This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa
File:                     AS135485.roa (raw, json)
Hash identifier:          LmpkGKm3ZBai8vIq14fkUlX/Qg11SQ6eGdgWQ3FqyCY=
Subject key identifier:   46:29:3B:02:D4:39:DA:F9:1B:E7:BE:1D:03:71:7B:1D:9C:5D:C4:76
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1EB2377B7CCA63DEC4BACBCEC4F302DAA9174E89
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa
Signing time:             Thu 25 Dec 2025 04:00:39 +0000
ROA not before:           Thu 25 Dec 2025 03:55:39 +0000
ROA not after:            Thu 24 Dec 2026 04:00:39 +0000
asID:                     135485
IP address blocks:        103.78.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b2:37:7b:7c:ca:63:de:c4:ba:cb:ce:c4:f3:02:da:a9:17:4e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 25 03:55:39 2025 GMT
            Not After : Dec 24 04:00:39 2026 GMT
        Subject: CN=46293B02D439DAF91BE7BE1D03717B1D9C5DC476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:f5:35:3a:4a:0d:42:c0:02:7f:30:97:f2:
                    81:2a:31:f7:50:37:ab:0c:ea:ff:f5:27:0e:ea:b2:
                    e7:25:1f:2e:81:10:92:70:69:a2:f4:73:ad:c3:77:
                    d4:25:44:84:46:b0:58:83:4d:c1:02:2e:b4:99:43:
                    2c:06:34:27:50:4d:e1:34:4f:ed:9f:3a:8d:52:01:
                    fe:ba:da:d2:4d:d1:55:d8:40:6e:58:93:5c:b3:8c:
                    d0:df:80:9e:27:06:16:cd:09:99:dc:58:22:04:fc:
                    36:49:7a:27:64:ae:a1:05:ff:61:7b:79:26:f9:d5:
                    4a:ca:fe:fb:39:6c:56:a7:50:8a:3d:c2:f1:e8:b4:
                    01:e9:0b:dc:ee:0b:00:a5:1c:b7:42:41:1c:e5:83:
                    2d:1b:ee:9a:34:c6:d8:83:98:68:58:92:59:76:cf:
                    b9:17:16:b8:00:cf:da:49:d7:84:4b:0b:21:2c:21:
                    2e:70:79:ee:0b:1c:7a:28:a7:09:0c:9b:3c:15:87:
                    3a:23:ea:10:71:4d:8a:0d:77:f9:35:e9:c5:73:14:
                    69:09:c4:97:bc:45:6d:26:90:f8:f8:2e:0e:6b:13:
                    77:81:5c:2d:dc:ed:5b:cc:8f:bf:17:42:b0:fd:86:
                    86:ea:7b:b7:b7:25:52:76:fc:35:6f:67:10:78:c5:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:29:3B:02:D4:39:DA:F9:1B:E7:BE:1D:03:71:7B:1D:9C:5D:C4:76
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135485.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:32:25:ac:1d:c4:03:d3:7f:ed:b0:0b:64:ef:11:cb:93:d7:
         2b:9c:0f:f3:77:80:4d:36:c5:f1:16:96:13:6e:22:0c:b6:32:
         b5:0c:77:3c:c9:69:a1:6c:ed:b3:2b:9b:5d:fc:69:44:8d:2e:
         45:ec:a7:da:80:d2:31:ef:2d:62:3f:d6:c3:84:d2:97:9f:bf:
         85:a2:d7:c9:7e:be:2a:5b:4e:fa:eb:c9:13:24:8d:ed:6f:ac:
         05:07:f3:0a:4b:e0:d5:ea:fb:e1:2e:01:a3:0c:ab:50:85:d7:
         5e:5b:e8:3f:ba:86:0b:a0:23:f4:88:c3:31:78:93:fe:1e:ec:
         54:34:0d:43:6d:38:29:97:ca:ca:d7:96:d1:3b:73:30:b9:47:
         14:40:ea:f7:00:90:d4:74:9e:0c:a9:0f:9b:90:3f:5c:5e:8e:
         17:eb:5c:0e:04:ec:5e:56:90:4b:4a:a4:bb:47:f8:35:a2:59:
         6c:e4:57:3a:13:36:3f:7e:e7:a8:6c:46:6a:8f:af:0e:c5:29:
         7f:c5:d7:7f:38:8b:4b:3b:a0:89:e3:7c:22:8e:9a:70:91:c3:
         a4:db:b7:39:59:d8:78:49:e9:32:c5:21:d9:04:13:a9:e5:7f:
         59:d2:5b:49:44:9d:c4:1b:15:34:ff:71:82:30:23:84:29:7e:
         8e:76:6d:ad
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUHrI3e3zKY97EusvOxPMC2qkXTokwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTIyNTAzNTUzOVoX
DTI2MTIyNDA0MDAzOVowMzExMC8GA1UEAxMoNDYyOTNCMDJENDM5REFGOTFCRTdC
RTFEMDM3MTdCMUQ5QzVEQzQ3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALqE9TU6Sg1CwAJ/MJfygSox91A3qwzq//UnDuqy5yUfLoEQknBpovRzrcN3
1CVEhEawWINNwQIutJlDLAY0J1BN4TRP7Z86jVIB/rra0k3RVdhAbliTXLOM0N+A
nicGFs0JmdxYIgT8Nkl6J2SuoQX/YXt5JvnVSsr++zlsVqdQij3C8ei0AekL3O4L
AKUct0JBHOWDLRvumjTG2IOYaFiSWXbPuRcWuADP2knXhEsLISwhLnB57gsceiin
CQybPBWHOiPqEHFNig13+TXpxXMUaQnEl7xFbSaQ+PguDmsTd4FcLdztW8yPvxdC
sP2Ghup7t7clUnb8NW9nEHjFNUMCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRGKTsC
1Dna+Rvnvh0DcXsdnF3EdjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTQ4NS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdOajANBgkqhkiG9w0BAQsFAAOCAQEASDIlrB3EA9N/7bALZO8R
y5PXK5wP83eATTbF8RaWE24iDLYytQx3PMlpoWztsyubXfxpRI0uReyn2oDSMe8t
Yj/Ww4TSl5+/haLXyX6+KltO+uvJEySN7W+sBQfzCkvg1er74S4BowyrUIXXXlvo
P7qGC6Aj9IjDMXiT/h7sVDQNQ204KZfKyteW0TtzMLlHFEDq9wCQ1HSeDKkPm5A/
XF6OF+tcDgTsXlaQS0qku0f4NaJZbORXOhM2P37nqGxGao+vDsUpf8XXfziLSzug
ieN8Io6acJHDpNu3OVnYeEnpMsUh2QQTqeV/WdJbSUSdxBsVNP9xgjAjhCl+jnZt
rQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:22 2026 by rpki-client