1F:5B:2A:7A:1D:55
Certificate issuer:       /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial:       3D01A78565A7044926AFE311F554D05520840201
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa
Signing time:             Tue 23 Dec 2025 08:01:51 +0000
ROA not before:           Tue 23 Dec 2025 07:56:51 +0000
ROA not after:            Tue 22 Dec 2026 08:01:51 +0000
asID:                     139446
IP address blocks:        103.145.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
                          rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:01:a7:85:65:a7:04:49:26:af:e3:11:f5:54:d0:55:20:84:02:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
        Validity
            Not Before: Dec 23 07:56:51 2025 GMT
            Not After : Dec 22 08:01:51 2026 GMT
        Subject: CN=6A7B97DF8ABD52C0780A2E694ED01F5B2A7A1D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:b3:de:d9:55:a2:eb:a8:c9:ca:0a:8e:3a:
                    de:a8:71:7a:a2:84:dc:79:4d:64:48:32:39:7f:33:
                    13:6f:4a:26:8a:98:d8:e7:e8:5d:40:b3:78:b8:21:
                    99:b5:e3:41:a7:38:9f:ab:97:bc:80:bf:82:d7:cd:
                    33:58:6a:b6:7e:1b:f9:fc:f9:76:08:f9:5d:11:f9:
                    ec:46:ac:8c:a4:c3:4a:3c:66:2f:e8:85:67:d0:48:
                    4a:b9:ab:4a:f3:a9:60:26:6a:77:75:9c:37:96:41:
                    26:a9:f4:d4:49:47:41:e0:6a:de:15:eb:ae:14:f8:
                    ec:1f:33:53:c8:b1:09:2c:1b:f4:a7:5b:65:2e:24:
                    cf:02:f3:c9:b9:21:13:db:b8:4e:dd:b9:08:37:50:
                    05:b2:cb:da:74:6c:50:b2:00:01:4b:f8:ac:fa:68:
                    14:23:cc:66:08:55:3b:16:23:22:92:92:80:81:39:
                    24:98:57:ff:e6:36:ba:55:3d:17:82:ee:67:7d:78:
                    09:9e:2e:1d:4e:9f:01:c0:a7:be:00:5d:02:6d:9a:
                    a5:81:42:e6:b9:99:ae:53:fc:b7:f4:d3:b5:8c:3f:
                    3c:45:e6:2f:3b:a1:0a:f7:0f:f8:1f:8f:6c:01:99:
                    dd:90:a9:42:e0:cb:db:a2:13:0a:63:1d:0b:47:a8:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7B:97:DF:8A:BD:52:C0:78:0A:2E:69:4E:D0:1F:5B:2A:7A:1D:55
            X509v3 Authority Key Identifier:
                keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:01:70:be:85:ff:26:19:7e:41:3e:ae:ab:53:90:b2:29:18:
         a3:02:fd:21:59:be:c8:a6:8f:89:5b:7a:b6:fc:e3:e5:e1:d8:
         34:d0:f9:d1:bd:5b:80:6d:ee:65:34:3b:4e:82:13:be:7f:e8:
         e8:f3:98:f7:1f:ec:13:e8:96:c2:dc:c3:1a:a7:9a:74:59:65:
         84:3b:63:68:43:0f:c9:20:11:e9:ce:19:a3:41:df:2d:6e:ba:
         86:91:74:05:f4:68:56:68:b7:db:2b:29:80:ea:56:d2:c9:e5:
         df:90:f4:dc:10:d6:8c:b8:11:c8:1f:b5:5a:9f:5f:fb:9e:fe:
         d9:71:37:f5:6a:d4:22:dd:2c:30:a3:b9:ba:c7:71:c1:8f:e1:
         15:48:04:1a:bf:8a:9b:a6:8c:2c:26:d5:17:8f:ee:41:dc:0d:
         5c:ce:aa:57:08:dd:2b:cb:a8:06:ca:56:13:f7:f4:e7:7d:36:
         35:f5:57:e8:49:ad:cf:5a:3a:65:89:88:9c:0f:91:28:39:87:
         75:62:d5:b3:63:72:81:46:b1:3a:e2:49:cf:53:c5:49:3e:7f:
         4e:bd:69:b2:b8:e9:ff:6e:34:7b:5e:b3:9d:c5:26:16:1a:1d:
         5d:c9:97:da:be:4b:53:24:1d:d9:98:a9:34:85:c7:1a:82:c6:
         5e:a4:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 13:04:38 2026 by rpki-client