This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
File:                     3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (raw, json)
Hash identifier:          e866bgD8+WV+E66L19k4qbdrOD68wAEFfxlCAZGgSi4=
Subject key identifier:   90:D2:89:D7:4B:E9:12:00:5F:5A:04:5E:AF:76:F6:EB:9E:5B:39:5C
Certificate issuer:       /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
Certificate serial:       6E7B394B988E3F9B39E7B5D7A9DE4FC2B035057B
Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa
Signing time:             Mon 12 Jan 2026 08:00:42 +0000
ROA not before:           Mon 12 Jan 2026 07:55:42 +0000
ROA not after:            Mon 11 Jan 2027 08:00:42 +0000
asID:                     147164
IP address blocks:        103.177.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl
                          rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 03:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7b:39:4b:98:8e:3f:9b:39:e7:b5:d7:a9:de:4f:c2:b0:35:05:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E
        Validity
            Not Before: Jan 12 07:55:42 2026 GMT
            Not After : Jan 11 08:00:42 2027 GMT
        Subject: CN=90D289D74BE912005F5A045EAF76F6EB9E5B395C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:00:8a:a6:9b:01:ce:9d:49:24:7b:c0:8b:
                    2f:37:0a:d6:05:53:d5:45:e9:13:d7:45:3a:54:78:
                    cc:b2:81:85:7a:69:a7:4b:3c:45:f3:5c:5b:1b:02:
                    dc:60:25:96:e7:bf:04:86:a5:e6:64:47:66:12:ac:
                    50:30:ce:a1:5f:08:a5:49:f3:af:d6:80:39:cd:4b:
                    02:8e:e5:e6:48:86:0c:8d:87:e2:84:a8:1b:d3:6c:
                    17:2c:33:85:d2:de:88:4c:0b:ab:e7:32:38:d5:51:
                    2f:7f:60:48:f6:86:5e:d4:fb:d6:2a:a8:00:79:c4:
                    78:6d:c9:f8:c5:30:c9:9f:2b:e0:33:97:08:bc:f4:
                    80:9c:d1:91:f9:55:90:1e:60:e8:49:b2:0a:d8:c9:
                    81:38:cf:3c:36:51:59:87:9f:e3:7c:8b:0a:0d:51:
                    5e:f3:f5:d5:a9:87:ec:78:ad:28:5b:66:6a:35:19:
                    c8:02:92:0f:92:ec:86:d8:28:ef:a2:e8:5b:14:db:
                    eb:ab:25:35:0c:c6:47:53:8e:fe:d9:5a:7b:dd:87:
                    ab:4b:52:28:82:72:44:27:b0:6f:05:40:d8:4c:46:
                    79:ab:e1:77:c4:07:64:cc:95:ce:97:46:bd:0b:01:
                    2a:ba:2a:67:06:a2:d9:28:14:34:af:b6:d9:1c:7b:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:89:D7:4B:E9:12:00:5F:5A:04:5E:AF:76:F6:EB:9E:5B:39:5C
            X509v3 Authority Key Identifier:
                keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:19:b1:78:1f:a8:98:f0:f5:86:db:6b:cc:b4:f6:bb:35:b0:
         c3:69:21:35:b9:17:3b:df:da:ab:0b:31:8d:15:84:51:93:c3:
         e0:c7:f0:6a:e2:71:8b:0e:da:20:04:3f:9c:ea:5a:5c:a3:42:
         e0:88:bf:52:fa:ab:2c:8d:e9:d9:b7:c3:44:f8:62:00:31:7a:
         fe:d4:14:95:12:0c:13:58:85:8d:c6:74:e1:7b:23:36:70:55:
         97:9a:3e:0e:db:c0:e9:df:fc:33:2e:86:bf:4b:ea:ef:8c:26:
         e0:87:12:2f:8b:56:6b:fc:9e:44:c4:e9:99:5c:75:06:e3:13:
         75:89:0a:d8:6b:e8:08:96:70:dd:78:db:4d:8c:6f:6a:3b:16:
         34:f2:47:5b:7c:5f:e3:3a:0c:0e:5e:5b:37:57:5e:1b:dd:b4:
         6e:d4:74:86:cb:d2:b1:89:d7:f7:9a:cc:6d:71:25:8e:9b:11:
         9a:98:9b:23:5c:2c:ef:e2:2a:a8:88:ba:51:f1:93:8b:77:3c:
         f8:a7:da:87:8e:99:b7:fd:aa:d7:d6:78:00:94:d8:ef:5e:c8:
         44:fc:77:28:88:49:fb:08:1f:14:58:44:fb:59:5e:68:fd:19:
         17:4d:21:0f:7f:88:81:27:5a:86:aa:78:2d:5d:45:6f:03:8c:
         85:e7:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:52:41 2026 by rpki-client