This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa
File:                     AS142190.roa (raw, json)
Hash identifier:          VkDsUGPeL2hk7wunvN952YkCTUV7u8TbSSA3tP+KzZ4=
Subject key identifier:   1C:41:63:D3:5A:BC:D3:36:4B:63:C4:B8:CE:4D:D1:C1:B4:1E:C1:64
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       5767723E975F37A0E7492BFB4B08F3B780BB1AC7
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa
Signing time:             Tue 20 Jan 2026 06:24:51 +0000
ROA not before:           Tue 20 Jan 2026 06:19:51 +0000
ROA not after:            Tue 19 Jan 2027 06:24:51 +0000
asID:                     142190
IP address blocks:        192.232.36.0/24 maxlen: 24
                          192.232.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:67:72:3e:97:5f:37:a0:e7:49:2b:fb:4b:08:f3:b7:80:bb:1a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 20 06:19:51 2026 GMT
            Not After : Jan 19 06:24:51 2027 GMT
        Subject: CN=1C4163D35ABCD3364B63C4B8CE4DD1C1B41EC164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:c4:3e:45:c6:62:c5:2c:80:5a:06:43:44:
                    7e:3c:78:79:32:c1:e9:fc:bc:83:9f:85:bb:bc:81:
                    e6:ac:50:a2:f1:3c:ac:a2:9e:ef:60:9c:a7:a2:a8:
                    8b:5d:cc:2a:67:1b:c9:4a:1e:c9:9b:97:22:83:12:
                    99:35:68:04:88:c3:87:9c:24:29:08:c2:e5:2d:71:
                    6a:2f:c0:b5:d0:fe:47:8e:c9:96:76:e9:bf:25:ed:
                    56:e8:ce:c4:ed:d5:16:16:2d:d2:ac:6b:7f:77:8c:
                    4b:40:f0:56:8c:50:52:d4:22:6d:fa:61:c2:0d:77:
                    2d:38:6f:06:3a:ba:e0:68:04:8e:86:40:57:9a:5f:
                    02:5f:4d:63:9d:ec:1a:46:1b:13:e7:c1:ee:cd:e7:
                    ec:b7:e5:30:7b:fa:ab:93:d1:ea:fb:59:3f:e9:21:
                    57:39:2c:c4:f3:91:39:f0:ea:11:be:67:b3:6a:c5:
                    e3:4e:16:e0:d0:81:87:34:f0:1f:61:94:c2:70:5e:
                    59:27:11:16:37:72:54:21:a4:38:25:83:6c:c7:cb:
                    d7:0b:8a:a3:bf:6d:29:2a:63:d8:b2:46:e2:df:90:
                    6d:a0:7c:02:04:c2:2b:23:89:de:a9:1a:32:bd:c6:
                    64:c9:4e:5b:3c:e1:4b:39:3a:58:f6:18:dd:1d:7e:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:41:63:D3:5A:BC:D3:36:4B:63:C4:B8:CE:4D:D1:C1:B4:1E:C1:64
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142190.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:96:e2:16:a0:d7:24:aa:ff:73:9a:11:cb:cd:6c:34:db:4e:
         c0:aa:77:d4:04:36:e1:e9:b4:12:7c:3e:6b:84:c8:6b:92:f7:
         d9:52:76:b5:9d:a9:60:58:0c:25:c6:e1:02:d0:50:a2:3a:4a:
         a2:22:45:8e:92:0a:f6:61:d7:85:32:a1:4b:13:4f:7e:04:2d:
         6a:e2:0d:7f:f1:1f:ec:98:e8:8e:c1:2e:01:bb:36:b8:0f:4a:
         37:88:80:9d:91:e7:60:3f:7d:39:32:2d:6f:b6:94:42:27:c6:
         5f:3e:36:59:5f:ab:f7:ca:fe:2a:f4:a6:f9:4c:e6:45:69:33:
         6a:99:6d:02:26:02:0a:96:89:c0:7d:8d:58:9c:5a:26:5b:a7:
         14:ad:9e:2b:b5:41:f5:db:2e:03:25:0b:5b:fc:e4:9c:75:2e:
         d6:67:8e:84:90:a9:98:30:29:d7:99:0d:0a:cf:4a:ea:59:cc:
         23:7b:b2:2d:4f:06:9a:0d:e4:31:d6:c6:97:4e:bc:b7:f8:ae:
         86:b7:c4:21:aa:e6:77:99:a3:da:8d:0c:a8:05:97:31:d3:8d:
         ac:18:31:70:86:29:e5:f6:f9:b7:7e:fe:47:7d:ff:b4:9e:a8:
         4e:5a:e7:3a:ca:41:e9:9f:a9:f9:d1:54:91:b8:36:66:10:2c:
         d3:06:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:27:55 2026 by rpki-client