This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e332e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          f760Wiq9HOfEvyHxCHFmqg5Ov69QlrgTl9hAGda8ylY=
Subject key identifier:   BB:07:D4:D9:DB:D0:79:2B:46:38:5F:43:47:D5:CA:65:45:01:D9:90
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       5E869B6D745C94E6D04FCE035E4D8468820073E3
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa
Signing time:             Wed 28 Jan 2026 17:00:03 +0000
ROA not before:           Wed 28 Jan 2026 16:55:03 +0000
ROA not after:            Wed 27 Jan 2027 17:00:03 +0000
asID:                     135445
IP address blocks:        103.223.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
                          rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 15:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:86:9b:6d:74:5c:94:e6:d0:4f:ce:03:5e:4d:84:68:82:00:73:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Jan 28 16:55:03 2026 GMT
            Not After : Jan 27 17:00:03 2027 GMT
        Subject: CN=BB07D4D9DBD0792B46385F4347D5CA654501D990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:ba:19:f8:cd:12:c6:ad:73:eb:c7:7d:fd:
                    13:34:e1:5a:15:8e:c9:63:7b:f6:a3:75:d5:a4:89:
                    53:7a:6c:82:3f:89:c0:6f:14:3a:e1:19:c3:1f:e6:
                    ac:8f:5b:b7:46:5c:53:1e:0a:95:97:14:4d:66:e7:
                    02:77:85:87:c4:34:66:6e:e5:4c:69:10:d2:68:f0:
                    75:7e:60:29:74:76:32:14:4c:b6:d2:8f:59:3b:3f:
                    0e:ba:42:65:6b:4a:e0:25:54:fc:4c:03:c9:68:4b:
                    1c:47:3c:2e:3f:79:71:c7:c3:95:fb:d2:84:9d:ec:
                    e9:e4:73:92:c3:8e:08:de:77:49:d7:ee:f1:fa:f1:
                    b8:7c:27:50:8a:8a:f6:0c:bc:b4:d3:c3:fd:6a:b4:
                    47:50:2b:09:ee:a2:af:6e:b6:a2:d7:5d:6e:37:23:
                    db:ce:e6:9b:42:2d:59:ca:07:49:69:97:c9:d1:11:
                    a3:c3:d8:e2:95:3e:f5:e4:36:e5:2f:87:01:1a:38:
                    dc:7b:21:6d:6c:80:ef:cb:6c:55:b7:d1:10:a6:06:
                    e7:de:5a:b2:81:bd:17:ef:07:11:01:7d:e4:f3:66:
                    7c:3a:74:1f:b6:d0:8c:5e:88:77:04:aa:a8:e8:be:
                    59:16:39:f0:de:5d:8c:5a:fa:1b:6e:4f:56:59:9a:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:D4:D9:DB:D0:79:2B:46:38:5F:43:47:D5:CA:65:45:01:D9:90
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e332e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:5a:65:5e:3d:17:f0:44:df:3e:42:27:34:1f:95:50:75:2c:
         ab:c1:ba:0b:e8:f1:9b:78:c3:d5:ab:bb:ac:42:b3:74:b7:b4:
         e2:54:ac:fe:bd:dc:41:1b:88:9c:71:a2:9d:b7:57:8c:b5:9e:
         5b:72:96:fe:4a:e0:6f:db:c4:23:95:95:58:5f:ae:b6:1e:29:
         a6:ca:e5:76:2d:f3:52:4b:ef:b1:17:25:b7:1c:16:11:63:26:
         ae:81:77:47:0f:34:8b:ce:d4:90:ab:85:2e:31:a3:f9:34:f4:
         b8:fc:ec:25:f0:20:bf:ae:bb:9e:80:35:9d:c4:4b:07:6b:19:
         8a:24:b1:b7:8c:31:0b:fa:8c:70:6a:6e:35:89:08:1b:4b:a5:
         cb:95:c7:a9:39:62:3f:d5:54:24:84:5a:04:ac:a6:ac:48:62:
         bd:09:03:81:10:b4:a1:d9:70:cc:7b:94:ac:b2:db:ab:c6:3a:
         d9:4b:82:7d:3e:d4:be:6d:af:32:c2:2b:49:c1:f1:6a:cc:70:
         ca:af:b2:54:aa:42:b7:1f:4a:b1:c9:a6:e5:9c:bf:38:f9:7f:
         d4:90:47:df:f9:35:63:96:a8:1a:58:46:c0:19:6b:d7:1c:5e:
         03:98:30:a7:1c:8c:96:aa:ea:0e:32:50:a6:f7:fb:05:7a:d4:
         92:5a:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:53 2026 by rpki-client