This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa
File:                     3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (raw, json)
Hash identifier:          aEavLtAbdRxoRXxDQMLv+ovCw/uDfoEk+/AelkTfu1k=
Subject key identifier:   22:E8:99:1F:77:FD:9D:CC:B2:7D:29:B2:A9:69:DB:80:8B:59:54:18
Certificate issuer:       /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A
Certificate serial:       7F3C133FFC07352C4A67D2D3BAC79F36B2BD41BB
Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa
Signing time:             Tue 27 Jan 2026 13:00:02 +0000
ROA not before:           Tue 27 Jan 2026 12:55:02 +0000
ROA not after:            Tue 26 Jan 2027 13:00:02 +0000
asID:                     149928
IP address blocks:        103.186.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl
                          rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3c:13:3f:fc:07:35:2c:4a:67:d2:d3:ba:c7:9f:36:b2:bd:41:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A
        Validity
            Not Before: Jan 27 12:55:02 2026 GMT
            Not After : Jan 26 13:00:02 2027 GMT
        Subject: CN=22E8991F77FD9DCCB27D29B2A969DB808B595418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:18:52:e3:2f:e0:de:25:0e:8f:48:16:34:
                    e1:41:ec:bf:5b:0e:8c:6c:6e:a3:0c:91:da:4b:c1:
                    fe:8f:c4:80:b5:b9:a2:f3:e2:fb:2f:e4:3a:ce:a6:
                    27:5a:19:3f:e8:f0:73:24:5f:cd:b3:6f:b0:a4:ac:
                    99:98:35:62:fd:31:be:b4:05:05:bd:7a:40:33:ca:
                    f8:6a:e0:7e:23:ab:37:88:a0:06:1c:b5:18:82:35:
                    eb:2a:de:00:fb:45:96:0b:1e:f8:e8:01:90:da:53:
                    25:6b:b0:bb:0d:6d:fa:b1:98:3d:60:9e:90:d6:77:
                    5c:a5:73:b1:f4:a2:ba:aa:be:90:82:c5:54:e3:0e:
                    ac:23:88:66:ff:50:20:ff:16:a8:8f:91:26:cb:c2:
                    62:ba:ff:38:5d:b6:80:0d:7e:3c:a2:11:a0:30:d0:
                    c6:ea:a6:ac:c7:2f:0c:5b:62:77:2e:6e:3f:7c:fc:
                    10:cf:db:08:06:9c:29:d0:4f:06:e8:6b:c5:f3:77:
                    d5:34:ea:42:de:d9:96:cd:dc:fa:cf:53:89:7a:6b:
                    ef:ec:e6:7e:dc:85:16:ef:e2:55:9a:40:17:4a:00:
                    1d:f7:40:9a:57:4f:04:ea:19:dd:81:18:9e:59:6b:
                    4a:dc:fa:2a:23:5b:f1:9f:95:c0:71:22:25:3b:c5:
                    2d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E8:99:1F:77:FD:9D:CC:B2:7D:29:B2:A9:69:DB:80:8B:59:54:18
            X509v3 Authority Key Identifier:
                keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f6:48:f5:4b:70:e4:bf:38:51:ea:fb:cd:f4:48:4c:33:95:
         7d:16:d9:a6:f0:33:02:8c:b2:76:e8:8d:31:1d:86:b2:af:36:
         88:91:93:fc:91:44:67:b7:0f:4f:d4:ad:ae:84:70:19:b5:76:
         9e:a7:34:75:52:2f:dd:23:de:9e:c7:1d:70:1e:04:c4:7d:83:
         9b:e5:db:5f:50:a0:a2:58:db:11:32:3b:97:46:32:e6:23:b3:
         9d:e9:b8:9e:b7:ad:8f:93:4f:cb:a3:4a:41:75:4f:07:6b:05:
         8e:d0:6f:38:cb:8a:ad:94:ca:a7:d3:88:47:5b:a4:5c:7b:55:
         63:ea:de:60:8f:d4:8e:3a:79:58:c2:76:4c:b3:90:dd:dd:08:
         44:7b:f9:66:bc:f2:36:3a:c1:79:a4:44:03:ef:68:70:39:3d:
         19:48:c5:67:06:38:9b:6b:7a:39:ec:e7:e6:28:35:58:5d:12:
         d5:51:0a:a2:89:61:fa:74:23:de:a1:ab:62:ed:a8:d1:27:dd:
         81:45:f0:47:2e:23:08:c9:93:dd:31:9d:3b:ee:50:2c:a9:3f:
         37:ed:83:ea:a3:d9:8b:17:6c:07:52:69:de:31:49:59:2b:30:
         17:1d:fa:33:de:86:34:c6:b3:f6:f6:1a:37:7c:b6:f6:b6:a4:
         db:02:ae:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUfzwTP/wHNSxKZ9LTusefNrK9QbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD
QTQyNzk2QTAeFw0yNjAxMjcxMjU1MDJaFw0yNzAxMjYxMzAwMDJaMDMxMTAvBgNV
BAMTKDIyRTg5OTFGNzdGRDlEQ0NCMjdEMjlCMkE5NjlEQjgwOEI1OTU0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKRhS4y/g3iUOj0gWNOFB7L9b
DoxsbqMMkdpLwf6PxIC1uaLz4vsv5DrOpidaGT/o8HMkX82zb7CkrJmYNWL9Mb60
BQW9ekAzyvhq4H4jqzeIoAYctRiCNesq3gD7RZYLHvjoAZDaUyVrsLsNbfqxmD1g
npDWd1ylc7H0orqqvpCCxVTjDqwjiGb/UCD/FqiPkSbLwmK6/zhdtoANfjyiEaAw
0MbqpqzHLwxbYncubj98/BDP2wgGnCnQTwboa8Xzd9U06kLe2ZbN3PrPU4l6a+/s
5n7chRbv4lWaQBdKAB33QJpXTwTqGd2BGJ5Za0rc+iojW/GflcBxIiU7xS1VAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUIuiZH3f9ncyyfSmyqWnbgItZVBgwHwYDVR0j
BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0
N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy
Nzk2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzNWE5ZGRmLWMxMDktNGZjMS1h
MzBkLThmMDRiODMzODFiZS8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnusAwDQYJ
KoZIhvcNAQELBQADggEBAFL2SPVLcOS/OFHq+830SEwzlX0W2abwMwKMsnbojTEd
hrKvNoiRk/yRRGe3D0/Ura6EcBm1dp6nNHVSL90j3p7HHXAeBMR9g5vl219QoKJY
2xEyO5dGMuYjs53puJ63rY+TT8ujSkF1TwdrBY7QbzjLiq2UyqfTiEdbpFx7VWPq
3mCP1I46eVjCdkyzkN3dCER7+Wa88jY6wXmkRAPvaHA5PRlIxWcGOJtrejns5+Yo
NVhdEtVRCqKJYfp0I96hq2LtqNEn3YFF8EcuIwjJk90xnTvuUCypPzftg+qj2YsX
bAdSad4xSVkrMBcd+jPehjTGs/b2Gjd8tva2pNsCrkE=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:57 2026 by rpki-client