This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
File:                     3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (raw, json)
Hash identifier:          W4QqpemtzShS1QHLz/OQQiGGQqIHL/ZWTyinECHq8iM=
Subject key identifier:   77:C8:94:51:B0:67:12:83:0C:78:0D:D2:AF:08:50:6F:5B:D7:D3:51
Certificate issuer:       /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
Certificate serial:       22EC3F4DDA0036A614E0DE15AEA6051A05FD8E85
Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa
Signing time:             Tue 30 Dec 2025 11:00:02 +0000
ROA not before:           Tue 30 Dec 2025 10:55:02 +0000
ROA not after:            Tue 29 Dec 2026 11:00:02 +0000
asID:                     136854
IP address blocks:        103.102.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl
                          rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 11:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:3f:4d:da:00:36:a6:14:e0:de:15:ae:a6:05:1a:05:fd:8e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754
        Validity
            Not Before: Dec 30 10:55:02 2025 GMT
            Not After : Dec 29 11:00:02 2026 GMT
        Subject: CN=77C89451B06712830C780DD2AF08506F5BD7D351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:80:be:d3:1e:e0:a1:b6:e7:ed:1c:8e:34:
                    29:85:9d:1e:e8:89:bf:73:33:1a:ee:ec:ef:be:26:
                    0f:1d:53:5b:f5:47:38:fa:ee:21:93:76:2e:d2:09:
                    55:ea:83:18:19:d9:43:65:ee:ec:1a:89:5f:50:79:
                    83:63:a9:84:b2:d5:8e:11:63:27:a4:6d:f8:c0:51:
                    b4:79:7f:ba:d2:50:48:18:50:3c:69:e1:07:54:5d:
                    84:d7:77:7d:71:49:46:fe:3e:c0:3c:52:a3:9a:92:
                    1a:0a:b5:69:e0:dd:10:42:a2:09:0b:b6:07:97:91:
                    7e:d8:8a:e2:23:24:41:63:38:71:92:c4:83:49:2d:
                    d2:e1:9c:6c:45:58:ed:04:12:77:34:4e:82:10:74:
                    36:a8:fd:29:f9:95:2b:d9:56:3b:29:0b:35:1b:a7:
                    7d:ab:4d:fd:2a:a7:3d:34:ab:66:e5:ee:bc:02:ac:
                    02:78:1b:40:da:1b:0f:e9:86:ad:a8:e1:de:63:e1:
                    0a:a2:a9:2f:15:77:ba:70:75:c9:80:9d:65:1b:71:
                    6d:b5:fd:66:12:e0:42:87:6e:72:fc:50:b0:c2:04:
                    bd:74:f4:6e:36:c9:14:12:83:32:9a:90:19:4b:a1:
                    28:b1:b4:7f:1e:b7:09:a0:9e:ca:9d:88:c2:a7:e2:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C8:94:51:B0:67:12:83:0C:78:0D:D2:AF:08:50:6F:5B:D7:D3:51
            X509v3 Authority Key Identifier:
                keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:14:c9:27:8b:ac:a4:12:dd:e9:26:20:f0:29:9d:49:72:bd:
         70:28:95:24:f9:45:fd:e7:17:64:be:31:27:40:00:43:8e:f9:
         34:15:41:4b:6d:88:ee:6f:84:cb:04:14:a9:ad:ab:78:c5:34:
         03:16:85:9f:e1:db:bb:56:95:b5:e5:a3:db:56:d2:6d:a3:9e:
         ef:cb:e5:82:6c:22:77:15:47:42:39:6d:03:e5:35:a4:84:8a:
         5f:24:55:e5:ff:f3:28:97:d8:34:b0:c0:dd:14:3e:e0:1b:4b:
         d3:8b:a0:72:b3:8c:e6:a1:8d:ff:7a:47:a9:ed:f0:d0:48:b5:
         f4:4d:c7:01:2b:07:70:bb:45:8d:76:15:e6:ed:4a:91:e0:f6:
         4b:87:91:a9:2d:bb:8e:55:92:36:a8:77:a1:fc:5a:c9:e5:77:
         d8:d5:d6:8c:3e:8b:bd:17:5a:66:66:48:4a:fb:da:e8:af:e2:
         86:bc:6a:02:95:4d:83:ab:7d:16:38:ee:fd:48:93:b6:50:89:
         8e:e7:a3:d0:7c:5a:dc:e6:75:b5:0e:36:84:71:d2:96:62:df:
         15:a1:fe:92:2e:83:66:33:61:3a:ea:e4:09:f0:ef:2a:0f:88:
         f3:f5:fc:7a:52:cb:f7:ef:1c:ee:75:d7:72:01:8c:e6:82:fc:
         64:c5:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:29:45 2026 by rpki-client