This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
File:                     3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          nkpmNFzKaoDDi9T/JeL4LNdZACwAATcn6M5Xewlnmrs=
Subject key identifier:   4C:F0:29:A9:35:99:B6:66:5A:FB:7A:B0:A1:58:C6:7F:BB:F8:2C:FB
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       08E568225A86A03D370A2BFA4BE729295BA56438
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
Signing time:             Fri 02 Jan 2026 07:03:17 +0000
ROA not before:           Fri 02 Jan 2026 06:58:17 +0000
ROA not after:            Fri 01 Jan 2027 07:03:17 +0000
asID:                     139967
IP address blocks:        103.91.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
                          rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 08:11:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:68:22:5a:86:a0:3d:37:0a:2b:fa:4b:e7:29:29:5b:a5:64:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Jan  2 06:58:17 2026 GMT
            Not After : Jan  1 07:03:17 2027 GMT
        Subject: CN=4CF029A93599B6665AFB7AB0A158C67FBBF82CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0d:26:86:0c:35:88:f3:a2:7c:e7:7c:82:b1:
                    1f:90:ea:6b:44:b2:3a:af:79:1d:cc:79:c4:cf:e9:
                    0e:53:19:91:3e:e9:08:02:c4:73:a4:41:1f:c2:85:
                    7d:ab:d3:ea:9f:b7:4e:c8:93:11:8f:6b:fa:66:ed:
                    81:9d:dc:98:e7:ba:70:cb:b4:bb:bf:f5:2e:a4:01:
                    3a:da:16:e1:cf:0b:fc:da:5d:ab:d4:85:92:b5:ef:
                    f3:2e:1e:5f:9f:a2:1c:a0:6f:25:b5:f2:e1:4a:e1:
                    d1:fe:be:92:4d:8a:8e:21:6f:49:38:4c:5f:54:10:
                    fd:a3:7b:a5:f8:f9:4b:dd:cd:9f:2b:ab:6d:dd:cf:
                    ee:dd:0a:bd:b6:a6:94:34:cd:cc:48:cb:b9:10:70:
                    5b:9f:01:31:fc:bc:a9:16:df:be:b2:03:33:33:56:
                    95:7e:a1:b3:a2:75:aa:a3:31:1a:f8:35:9e:0d:e6:
                    5f:50:86:4b:ec:58:3f:e2:0d:eb:5d:71:f5:79:83:
                    37:34:bb:ca:57:12:4b:79:59:6d:23:0b:7e:cb:34:
                    2a:5e:0b:89:20:8c:af:b9:a3:86:ad:3e:12:3b:c8:
                    36:30:a4:b7:07:61:fb:50:80:25:74:7b:d8:0b:53:
                    c9:80:b4:c5:ca:05:b1:fe:5d:19:54:3a:e4:00:25:
                    8b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F0:29:A9:35:99:B6:66:5A:FB:7A:B0:A1:58:C6:7F:BB:F8:2C:FB
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:22:3a:4a:f1:b6:83:f3:71:1e:fb:e8:ef:fc:b7:0d:8b:27:
         03:de:6f:60:50:47:19:53:19:e4:74:f9:3c:ee:e3:63:0a:e6:
         72:ce:29:f9:5f:6c:c8:09:ae:9d:85:1d:45:94:fc:02:ad:3e:
         09:cd:5b:2c:53:f0:00:cc:3d:2e:bb:76:87:e9:16:2d:bd:b6:
         31:ba:f4:e7:86:41:5d:25:06:df:ab:1b:8d:86:50:e2:ec:21:
         98:69:16:4d:98:2f:6e:9b:4b:e2:8b:4b:60:4b:e5:e5:c2:86:
         3e:15:a5:1d:cf:1c:b2:97:3b:3e:71:cd:82:ad:e2:bb:e9:cb:
         e8:64:34:7e:03:3e:a2:82:ab:b2:69:ac:33:43:85:f7:52:46:
         40:27:c2:32:99:6b:ba:be:c6:92:20:88:e2:c6:fc:d6:8b:3b:
         e4:55:74:c9:a5:82:ab:51:76:6b:18:5c:19:4a:ff:e5:ac:a0:
         56:d5:87:95:55:1f:53:db:7f:5f:bb:16:b1:35:df:5b:2b:8b:
         67:34:3f:36:c6:15:b3:78:d7:a0:f7:18:fb:de:f2:2f:46:55:
         0e:d5:86:00:2b:52:10:69:65:17:72:00:be:5c:1a:6a:aa:ac:
         a0:75:4a:d8:ac:30:cd:ad:af:28:92:d3:ba:ab:78:8c:31:5f:
         50:3c:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:19 2026 by rpki-client