This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa
File:                     3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (raw, json)
Hash identifier:          xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=
Subject key identifier:   08:EB:B5:E2:82:A0:5C:5C:7F:7C:87:AB:8B:A0:44:D4:4D:66:25:9A
Certificate issuer:       /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
Certificate serial:       3A2D76399F4292C654731CDAA201967AB737BC8C
Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa
Signing time:             Thu 08 Jan 2026 21:34:57 +0000
ROA not before:           Thu 08 Jan 2026 21:29:57 +0000
ROA not after:            Thu 07 Jan 2027 21:34:57 +0000
asID:                     154410
IP address blocks:        103.147.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl
                          rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 01:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2d:76:39:9f:42:92:c6:54:73:1c:da:a2:01:96:7a:b7:37:bc:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246
        Validity
            Not Before: Jan  8 21:29:57 2026 GMT
            Not After : Jan  7 21:34:57 2027 GMT
        Subject: CN=08EBB5E282A05C5C7F7C87AB8BA044D44D66259A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f1:dd:a3:f1:20:27:81:26:90:03:54:e0:96:
                    46:80:95:be:18:21:11:39:00:42:bf:30:2a:13:9a:
                    30:94:53:b9:e0:96:4f:92:d0:78:55:aa:4d:e9:28:
                    ed:8d:8f:d3:b1:7d:d0:3e:c0:f7:2f:75:a0:e3:05:
                    0b:fd:73:76:80:d8:75:b3:0a:dd:a2:cd:21:03:c3:
                    ff:b7:cf:78:7f:f9:ec:d4:0f:71:42:37:7a:0f:e5:
                    2e:be:d1:03:b1:a0:bb:17:ba:7f:58:f5:3e:9b:ee:
                    60:c1:c3:db:1e:94:e7:0a:52:18:5d:22:70:8c:a4:
                    0e:af:af:2b:4d:e5:35:6a:79:af:d6:ea:28:aa:6b:
                    18:b4:1f:74:bb:c0:89:d7:73:62:ee:ec:48:5b:5c:
                    86:2c:d2:de:c5:31:25:6b:ed:10:60:b0:d9:3a:c2:
                    c0:8a:9e:9e:ab:9c:29:42:54:53:b3:ef:fd:a4:4d:
                    58:dd:fa:0e:56:aa:0b:14:2e:82:92:4f:67:51:0d:
                    76:b0:8a:ca:52:0d:01:83:be:46:4a:63:74:29:26:
                    84:1f:3c:a0:b2:ae:20:01:ac:95:a0:d7:95:7c:76:
                    7c:80:6a:4f:53:8a:37:07:83:7d:e3:b0:80:3e:42:
                    7a:2f:3b:1f:fa:43:5b:8f:f8:61:28:75:8e:5e:ee:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:B5:E2:82:A0:5C:5C:7F:7C:87:AB:8B:A0:44:D4:4D:66:25:9A
            X509v3 Authority Key Identifier:
                keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7f:3f:4d:98:40:66:49:34:8a:d6:ba:a1:55:5b:d2:b1:ae:
         e1:21:7e:dd:50:40:ef:f6:38:01:c1:20:06:2c:16:28:3e:b8:
         04:01:62:aa:fa:8b:00:36:7b:30:6f:30:18:a2:6c:08:ff:a5:
         70:5f:0f:09:df:35:a1:70:75:4d:80:e1:fe:ef:0d:4a:a6:36:
         20:f4:6c:c1:4f:98:74:c5:c8:7d:05:8f:44:8e:e4:0c:b4:f7:
         13:88:0f:f6:e4:df:60:bb:d2:52:de:8b:33:6e:58:9a:5d:ce:
         33:65:d5:66:96:ac:8d:5e:71:35:e4:a7:7c:08:53:22:5b:cb:
         50:b3:91:96:7a:c9:e1:c4:1f:db:7e:93:6e:01:63:52:bf:1c:
         b5:b0:8f:d1:ad:61:b7:b5:ca:87:40:c5:81:a2:71:7f:d3:ed:
         c2:34:da:f1:2e:ac:96:12:0c:1b:77:8a:fd:96:71:ec:2d:df:
         f1:5a:9e:6f:6a:a4:3b:c5:d6:be:ac:82:90:9f:63:ad:28:42:
         d7:6f:27:f6:36:6a:a1:d9:95:43:79:f0:d4:d8:b1:56:c3:1a:
         5f:d8:30:91:1b:6d:13:b3:c2:4e:64:73:73:a4:e1:77:0f:47:
         a7:01:9a:e4:8e:dd:3f:d0:e4:31:6f:4f:09:25:db:68:a3:52:
         45:00:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 21:58:25 2026 by rpki-client