This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa
File:                     AS133826.roa (raw, json)
Hash identifier:          TcbA0xClP9ESXVZG6W+QX3xu2GDSz8cTbEvGfqs00ew=
Subject key identifier:   65:58:FF:10:3B:1D:D3:6E:FC:DC:AA:F9:70:ED:B5:34:46:C1:36:12
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       325D89B5B10E9F4C9E297C72EB0E47380ACF8490
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa
Signing time:             Tue 27 Jan 2026 08:00:00 +0000
ROA not before:           Tue 27 Jan 2026 07:55:00 +0000
ROA not after:            Tue 26 Jan 2027 08:00:00 +0000
asID:                     133826
IP address blocks:        103.56.188.0/24 maxlen: 24
                          103.56.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5d:89:b5:b1:0e:9f:4c:9e:29:7c:72:eb:0e:47:38:0a:cf:84:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 27 07:55:00 2026 GMT
            Not After : Jan 26 08:00:00 2027 GMT
        Subject: CN=6558FF103B1DD36EFCDCAAF970EDB53446C13612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:63:15:f6:4c:f4:12:35:c8:0c:dc:8b:b2:2f:
                    f7:f4:e2:ca:9c:dd:12:a3:2c:7f:6e:69:af:e3:1d:
                    49:ac:e6:0e:48:0d:1f:57:60:32:0b:18:ac:6a:0e:
                    08:81:83:c5:3a:e2:db:6a:8b:61:70:0e:44:f8:95:
                    1d:a1:07:11:c3:2e:33:86:16:8d:00:d6:5b:cb:1c:
                    1d:c7:e1:8d:99:16:1d:3c:ef:bd:1d:2a:72:1a:a8:
                    0a:4d:10:43:02:a6:59:72:e5:66:ac:b3:4d:83:95:
                    34:b6:13:5c:d3:a1:fe:65:5d:71:af:ec:20:fc:6b:
                    d2:ae:c3:4e:d3:e7:9d:ae:f8:bb:8f:b0:1d:d1:35:
                    7e:e3:5b:ea:3c:61:a1:11:ff:5b:07:7e:2d:21:ce:
                    fc:af:73:9e:1e:fc:e1:87:b9:bf:d3:6c:0f:75:be:
                    86:10:da:67:d4:75:a9:39:89:e8:7d:ef:e6:37:9c:
                    35:de:0a:37:43:ab:be:ce:c8:d0:84:7c:ad:c9:29:
                    4a:66:28:b5:72:67:25:df:98:12:8e:94:f1:d3:9d:
                    bd:46:31:03:2a:02:99:fd:1a:a4:3a:91:8b:dd:a5:
                    91:eb:1d:db:ac:c2:3b:db:71:e7:1d:e3:73:8d:e9:
                    5f:85:43:c8:19:00:93:3b:5f:83:f1:2d:30:87:28:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:58:FF:10:3B:1D:D3:6E:FC:DC:AA:F9:70:ED:B5:34:46:C1:36:12
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS133826.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:89:f7:20:3c:01:60:5d:d8:e2:61:2a:ed:7e:e2:2b:52:
         34:a6:12:1b:7e:51:3f:de:b7:63:1b:f3:5d:cd:09:cd:e3:f4:
         6a:b5:01:a9:7c:84:67:1a:d4:f5:21:68:3d:79:cf:d0:4b:6b:
         57:9b:b0:27:64:f6:4c:c7:8a:49:3a:6c:2a:a5:c4:b3:2d:da:
         e5:15:34:be:c5:85:ea:c1:03:94:29:f5:e4:f3:d1:37:e6:56:
         5b:d6:64:5b:64:ec:d0:b1:32:d9:51:fe:1e:73:a8:23:3f:b5:
         9f:a8:6c:04:87:62:ef:8f:4b:e0:98:cc:03:eb:d7:2b:2e:29:
         86:8f:a8:3f:6b:49:75:ce:26:d5:51:40:2a:34:37:2f:c7:17:
         ef:ad:67:1b:91:96:6d:92:f5:e5:5f:90:99:47:43:04:b0:58:
         4f:a4:ef:6e:4d:cd:fa:66:0c:32:a5:c4:72:72:70:30:f7:2e:
         3a:5f:d7:58:79:00:1f:51:6a:62:0c:aa:c3:18:7d:2a:c0:ba:
         06:f5:32:f3:25:8d:6b:49:17:60:0e:dc:e8:65:fd:4e:34:7a:
         57:f3:e5:29:04:47:a0:29:d4:a4:77:ce:94:bf:0a:44:f2:d0:
         7c:c3:3c:4d:84:93:ae:a8:58:89:5c:64:1f:dc:a4:51:3a:e1:
         b8:e3:9a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:17 2026 by rpki-client