This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
File:                     3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (raw, json)
Hash identifier:          pWW6aChZuEDy/+0vrjLWEhH3QTbtcqu7md1QFPSZMbA=
Subject key identifier:   B2:C3:18:69:67:89:AA:7B:D6:87:46:4D:D8:13:62:95:DF:F2:F9:DF
Certificate issuer:       /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial:       64D3BAA9807CEA8400B103E67C6BA4E06AD0C38D
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
Signing time:             Tue 23 Dec 2025 08:01:51 +0000
ROA not before:           Tue 23 Dec 2025 07:56:51 +0000
ROA not after:            Tue 22 Dec 2026 08:01:51 +0000
asID:                     139446
IP address blocks:        103.145.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
                          rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d3:ba:a9:80:7c:ea:84:00:b1:03:e6:7c:6b:a4:e0:6a:d0:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
        Validity
            Not Before: Dec 23 07:56:51 2025 GMT
            Not After : Dec 22 08:01:51 2026 GMT
        Subject: CN=B2C318696789AA7BD687464DD8136295DFF2F9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:50:d7:c1:70:0d:14:a7:78:97:c8:d3:f3:b3:
                    a9:3c:ba:b4:46:8a:9f:8b:bb:fa:e6:5a:fd:f9:7d:
                    d3:45:15:09:fd:b8:e3:cf:e9:f1:6b:92:c2:0a:b7:
                    d5:4e:1c:39:d5:dc:2a:ae:9f:67:0e:74:7b:ea:6f:
                    04:3d:ce:31:50:b9:60:99:40:b4:5e:94:f4:4d:42:
                    85:3f:b4:fa:d6:5c:bf:9a:8a:bb:55:01:1b:66:ea:
                    7a:bf:08:79:b7:44:b3:76:d4:fe:c9:a1:c8:ec:08:
                    9d:ee:2d:3a:2f:b0:37:f3:ac:74:a8:1f:ed:47:35:
                    47:fe:2c:e2:26:e4:b7:0b:c6:5c:c3:c8:b1:48:8d:
                    d8:86:b1:b0:40:83:d8:87:14:c3:44:12:b5:b5:61:
                    ba:67:ab:10:ce:51:9d:6f:11:a6:c5:30:25:58:ba:
                    1a:10:ca:2c:18:92:07:8a:f2:ea:c2:7a:4b:28:8c:
                    e4:54:24:69:5e:2b:00:2d:56:88:78:2d:60:f3:9b:
                    e4:e4:64:2c:4b:e8:43:8a:9d:a6:9f:0d:37:8c:07:
                    c6:77:e3:15:25:57:41:82:5a:a3:44:c3:99:92:3e:
                    99:fe:24:a1:6f:a3:7a:94:e1:a2:8a:a0:8f:39:f2:
                    30:f2:b2:b9:fb:2f:28:e7:2b:87:51:db:fb:16:b8:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C3:18:69:67:89:AA:7B:D6:87:46:4D:D8:13:62:95:DF:F2:F9:DF
            X509v3 Authority Key Identifier:
                keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:05:23:db:43:6d:99:c2:78:83:d8:d7:5b:e1:fd:70:02:
         dd:14:fa:ff:78:2d:44:f3:8a:a8:10:24:d9:8f:8a:98:3f:c7:
         68:10:9b:38:ef:b2:ab:13:e1:b1:65:a5:a0:3c:3a:aa:05:cd:
         75:c4:98:4d:9d:0d:a4:03:49:ea:9f:d5:f0:dc:3c:cb:8a:3f:
         4c:de:2c:2a:00:c7:a3:2e:6a:e6:af:fe:9e:49:20:93:13:f7:
         57:02:51:be:c4:ad:18:3a:b0:03:1d:a2:fa:5e:80:6e:2a:aa:
         7e:83:29:65:21:35:48:27:11:87:70:5d:39:c8:3d:03:18:16:
         63:12:b8:dc:fa:79:fe:b5:37:cd:10:5f:f3:31:ed:1f:a3:b3:
         b1:d5:56:ed:38:01:c4:7f:a7:1d:72:e8:25:f8:5d:c9:8b:b0:
         73:99:0f:91:80:02:5a:81:32:56:cc:e8:2c:e2:50:f4:ac:50:
         49:b1:54:ab:9d:32:ce:40:35:25:eb:9c:f9:c2:63:a5:e4:b0:
         47:d6:80:a7:14:84:74:3c:4b:f8:0f:31:c7:46:fb:59:a1:71:
         99:fd:d9:18:b8:81:72:fe:cc:b4:b3:88:c9:09:2b:84:ba:96:
         16:18:53:1d:48:c4:ab:0a:c5:67:27:39:f3:4e:42:de:d8:91:
         8c:12:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:19:47 2026 by rpki-client