This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
File:                     3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (raw, json)
Hash identifier:          +RzIkKcclhhmS8GwfpMzHJYL3/aslCxP9ofzAqZe73s=
Subject key identifier:   E0:CD:20:58:2F:6C:CD:85:C3:83:5C:17:A7:28:1A:8F:C4:C1:E3:F9
Certificate issuer:       /CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
Certificate serial:       682D23D7A6532746FFC9F42E1CAEF0663B9DB763
Authority key identifier: 47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
Signing time:             Mon 22 Dec 2025 13:00:02 +0000
ROA not before:           Mon 22 Dec 2025 12:55:02 +0000
ROA not after:            Mon 21 Dec 2026 13:00:02 +0000
asID:                     149690
IP address blocks:        103.186.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl
                          rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Feb 2026 19:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2d:23:d7:a6:53:27:46:ff:c9:f4:2e:1c:ae:f0:66:3b:9d:b7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E5E36B848613534A65DDE4FBA27AB59A745B50
        Validity
            Not Before: Dec 22 12:55:02 2025 GMT
            Not After : Dec 21 13:00:02 2026 GMT
        Subject: CN=E0CD20582F6CCD85C3835C17A7281A8FC4C1E3F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:57:d0:91:54:f6:13:f5:a9:a8:3d:b3:40:
                    3a:48:21:11:42:be:a3:2d:cc:25:eb:25:53:7b:08:
                    b3:27:c3:bd:b7:74:43:4c:2f:dc:4a:b2:99:96:20:
                    0e:fc:5d:50:aa:3e:7f:fd:ce:24:f6:88:85:b0:46:
                    b7:62:02:c6:27:cd:4e:6a:7a:0e:8a:8f:a9:c3:7b:
                    7d:8e:3b:17:ed:94:a6:0a:3d:22:3a:1c:5a:2d:29:
                    60:4f:1a:90:ac:6b:16:e8:eb:de:ea:4c:54:53:73:
                    12:c2:05:f3:90:93:e3:34:be:13:fa:d8:cc:44:eb:
                    4c:6e:c2:14:ea:da:5f:fb:cd:ef:ee:ba:56:f3:da:
                    7e:66:ba:77:9b:87:4e:58:43:4e:28:86:4f:7c:44:
                    96:1c:f4:5b:ee:c5:89:65:e7:0f:e9:de:a3:e6:bb:
                    86:9a:cf:67:96:f3:8b:45:6f:e0:c3:b2:df:98:f1:
                    4e:80:60:fd:cf:60:3b:8f:8d:38:91:1d:56:c2:79:
                    24:1a:f0:0e:07:2c:63:e6:b2:25:2c:40:2a:90:81:
                    36:d3:27:e3:f3:ff:a1:c1:e5:f5:f5:58:ad:53:a7:
                    c8:5c:e7:90:ab:69:44:03:55:1c:a1:db:80:5f:cd:
                    0e:e0:41:f6:75:05:ff:96:13:d4:ae:c1:f8:47:d6:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CD:20:58:2F:6C:CD:85:C3:83:5C:17:A7:28:1A:8F:C4:C1:E3:F9
            X509v3 Authority Key Identifier:
                keyid:47:E5:E3:6B:84:86:13:53:4A:65:DD:E4:FB:A2:7A:B5:9A:74:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/47E5E36B848613534A65DDE4FBA27AB59A745B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47E5E36B848613534A65DDE4FBA27AB59A745B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d5:2b:b3:10:a7:e2:08:1b:16:87:ae:9b:46:9b:0a:19:78:
         c4:07:a9:d4:82:47:bc:68:42:b9:df:75:77:bf:16:12:44:ae:
         9f:fd:de:6c:bb:b0:46:69:fd:03:3e:02:c0:a3:b6:cb:cf:c9:
         fd:8c:fe:cc:df:49:14:a8:68:44:4d:5e:0a:0e:04:91:1c:0d:
         68:eb:19:9f:8f:40:3e:1a:35:fe:60:9a:b3:af:bc:ab:d1:39:
         69:a6:49:1b:ba:05:cd:ee:39:ca:fe:74:fe:4e:fb:68:54:46:
         94:fc:86:1a:ae:b2:11:9e:3b:44:09:14:7d:20:16:b4:18:3b:
         86:cd:a6:f9:83:12:64:a8:73:75:ba:9e:28:3b:23:37:74:ae:
         c9:d1:3c:75:7b:88:51:fb:b6:c1:30:f1:2b:79:21:c9:e6:1e:
         1f:ac:4f:ad:13:fd:ed:e6:b7:ff:8d:6a:e5:ed:b5:3e:c2:ac:
         72:06:e3:73:86:44:90:52:a2:a6:59:b9:ed:fc:fb:39:92:90:
         21:12:3d:25:a0:ba:6f:72:1e:b6:73:53:78:4f:4d:fe:6a:7d:
         5c:7a:b9:95:a2:4c:03:e1:ea:2b:77:5d:e1:de:1c:7f:a5:b5:
         e2:63:bb:9f:95:20:07:85:fe:84:23:d8:56:3a:ca:01:b3:a7:
         66:da:37:ee
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaC0j16ZTJ0b/yfQuHK7wZjudt2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5
QTc0NUI1MDAeFw0yNTEyMjIxMjU1MDJaFw0yNjEyMjExMzAwMDJaMDMxMTAvBgNV
BAMTKEUwQ0QyMDU4MkY2Q0NEODVDMzgzNUMxN0E3MjgxQThGQzRDMUUzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/FfQkVT2E/WpqD2zQDpIIRFC
vqMtzCXrJVN7CLMnw723dENML9xKspmWIA78XVCqPn/9ziT2iIWwRrdiAsYnzU5q
eg6Kj6nDe32OOxftlKYKPSI6HFotKWBPGpCsaxbo697qTFRTcxLCBfOQk+M0vhP6
2MxE60xuwhTq2l/7ze/uulbz2n5munebh05YQ04ohk98RJYc9FvuxYll5w/p3qPm
u4aaz2eW84tFb+DDst+Y8U6AYP3PYDuPjTiRHVbCeSQa8A4HLGPmsiUsQCqQgTbT
J+Pz/6HB5fX1WK1Tp8hc55CraUQDVRyh24BfzQ7gQfZ1Bf+WE9SuwfhH1gc9AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4M0gWC9szYXDg1wXpygaj8TB4/kwHwYDVR0j
BBgwFoAUR+Xja4SGE1NKZd3k+6J6tZp0W1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Y2U5ZjQzZC0wOGJhLTRkMDItOGYzOC03NDczMmYxNWNkOGMvMC80N0U1RTM2Qjg0
ODYxMzUzNEE2NURERTRGQkEyN0FCNTlBNzQ1QjUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDdFNUUzNkI4NDg2MTM1MzRBNjVEREU0RkJBMjdBQjU5QTc0
NUI1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjZTlmNDNkLTA4YmEtNGQwMi04
ZjM4LTc0NzMyZjE1Y2Q4Yy8wLzMxMzAzMzJlMzEzODM2MmUzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7ogMA0GCSqG
SIb3DQEBCwUAA4IBAQBW1SuzEKfiCBsWh66bRpsKGXjEB6nUgke8aEK533V3vxYS
RK6f/d5su7BGaf0DPgLAo7bLz8n9jP7M30kUqGhETV4KDgSRHA1o6xmfj0A+GjX+
YJqzr7yr0TlppkkbugXN7jnK/nT+TvtoVEaU/IYarrIRnjtECRR9IBa0GDuGzab5
gxJkqHN1up4oOyM3dK7J0Tx1e4hR+7bBMPEreSHJ5h4frE+tE/3t5rf/jWrl7bU+
wqxyBuNzhkSQUqKmWbnt/Ps5kpAhEj0loLpvch62c1N4T03+an1cermVokwD4eor
d13h3hx/pbXiY7uflSAHhf6EI9hWOsoBs6dm2jfu
-----END CERTIFICATE-----
Generated at Mon Feb 2 17:25:01 2026 by rpki-client