This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa
File:                     3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (raw, json)
Hash identifier:          ICnoqiEwX4K5+bPW5k+TuCD6FcA6NPx7U34EDJ/BnWo=
Subject key identifier:   93:0D:F1:5F:1E:CD:91:11:3E:65:16:34:28:12:8D:F4:70:2D:AA:01
Certificate issuer:       /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47
Certificate serial:       0A9C3E54B9589F7B8AF168B1C234FE245C62D169
Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa
Signing time:             Sat 31 Jan 2026 05:00:02 +0000
ROA not before:           Sat 31 Jan 2026 04:55:02 +0000
ROA not after:            Sat 30 Jan 2027 05:00:02 +0000
asID:                     150943
IP address blocks:        103.210.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl
                          rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9c:3e:54:b9:58:9f:7b:8a:f1:68:b1:c2:34:fe:24:5c:62:d1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47
        Validity
            Not Before: Jan 31 04:55:02 2026 GMT
            Not After : Jan 30 05:00:02 2027 GMT
        Subject: CN=930DF15F1ECD91113E65163428128DF4702DAA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:55:4c:8f:69:7f:a1:9a:30:67:ff:d8:5a:
                    90:fa:5e:ce:f5:5d:6e:2c:40:39:26:d5:f4:59:f8:
                    e9:07:03:c9:ed:25:2d:9c:8d:c5:59:ad:81:41:59:
                    a4:10:c2:d1:cb:cb:ae:34:a9:c5:e1:91:27:eb:f1:
                    ea:00:65:7d:44:1f:c2:d5:3d:4e:42:c0:bf:a0:c3:
                    8d:a1:9c:43:be:36:e0:71:8c:4f:f0:c3:89:69:af:
                    fd:ef:62:df:86:81:5d:87:78:8d:f8:20:26:1b:7d:
                    5c:12:18:16:d7:9a:ed:26:27:ac:d5:77:78:f8:7f:
                    4a:d7:2f:c3:de:69:e1:13:95:84:28:06:3f:a7:d7:
                    7e:5c:d6:5a:ea:27:77:8c:57:97:bf:55:08:1f:ad:
                    36:26:6e:a0:61:57:ff:c4:81:1b:ae:16:2c:55:4a:
                    4a:52:d4:2e:4b:04:26:45:2b:fd:e2:87:e0:38:3d:
                    81:f8:3c:e7:93:92:c4:ab:6a:15:8d:44:c6:d6:8d:
                    7f:90:df:d9:6d:99:d9:63:78:4c:24:db:b0:5a:d9:
                    6c:6d:16:7e:cf:77:a3:14:5c:bc:82:ae:45:f2:5a:
                    3d:27:f6:df:08:6b:08:a1:c5:7f:f0:c5:5a:52:57:
                    31:fb:d1:cb:da:ba:db:9b:e2:c2:6c:6f:0c:d7:65:
                    e5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:F1:5F:1E:CD:91:11:3E:65:16:34:28:12:8D:F4:70:2D:AA:01
            X509v3 Authority Key Identifier:
                keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:1e:b2:cc:de:7d:7e:86:72:ac:d4:77:a9:c2:fd:26:79:
         a8:9f:f4:ee:1d:c1:3a:1a:4d:84:12:45:26:9d:54:ca:1c:2e:
         a7:15:8a:51:97:bb:da:e7:51:e7:af:55:fe:b4:96:1b:c3:70:
         b1:84:68:b4:c2:52:5b:e5:97:79:36:a0:3e:39:26:4d:02:d0:
         c7:79:e5:5d:eb:6f:a2:35:30:d5:26:b5:a9:12:6f:11:4a:42:
         ac:67:13:0c:2a:d0:56:65:f1:c1:c5:32:aa:da:7a:66:c4:7a:
         a8:ee:28:44:52:e8:02:7b:a5:20:f4:41:14:8d:e5:c7:53:29:
         78:19:54:15:37:b8:2a:7a:8a:f4:3d:2e:ec:f4:f1:d9:3b:99:
         be:37:9b:29:9e:ee:ca:78:83:a4:b1:1a:1b:e6:b4:1d:54:87:
         47:82:b7:68:3d:d7:55:78:ab:d2:be:39:8c:3c:00:d9:28:e8:
         51:c1:a1:78:2b:c6:b6:ef:97:c0:13:57:b5:00:05:70:0c:65:
         33:54:e3:60:2b:49:ca:e7:b4:de:22:37:0a:99:94:9d:e6:4b:
         c9:e7:21:c1:81:a6:da:1a:c2:87:f8:96:70:dc:d4:0f:ed:99:
         c5:76:c5:c6:07:d9:69:cc:a3:e0:60:49:cc:46:8c:92:91:05:
         f9:94:ef:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:28:10 2026 by rpki-client