This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          ikGxWPZOEbgUDak1S8/4CtTFLYGMeDrUhJdgA4v8gic=
Subject key identifier:   A3:81:65:E4:3E:CB:15:F7:6F:D8:8E:C0:90:27:DF:88:1D:A4:20:12
Certificate issuer:       /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial:       29BF8F2B9E2AD654EEA1A7BF03612E19794C794C
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 17 Dec 2025 16:00:03 +0000
ROA not before:           Wed 17 Dec 2025 15:55:03 +0000
ROA not after:            Wed 16 Dec 2026 16:00:03 +0000
asID:                     9341
IP address blocks:        103.180.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
                          rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 03:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bf:8f:2b:9e:2a:d6:54:ee:a1:a7:bf:03:61:2e:19:79:4c:79:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
        Validity
            Not Before: Dec 17 15:55:03 2025 GMT
            Not After : Dec 16 16:00:03 2026 GMT
        Subject: CN=A38165E43ECB15F76FD88EC09027DF881DA42012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:04:18:35:08:f1:05:4d:f9:fd:67:2e:db:99:
                    c7:4b:03:7c:26:aa:4e:07:3b:19:c5:5e:07:78:f4:
                    38:36:06:d4:49:d4:7c:1a:59:3a:f9:35:ff:b1:a7:
                    f0:38:0f:1c:c7:54:09:25:98:de:70:8c:ad:d5:3b:
                    dc:16:80:2e:63:1e:1c:60:72:35:45:b3:58:84:8a:
                    68:77:01:17:b7:a2:e0:ea:24:23:af:14:f6:a5:81:
                    67:67:6c:96:c2:36:3c:43:2a:76:01:8f:97:2b:07:
                    83:48:70:a3:b1:d0:6d:4a:ad:75:83:44:d2:34:d0:
                    6f:56:c7:43:61:81:a6:9b:31:79:d3:fa:d6:1d:e6:
                    13:cb:a1:cc:96:c7:c2:69:e6:de:b8:1e:c2:00:8f:
                    c0:2c:97:45:b2:0e:07:68:4b:69:90:4c:8b:e5:bf:
                    bc:d5:fd:c5:6c:d6:4f:71:98:46:47:a1:f6:8f:ee:
                    b5:68:83:d1:88:cc:76:75:69:8f:ae:d1:a6:9d:3a:
                    7b:f7:70:78:2d:4e:81:13:69:bd:3f:18:f9:10:50:
                    9c:e1:0e:1f:8b:e9:19:22:c2:4d:12:01:c2:ee:58:
                    5e:5a:fd:e5:56:65:af:d1:8d:9b:c7:06:08:38:33:
                    6e:d1:ae:36:0d:bf:47:85:db:f2:eb:44:4b:f0:32:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:81:65:E4:3E:CB:15:F7:6F:D8:8E:C0:90:27:DF:88:1D:A4:20:12
            X509v3 Authority Key Identifier:
                keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:a5:75:ea:75:99:c5:35:f8:6a:f2:2c:1a:66:bd:bd:42:
         ce:f7:e7:df:d3:b4:e1:e6:3b:2c:1a:62:53:e4:3d:4d:62:51:
         e8:61:e0:1c:e0:55:ae:af:7b:75:45:66:3a:f6:8d:72:0f:0e:
         47:8a:14:77:5a:23:24:de:7f:f7:94:55:21:47:67:92:55:c8:
         a3:d6:17:f7:a5:8c:3b:9f:d3:fe:28:08:13:e2:ee:a3:d7:3a:
         77:a4:05:d7:9a:7e:19:00:30:6b:ce:d5:b7:88:96:55:fd:47:
         15:87:31:45:2f:23:19:cd:0f:3b:ac:8a:a4:a7:27:db:d1:f1:
         08:ff:e5:c4:25:eb:46:ce:04:f4:e0:3b:bb:c0:2c:66:da:0d:
         dd:fd:d2:0b:0a:6e:75:d6:28:a5:eb:6f:be:ee:ab:d3:1a:ff:
         3c:05:db:e9:69:c0:61:70:c4:03:cd:36:be:d1:57:d9:8b:6f:
         b1:0e:15:d4:55:d7:27:03:b5:8f:5c:c5:06:6f:c0:0e:67:e1:
         d6:94:da:e2:0f:8d:0c:75:35:67:de:9d:3d:11:f4:44:f2:51:
         41:4e:cb:a2:32:37:79:94:91:40:31:94:a8:01:11:8a:9f:af:
         aa:d2:0e:94:33:a3:9b:e9:a4:a1:5e:b2:3f:35:79:1b:06:eb:
         6f:32:7a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:57:22 2025 by rpki-client