This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          Lsn42fS5u6tzmVAFqel+kOrjmVEuvr9qNasBHNEDW8Y=
Subject key identifier:   A5:7D:27:19:BB:2D:04:39:B5:18:B0:62:26:12:A3:6B:CC:62:3C:E2
Certificate issuer:       /CN=846D8A4B978C6F595D44EACDB8259295CD43C499
Certificate serial:       5E129C36A95F3502F792A29D5C74150E9525413F
Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa
Signing time:             Sat 31 Jan 2026 02:11:14 +0000
ROA not before:           Sat 31 Jan 2026 02:06:14 +0000
ROA not after:            Sat 30 Jan 2027 02:11:14 +0000
asID:                     137366
IP address blocks:        103.213.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl
                          rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:12:9c:36:a9:5f:35:02:f7:92:a2:9d:5c:74:15:0e:95:25:41:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499
        Validity
            Not Before: Jan 31 02:06:14 2026 GMT
            Not After : Jan 30 02:11:14 2027 GMT
        Subject: CN=A57D2719BB2D0439B518B0622612A36BCC623CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:bd:9d:2b:40:b1:88:10:0a:80:a2:f0:17:
                    23:3d:1a:03:f1:0e:60:0d:b2:fe:45:67:7b:56:22:
                    f8:2a:bb:7a:11:eb:4d:0b:99:8f:ed:1a:57:4f:bd:
                    26:da:e2:5f:05:f8:74:41:12:09:df:d1:29:97:ce:
                    18:d7:e2:f1:3c:a0:36:74:e9:fb:07:3b:ec:f2:a8:
                    27:74:90:a0:af:6d:89:0c:62:94:54:3f:70:eb:67:
                    fa:06:86:49:ba:b5:c1:9b:27:eb:2b:c9:64:26:3b:
                    c2:e1:c4:5d:4e:16:89:f0:ff:92:e6:88:fc:db:20:
                    14:5d:c9:e9:77:df:64:1f:ce:6a:00:5b:6e:4a:44:
                    dc:d2:ce:2c:8e:13:ee:f1:5c:5e:1a:50:c7:ee:33:
                    95:d8:02:44:a0:8c:e8:b3:80:66:78:86:3f:4f:ce:
                    7e:d0:a3:2b:64:2e:da:b1:7c:b2:7c:bc:d3:92:9f:
                    4a:8f:31:37:09:06:31:2f:b7:f9:4d:a4:cf:b5:04:
                    1a:60:b5:37:8e:38:44:08:b3:04:80:53:d9:6d:dc:
                    cd:17:6f:59:b5:ba:30:08:fb:93:aa:a2:b2:7e:9a:
                    f0:8d:02:02:8d:c9:75:d2:77:35:a8:d1:a9:33:1b:
                    6b:39:1d:a8:6b:ad:cc:26:23:83:13:46:b8:38:ae:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7D:27:19:BB:2D:04:39:B5:18:B0:62:26:12:A3:6B:CC:62:3C:E2
            X509v3 Authority Key Identifier:
                keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:33:69:65:8c:7e:1a:49:10:ee:9b:9d:c5:33:04:87:51:
         bf:da:85:86:2b:3e:7e:d3:d3:04:ef:8a:5f:06:9a:fd:24:3f:
         b0:35:8a:4f:4c:ab:c1:f5:bd:47:dc:fb:06:7b:ad:e7:94:1d:
         ba:c4:b0:94:35:9d:6a:56:cc:d3:be:74:7d:61:ae:77:02:7e:
         18:8f:cc:5e:0a:d8:d9:9d:59:be:93:aa:ca:3a:2f:5e:01:fb:
         f2:a8:d6:92:3f:ef:94:b0:b1:27:d4:75:d3:42:13:cc:a4:72:
         89:f9:ed:d2:ef:83:1a:74:68:47:ac:48:1b:f6:ae:57:22:c1:
         8b:53:61:c5:f3:fd:2a:9d:a4:4b:98:ed:91:10:b9:8c:ef:2c:
         a8:e0:9d:98:1b:a7:77:d9:de:4a:4f:2a:84:93:33:48:cc:67:
         1b:2a:59:a3:10:93:d9:c0:27:1e:58:81:0c:10:be:2c:7c:2b:
         0d:3d:72:f5:c1:85:2b:c6:7e:a1:2d:0b:79:25:88:29:82:cd:
         ce:97:41:8e:3e:0e:a5:37:8c:26:f4:55:0d:8a:3e:77:21:7d:
         89:e7:e0:c5:2c:c4:1c:c0:88:fb:59:03:f4:a5:7b:b2:01:aa:
         b4:e3:10:3c:01:6e:bf:3f:79:18:72:c8:0a:a8:3f:1d:f5:6a:
         71:cb:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:40 2026 by rpki-client