This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          l1xTB64+x/uWXMCW9OyKVtkuQ4DVh8wTNIJX876bpjA=
Subject key identifier:   23:EF:83:BC:37:D9:D3:AF:33:2A:EE:50:17:63:41:9B:FA:04:75:AA
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       3AFFA1001463E8B406CA1ACB7A531AFF8D949233
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
Signing time:             Wed 28 Jan 2026 18:02:32 +0000
ROA not before:           Wed 28 Jan 2026 17:57:32 +0000
ROA not after:            Wed 27 Jan 2027 18:02:32 +0000
asID:                     135445
IP address blocks:        103.223.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
                          rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ff:a1:00:14:63:e8:b4:06:ca:1a:cb:7a:53:1a:ff:8d:94:92:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Jan 28 17:57:32 2026 GMT
            Not After : Jan 27 18:02:32 2027 GMT
        Subject: CN=23EF83BC37D9D3AF332AEE501763419BFA0475AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:90:72:f5:c0:c7:6e:b7:99:ee:20:43:16:12:
                    75:ad:89:46:b7:fb:45:97:a3:37:8d:3a:24:33:c9:
                    f7:b2:3f:5c:33:03:cb:a1:46:53:e4:7d:80:49:16:
                    7d:4b:cf:43:29:8d:a3:02:ed:39:a8:bd:09:f2:61:
                    7a:da:cc:39:3b:ec:b4:11:7d:3c:b6:e4:52:e3:95:
                    2d:a3:97:8a:59:69:0b:67:4c:65:f2:b3:38:63:e3:
                    a2:39:d0:75:fa:16:37:7f:74:2a:e3:e3:3c:56:88:
                    25:07:a5:87:3f:49:1e:6b:aa:cb:35:1a:34:16:c1:
                    fa:46:2c:25:01:91:6d:56:e8:ce:1b:54:f0:8b:3e:
                    e2:e1:79:63:c9:7a:54:74:30:c6:81:51:82:d7:32:
                    e4:39:b0:30:c6:00:ba:c8:d8:da:25:f1:14:27:03:
                    ab:1d:0f:f4:36:53:5e:cb:a8:81:dd:9a:e2:a5:55:
                    1f:96:50:7e:15:14:fb:d9:3a:d5:92:d0:48:23:19:
                    28:ac:42:d0:4f:7b:9e:55:bd:c9:e3:77:34:8c:e3:
                    27:cd:5f:5e:92:de:64:7b:2c:12:65:37:ae:36:ea:
                    36:fb:97:9e:86:db:c7:15:c4:f4:2c:da:43:2b:51:
                    de:53:85:25:5e:c8:31:8e:66:4a:53:31:2e:17:bc:
                    b4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:83:BC:37:D9:D3:AF:33:2A:EE:50:17:63:41:9B:FA:04:75:AA
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:27:67:c8:20:03:09:16:d3:32:73:22:4b:92:db:d6:ab:83:
         ce:0c:d8:38:2e:bc:cd:75:fa:00:74:97:e6:b4:40:da:3f:90:
         2e:3a:78:e4:3a:3a:a5:1b:33:7f:f1:83:17:45:7b:13:0b:9b:
         b0:47:82:50:6e:a6:6f:db:3f:ee:ba:7e:bc:8c:23:b0:1b:6b:
         79:d0:a8:68:ae:a7:aa:4f:8c:aa:53:41:86:8a:53:ae:fa:f1:
         6e:66:2b:2b:01:a7:79:9a:81:34:ba:bb:8f:0c:93:1e:c9:01:
         8f:6a:ed:ce:6b:d0:8d:15:b7:51:7b:d7:ad:5a:bc:50:72:57:
         c6:33:f7:b8:e9:f7:65:bf:57:14:54:f9:b1:ca:aa:7f:9b:ab:
         a9:c1:35:66:a0:8a:e8:3f:01:e5:44:96:f8:2a:ea:61:47:a7:
         5c:11:83:7d:d4:e4:07:ab:73:f9:cd:62:79:26:c1:fb:27:58:
         12:db:11:cb:56:98:ed:63:2d:f1:1a:c0:4c:32:7f:40:2b:36:
         9a:5f:53:89:fe:8d:20:30:c0:94:0a:ba:0f:69:a9:da:10:44:
         77:3b:05:ad:da:19:e4:dd:67:09:03:ae:04:57:c8:4a:58:a8:
         8d:47:48:8e:3f:3d:61:83:82:e9:a6:e8:3b:86:05:5d:43:b2:
         61:a4:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 16:01:19 2026 by rpki-client