This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
File:                     AS137368.roa (raw, json)
Hash identifier:          13U55rJRathgKf2iq3KAfzKlrkZEp+P6Xhl7n6VBEBY=
Subject key identifier:   B2:C5:1B:27:88:AE:85:5B:F4:C3:0A:5F:5E:F4:0A:CA:18:9B:E9:D8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1B95BC70BA812497D7CE7C80D877764EAF407C6A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
Signing time:             Tue 11 Nov 2025 06:00:12 +0000
ROA not before:           Tue 11 Nov 2025 05:55:12 +0000
ROA not after:            Tue 10 Nov 2026 06:00:12 +0000
asID:                     137368
IP address blocks:        103.116.210.0/24 maxlen: 24
                          2001:df3:ff00::/48 maxlen: 48
                          2001:df5:7b00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:bc:70:ba:81:24:97:d7:ce:7c:80:d8:77:76:4e:af:40:7c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:12 2025 GMT
            Not After : Nov 10 06:00:12 2026 GMT
        Subject: CN=B2C51B2788AE855BF4C30A5F5EF40ACA189BE9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1c:45:68:27:24:53:39:33:a1:74:a3:a6:6f:
                    2d:8d:f9:88:4a:e4:c7:8b:f1:80:50:d7:2a:da:e4:
                    45:1c:e6:f0:3b:e9:d7:40:bf:a0:82:ff:d2:9b:b6:
                    42:9f:63:55:a9:28:3b:94:8e:ae:45:b3:c0:8d:22:
                    03:21:28:9d:71:6b:b4:54:50:5b:c7:28:3f:03:7e:
                    9a:8b:9d:7d:b1:7a:e8:5e:c6:c4:fa:11:6e:d7:b8:
                    e0:f5:23:9e:7e:38:a8:24:f8:1f:9e:27:d2:1a:22:
                    84:ac:20:fa:6c:0e:0b:8a:e4:4b:2e:29:b7:00:54:
                    51:4f:79:17:af:e3:07:07:17:99:f9:b1:97:6c:0a:
                    37:4b:51:05:59:b7:81:1a:1d:b5:ec:c6:1c:0d:53:
                    a1:43:24:4f:75:7d:0b:96:30:c0:f9:b2:3c:b5:47:
                    d5:8f:90:c0:7f:97:a3:94:c8:17:a5:84:5e:e3:77:
                    a3:eb:7f:27:76:32:d5:10:8f:d8:29:0f:15:35:21:
                    72:24:92:88:32:7a:84:d5:1e:c6:b6:e7:0b:f8:ec:
                    a5:95:e3:60:b0:6e:71:31:de:af:20:30:f3:cc:87:
                    20:98:55:05:ce:e8:ce:9a:44:09:26:70:9f:63:4a:
                    64:4f:10:5c:50:d5:c0:2c:93:2b:98:d6:1b:b5:36:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:1B:27:88:AE:85:5B:F4:C3:0A:5F:5E:F4:0A:CA:18:9B:E9:D8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.210.0/24
                IPv6:
                  2001:df3:ff00::/48
                  2001:df5:7b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1e:bb:16:c3:ad:0a:55:70:8d:41:f6:91:75:44:59:05:a4:
         34:82:b5:c9:b8:8f:07:73:55:d9:55:eb:db:fe:63:a9:39:cb:
         ab:f7:4c:38:f8:c0:ed:48:e4:0c:b2:d1:3f:7b:77:fa:ea:43:
         ec:dc:71:2a:8d:79:8d:f6:a5:14:06:79:3c:7b:a5:87:19:cb:
         96:18:5a:87:58:8f:c1:7a:31:db:67:d9:03:9e:5f:68:9a:51:
         b6:59:68:8e:20:38:b2:54:a0:74:73:c4:eb:d9:33:3d:30:88:
         51:b7:4e:0a:9f:7f:f7:33:cc:ab:06:37:a0:53:1a:7d:a4:5c:
         8e:f4:9a:37:7d:3e:80:18:06:8e:69:29:6d:e2:3b:8e:35:02:
         2e:de:03:6f:0e:ad:98:5e:7e:a2:5a:da:51:b8:0b:c0:96:43:
         d5:b8:53:70:0d:21:e5:17:29:c7:f4:83:4e:ef:59:f3:64:cc:
         09:23:a6:0e:05:b6:9f:f0:46:24:b1:8b:ad:b1:a1:2b:67:6b:
         1d:e9:b4:f4:9b:07:ec:d0:03:9c:01:c7:bd:eb:7c:7c:03:e2:
         15:9c:64:b8:31:59:ff:f4:1d:5e:05:bc:f4:41:0b:c8:bc:3a:
         9a:1b:64:06:41:4a:f3:b9:58:d8:3e:37:7c:35:9e:ae:c1:89:
         e2:0b:9a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:06 2025 by rpki-client