This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa
File:                     3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (raw, json)
Hash identifier:          uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=
Subject key identifier:   96:65:35:B9:75:9D:D7:93:01:1F:34:7F:D8:88:F8:3D:68:86:1D:07
Certificate issuer:       /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial:       4D3036F068E689FB410F9200756E22F1DE05EA65
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:34:32 +0000
ROA not before:           Thu 08 Jan 2026 21:29:32 +0000
ROA not after:            Thu 07 Jan 2027 21:34:32 +0000
asID:                     154410
IP address blocks:        103.147.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
                          rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 01:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:30:36:f0:68:e6:89:fb:41:0f:92:00:75:6e:22:f1:de:05:ea:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
        Validity
            Not Before: Jan  8 21:29:32 2026 GMT
            Not After : Jan  7 21:34:32 2027 GMT
        Subject: CN=966535B9759DD793011F347FD888F83D68861D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:52:8b:3f:eb:7c:a8:68:36:d9:4f:18:57:ee:
                    e6:72:9e:f4:52:1d:94:33:6a:35:f9:55:0f:42:f1:
                    01:a2:95:56:b9:1a:da:86:3e:b0:8e:4a:72:b8:82:
                    e0:b9:67:fb:7b:fd:5e:81:61:aa:76:62:dd:27:24:
                    34:96:b6:75:ff:ca:02:21:42:39:05:10:64:e4:9a:
                    59:ae:a3:e4:99:1f:8e:e2:16:56:49:5b:cb:c4:3d:
                    ff:6c:62:d3:51:da:d4:80:b0:06:bb:d4:67:44:84:
                    c7:29:84:a7:d4:ec:e4:f2:a7:ea:7d:30:02:3f:19:
                    a6:a3:be:56:b0:65:c5:d2:c4:a5:05:27:de:ca:2e:
                    cc:a2:f7:b1:7e:a1:c2:a6:2b:76:66:e6:71:cb:34:
                    f1:7f:b6:9e:8d:bb:8a:32:aa:69:d5:9a:e3:eb:86:
                    18:b5:8b:37:48:ca:eb:bf:81:78:fe:b0:9f:22:23:
                    a4:af:79:b8:c8:39:88:75:36:9b:47:bd:8d:47:23:
                    12:e0:12:2f:45:c7:8a:f8:b1:9d:ee:ce:77:6e:7f:
                    f3:c0:0f:83:b8:cc:07:f5:c0:89:4c:d9:28:a4:5b:
                    6d:26:b1:da:6f:8a:01:5d:c3:5d:ea:18:09:15:11:
                    bf:9a:38:2d:27:c1:5b:1f:33:8f:65:89:36:d4:ed:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:35:B9:75:9D:D7:93:01:1F:34:7F:D8:88:F8:3D:68:86:1D:07
            X509v3 Authority Key Identifier:
                keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:de:e9:bb:f0:eb:f3:9b:73:12:ba:c1:53:13:df:cd:fd:
         b8:b2:74:0a:7c:27:07:15:58:4c:84:c9:15:ca:89:9a:87:43:
         2f:a5:ac:51:09:a2:ab:65:1c:64:62:87:95:24:27:ce:9d:8e:
         8d:09:21:5a:de:e2:67:a8:67:b7:4b:e5:5e:29:a8:08:65:6b:
         8e:28:ae:0d:ab:a9:d3:ea:8b:85:67:54:f3:90:af:35:a5:c3:
         cb:41:ed:21:9f:84:54:4a:34:75:f9:3e:c4:f4:ff:5d:73:d6:
         1a:d4:e6:65:dd:ab:dc:6b:43:e4:47:9f:4b:f7:25:79:37:92:
         17:6c:7c:3a:41:e2:ab:42:47:62:50:88:ad:bb:0f:c1:7e:8b:
         bd:c3:ec:b2:96:47:37:67:f1:9f:b1:1e:11:fb:5a:34:67:45:
         39:8d:ae:4a:9b:6a:55:7d:32:e0:21:a1:15:ab:36:8a:37:0f:
         5d:9a:d5:a1:f1:2e:aa:2a:1f:ec:1f:42:14:ca:36:c9:a3:27:
         90:2d:b2:31:82:0a:f1:6c:74:60:0b:fb:db:2c:be:65:5c:9d:
         43:bc:66:69:36:8c:5c:ce:fc:1b:05:be:da:40:0f:98:e6:5b:
         f2:31:da:b4:e7:11:64:8f:d7:3a:4a:42:49:d2:32:dd:a9:da:
         73:1a:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:26 2026 by rpki-client