This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9422.roa
File:                     AS9422.roa (raw, json)
Hash identifier:          ghrxFfph/NNfcrxMlfrXYRsvj1xMfs6kCTqxizvuhao=
Subject key identifier:   5B:EC:A2:C3:30:C3:24:0C:EE:E2:16:8C:7F:4F:3D:FE:F1:EF:45:45
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       64393794D45E195FC094926A5CB9A35D03774AA6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9422.roa
Signing time:             Fri 02 Jan 2026 07:02:39 +0000
ROA not before:           Fri 02 Jan 2026 06:57:39 +0000
ROA not after:            Fri 01 Jan 2027 07:02:39 +0000
asID:                     9422
IP address blocks:        103.173.128.0/24 maxlen: 24
                          103.248.217.0/24 maxlen: 24
                          103.248.218.0/24 maxlen: 24
                          2407:7c0:100::/40 maxlen: 48
                          2407:7c0:9422::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Jan 2026 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:39:37:94:d4:5e:19:5f:c0:94:92:6a:5c:b9:a3:5d:03:77:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  2 06:57:39 2026 GMT
            Not After : Jan  1 07:02:39 2027 GMT
        Subject: CN=5BECA2C330C3240CEEE2168C7F4F3DFEF1EF4545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:a7:73:9e:82:db:46:dd:be:0c:9e:7b:b4:
                    a7:9e:ff:6b:95:0b:bd:33:01:9e:3e:7d:ec:5d:51:
                    d1:ef:2d:92:38:ce:53:12:a8:80:95:ff:12:1b:06:
                    02:d3:18:65:95:48:4f:6c:ec:17:39:b4:7b:c8:12:
                    4e:8f:77:f9:ec:8c:6e:45:69:04:3c:3e:59:85:a0:
                    2e:50:00:ed:6a:c4:44:98:85:01:b2:5b:eb:86:9e:
                    c3:8e:be:15:d9:ef:2a:a4:a9:f4:f6:5d:1d:1a:c8:
                    1f:8e:92:e7:db:eb:a6:75:13:f6:31:60:20:c0:7b:
                    fc:8e:3c:b8:c9:ed:25:d9:da:03:ce:25:d4:ea:3c:
                    fa:fa:6e:57:07:7b:8a:ee:55:9f:7e:8f:26:4e:d1:
                    f4:a3:53:3f:3b:91:b4:d3:0e:28:ba:f3:76:be:b9:
                    0b:cc:da:79:78:bc:3b:ac:ea:c0:ec:25:3f:cc:0a:
                    76:6b:6f:a6:3f:37:63:fc:84:9e:48:16:76:5e:1f:
                    ac:18:4c:d0:e8:61:4e:ad:27:54:19:54:03:73:f2:
                    ab:ed:bb:96:5b:48:78:ec:d3:ff:0c:04:42:7d:1e:
                    c5:66:7e:84:fa:a3:74:0c:c6:c2:20:82:c9:74:e8:
                    f0:07:c9:ef:8c:ba:8c:bc:7b:fd:0d:4e:29:fe:7f:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EC:A2:C3:30:C3:24:0C:EE:E2:16:8C:7F:4F:3D:FE:F1:EF:45:45
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9422.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.128.0/24
                  103.248.217.0-103.248.218.255
                IPv6:
                  2407:7c0:100::/40
                  2407:7c0:9422::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:d4:ed:43:07:e3:39:57:51:c9:88:97:9f:aa:ce:3c:3f:
         f3:99:55:eb:fe:2f:98:b7:d0:ea:dd:58:dc:54:9a:e3:1d:42:
         82:4b:b6:70:2f:68:28:2d:d8:bf:2a:5f:d8:1c:14:f7:d5:82:
         9f:0c:1b:a3:99:97:38:3e:63:79:cc:1f:08:8c:cf:c3:5a:a7:
         7e:fe:4c:d7:35:69:b5:dd:4e:60:be:17:ef:f9:0d:31:8c:f2:
         97:1b:84:7c:01:fa:0a:e5:9a:27:c9:0b:76:87:f2:8f:53:39:
         01:f5:4a:bd:a1:c0:a1:22:cd:11:f4:df:08:1a:76:ce:93:88:
         a8:25:92:8c:51:da:52:04:69:ef:93:90:09:b1:d7:8c:b8:b5:
         28:16:40:09:df:2b:5d:39:a5:ee:b9:c2:58:bb:9a:33:fd:b7:
         bb:d5:59:19:6a:59:3b:d3:0d:09:b9:f3:bf:56:e9:60:36:b0:
         40:65:03:7c:80:a5:40:9d:97:84:96:e2:05:33:7f:b8:ef:84:
         38:64:4d:76:3a:49:1e:e0:1b:fd:67:f2:47:27:2f:69:c5:db:
         31:7f:4b:7a:15:e7:cf:7e:0e:58:74:81:ce:9e:e6:4f:ea:ee:
         42:55:7a:54:bc:60:9e:8f:77:a8:f3:1a:59:17:f6:45:d2:79:
         de:16:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 14 06:19:19 2026 by rpki-client