This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa
File:                     3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa (raw, json)
Hash identifier:          MC4A5+D6SNqarshQJZ1rQAWQNgzbfnlg0wjJs81Ja6E=
Subject key identifier:   C7:A0:5E:DD:DA:6C:0A:00:96:84:FD:9F:2E:67:1B:2D:FA:7F:87:6D
Certificate issuer:       /CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81
Certificate serial:       7CB09CD7E90207DF43D4762727C47D21E8F9CC0D
Authority key identifier: E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa
Signing time:             Tue 06 Jan 2026 01:00:02 +0000
ROA not before:           Tue 06 Jan 2026 00:55:02 +0000
ROA not after:            Tue 05 Jan 2027 01:00:02 +0000
asID:                     141082
IP address blocks:        103.156.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl
                          rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Feb 2026 16:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b0:9c:d7:e9:02:07:df:43:d4:76:27:27:c4:7d:21:e8:f9:cc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E003E850B77C76F0E024F1DA6EFBD8767B411A81
        Validity
            Not Before: Jan  6 00:55:02 2026 GMT
            Not After : Jan  5 01:00:02 2027 GMT
        Subject: CN=C7A05EDDDA6C0A009684FD9F2E671B2DFA7F876D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:75:f2:a3:3f:99:93:41:72:c2:4f:6b:e7:ed:
                    e2:a6:92:da:9d:6a:07:b1:b5:46:07:89:b5:d5:94:
                    34:b5:8a:d1:e2:08:a5:df:66:27:27:86:ed:7c:df:
                    a7:f4:7c:9b:40:87:b4:d2:49:d8:39:9c:c2:e9:c9:
                    4d:4b:e7:1b:73:c8:d5:b3:09:56:bd:ed:5b:95:d4:
                    b9:71:87:ad:6a:e2:cc:e5:68:7a:84:ba:0e:af:24:
                    96:26:64:9d:71:78:0d:7f:e9:b1:2e:6f:7d:72:37:
                    35:36:e6:72:bb:d5:d0:4d:ab:48:20:ee:39:ad:f5:
                    b0:92:60:58:a9:e4:e7:30:c3:6d:11:e8:04:1c:ac:
                    2d:42:a4:c5:d4:5a:c6:26:26:f0:48:13:2b:52:10:
                    d4:4b:09:a1:63:cf:d5:19:dd:92:9d:90:8e:24:05:
                    6f:34:16:d0:75:4c:b5:01:48:e2:0c:83:ac:63:3e:
                    7e:ae:ff:77:ac:b4:99:9f:bf:75:99:90:f6:f9:a4:
                    56:8b:56:52:0d:e5:12:40:80:eb:9d:f1:4a:c3:ab:
                    ad:96:24:a5:58:79:68:d4:2d:41:36:a1:c6:08:45:
                    e2:56:aa:7f:d1:7e:bf:23:59:d9:19:30:3c:0d:58:
                    ff:d0:ed:8d:04:7c:c3:18:9e:b1:89:9f:1e:a7:87:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A0:5E:DD:DA:6C:0A:00:96:84:FD:9F:2E:67:1B:2D:FA:7F:87:6D
            X509v3 Authority Key Identifier:
                keyid:E0:03:E8:50:B7:7C:76:F0:E0:24:F1:DA:6E:FB:D8:76:7B:41:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/E003E850B77C76F0E024F1DA6EFBD8767B411A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E003E850B77C76F0E024F1DA6EFBD8767B411A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f00102d0-714f-4b52-9be5-ded16edfe4a2/0/3130332e3135362e37342e302f32332d3234203d3e20313431303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:8a:2d:f1:60:2b:a1:2e:64:3d:22:e8:24:60:89:b3:7c:94:
         4d:39:87:80:77:c0:89:6b:84:13:b6:a2:10:fc:57:78:39:52:
         51:6e:94:f0:d5:84:d5:d2:bb:52:e9:27:a3:a3:3c:59:9f:5d:
         f9:c3:2b:a8:b0:3b:95:ec:f0:be:2d:90:3c:fb:fe:82:26:16:
         d9:74:de:f9:fe:70:56:8a:59:eb:10:40:ad:46:c4:cd:1f:b9:
         69:5f:cf:e9:c5:f8:2e:a7:12:8b:2e:d3:8d:6d:d4:cd:d9:34:
         9d:70:7e:ad:09:c9:37:60:aa:d1:23:30:6c:d0:8c:ef:27:89:
         fa:9f:ab:f1:fd:08:af:8f:fe:2a:3e:1e:05:3a:9b:5b:48:d2:
         02:96:de:78:e4:71:2b:95:eb:46:01:b9:46:a5:b9:41:db:ad:
         a9:64:84:d0:67:73:b9:6b:21:c7:0d:8c:ca:d1:ba:c4:f9:38:
         8e:45:f9:e8:ff:4f:df:be:ff:c4:b5:03:04:6e:48:fb:f4:6f:
         40:a3:39:a1:ec:6b:66:a2:81:a9:0f:05:6a:d9:45:a8:77:26:
         90:88:69:9b:9d:f7:fd:89:ec:15:3e:bd:5b:8b:6f:0d:44:9d:
         b5:eb:3d:62:9a:0a:15:4d:1b:ae:5d:72:4f:7e:67:8f:7f:0c:
         80:64:13:eb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfLCc1+kCB99D1HYnJ8R9Iej5zA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3
QjQxMUE4MTAeFw0yNjAxMDYwMDU1MDJaFw0yNzAxMDUwMTAwMDJaMDMxMTAvBgNV
BAMTKEM3QTA1RUREREE2QzBBMDA5Njg0RkQ5RjJFNjcxQjJERkE3Rjg3NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdfKjP5mTQXLCT2vn7eKmktqd
agextUYHibXVlDS1itHiCKXfZicnhu1836f0fJtAh7TSSdg5nMLpyU1L5xtzyNWz
CVa97VuV1Llxh61q4szlaHqEug6vJJYmZJ1xeA1/6bEub31yNzU25nK71dBNq0gg
7jmt9bCSYFip5Ocww20R6AQcrC1CpMXUWsYmJvBIEytSENRLCaFjz9UZ3ZKdkI4k
BW80FtB1TLUBSOIMg6xjPn6u/3estJmfv3WZkPb5pFaLVlIN5RJAgOud8UrDq62W
JKVYeWjULUE2ocYIReJWqn/Rfr8jWdkZMDwNWP/Q7Y0EfMMYnrGJnx6nh7CRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUx6Be3dpsCgCWhP2fLmcbLfp/h20wHwYDVR0j
BBgwFoAU4APoULd8dvDgJPHabvvYdntBGoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDAxMDJkMC03MTRmLTRiNTItOWJlNS1kZWQxNmVkZmU0YTIvMC9FMDAzRTg1MEI3
N0M3NkYwRTAyNEYxREE2RUZCRDg3NjdCNDExQTgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTAwM0U4NTBCNzdDNzZGMEUwMjRGMURBNkVGQkQ4NzY3QjQx
MUE4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwMDEwMmQwLTcxNGYtNGI1Mi05
YmU1LWRlZDE2ZWRmZTRhMi8wLzMxMzAzMzJlMzEzNTM2MmUzNzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5xKMA0GCSqG
SIb3DQEBCwUAA4IBAQDPii3xYCuhLmQ9IugkYImzfJRNOYeAd8CJa4QTtqIQ/Fd4
OVJRbpTw1YTV0rtS6SejozxZn135wyuosDuV7PC+LZA8+/6CJhbZdN75/nBWilnr
EECtRsTNH7lpX8/pxfgupxKLLtONbdTN2TSdcH6tCck3YKrRIzBs0IzvJ4n6n6vx
/Qivj/4qPh4FOptbSNIClt545HErletGAblGpblB262pZITQZ3O5ayHHDYzK0brE
+TiORfno/0/fvv/EtQMEbkj79G9Aozmh7GtmooGpDwVq2UWodyaQiGmbnff9iewV
Pr1bi28NRJ216z1imgoVTRuuXXJPfmePfwyAZBPr
-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:55 2026 by rpki-client