This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e322e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          ad6HqEhyKfMFzweJkQHndTfkf4zH5ZdsD2lMwMM0pnE=
Subject key identifier:   F2:DD:37:AB:22:00:86:CF:C1:21:10:BD:F4:F1:3B:98:D5:D8:51:F6
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       40053D6F4AC70F7F3D952C92A266B63BAF1BD518
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa
Signing time:             Wed 28 Jan 2026 17:00:03 +0000
ROA not before:           Wed 28 Jan 2026 16:55:03 +0000
ROA not after:            Wed 27 Jan 2027 17:00:03 +0000
asID:                     135445
IP address blocks:        103.223.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
                          rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:05:3d:6f:4a:c7:0f:7f:3d:95:2c:92:a2:66:b6:3b:af:1b:d5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Jan 28 16:55:03 2026 GMT
            Not After : Jan 27 17:00:03 2027 GMT
        Subject: CN=F2DD37AB220086CFC12110BDF4F13B98D5D851F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:78:e3:5f:f2:42:48:c4:05:b7:2f:bf:26:
                    ec:e2:1d:6a:40:c2:59:a4:67:7b:bc:82:7d:bc:9a:
                    b9:d0:de:6c:7d:76:bd:77:d1:4d:cb:b3:82:69:08:
                    3b:70:c2:8e:52:e6:d4:fb:ed:22:5e:9f:a5:e2:91:
                    97:31:a0:7b:cb:10:90:ed:ff:4c:58:04:2d:c5:27:
                    ec:75:dc:1a:0e:c8:68:f8:73:e1:5e:23:30:f6:c5:
                    f5:13:de:c2:92:5b:9f:66:4f:78:00:d4:47:c6:3d:
                    7c:cb:97:5d:0d:cb:9e:e9:14:7d:61:6a:54:b6:56:
                    ae:f7:90:e3:d4:0d:6b:b3:c6:00:0c:c4:56:2a:eb:
                    d4:ab:fd:77:7d:e2:61:b3:a2:15:b9:51:60:30:62:
                    83:b3:c9:5f:ef:b8:51:17:6e:57:f1:ca:e6:38:2b:
                    d5:14:46:07:50:59:58:da:06:1f:d3:42:81:0d:da:
                    03:6c:ff:7c:f1:2c:95:af:ea:68:03:f0:94:22:27:
                    a5:37:6d:3b:3b:dc:44:b3:8a:04:4d:db:f8:22:67:
                    18:4a:f0:27:e4:71:8e:2e:51:3f:c6:c9:4e:72:0e:
                    aa:f7:e3:e2:98:94:35:07:1e:ec:40:71:54:34:eb:
                    d2:be:67:cf:59:5e:19:39:2a:3e:af:37:9e:a3:6b:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:37:AB:22:00:86:CF:C1:21:10:BD:F4:F1:3B:98:D5:D8:51:F6
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e322e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:6e:dd:e5:b3:cd:fc:4d:19:e2:67:67:eb:2e:64:5b:e2:
         02:89:74:9d:72:99:81:80:97:b5:bb:31:cb:9e:9c:f3:41:de:
         af:52:18:90:77:10:5e:98:26:39:f6:2d:69:f0:35:5d:d6:f4:
         29:b3:c6:d2:af:76:02:34:87:72:a8:d1:86:d4:87:13:94:d5:
         09:33:9b:a9:7c:a7:39:20:ae:24:ef:7a:49:4e:a5:30:39:8d:
         4d:8c:e7:61:de:82:47:18:de:77:e4:20:59:d8:7b:79:77:86:
         cd:0e:af:fe:a5:6b:1c:3b:88:1c:d9:da:20:ef:d3:df:a3:7f:
         dd:75:26:d7:e6:6b:f2:e0:c0:51:ba:f9:6f:e4:ff:99:a9:35:
         96:06:51:2c:f2:04:17:d7:10:69:2a:f9:87:00:f5:19:87:2b:
         eb:6b:04:ad:d5:e8:77:e4:4b:62:fc:c7:73:14:df:56:fa:03:
         d0:28:07:67:1b:d7:40:ea:02:83:90:f9:d1:2f:85:a3:2f:07:
         31:c5:72:b1:4a:24:a7:63:1b:a7:a2:21:3c:3f:d1:77:6b:1a:
         54:07:b0:5c:ac:8e:d2:4b:dc:61:05:a6:cf:9c:bf:2b:c9:03:
         85:64:cd:6d:ca:89:55:ec:59:c7:5f:ae:41:ef:45:7e:4e:dd:
         60:db:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:53:55 2026 by rpki-client