This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138115.roa
File:                     AS138115.roa (raw, json)
Hash identifier:          hqarbr3mj4B5VeSSSOrIhSN4pRkSqZLYFp1WMYPx/zQ=
Subject key identifier:   28:A4:5F:06:CC:77:F4:C4:B2:84:9C:B7:6F:22:C0:D8:60:02:4D:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       628C4BDEEF5BF77C39F512CD47D790880E950FC2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138115.roa
Signing time:             Fri 09 Jan 2026 06:34:41 +0000
ROA not before:           Fri 09 Jan 2026 06:29:41 +0000
ROA not after:            Fri 08 Jan 2027 06:34:41 +0000
asID:                     138115
IP address blocks:        36.50.77.0/24 maxlen: 24
                          163.61.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8c:4b:de:ef:5b:f7:7c:39:f5:12:cd:47:d7:90:88:0e:95:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  9 06:29:41 2026 GMT
            Not After : Jan  8 06:34:41 2027 GMT
        Subject: CN=28A45F06CC77F4C4B2849CB76F22C0D860024D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:5e:da:fe:a8:b9:97:24:40:75:a5:0e:3c:
                    71:4a:e5:35:b8:c4:83:c8:f7:d8:fe:5e:21:72:b8:
                    85:63:bb:34:30:b2:d3:be:10:06:3d:ed:51:97:48:
                    61:2c:4f:03:99:76:79:c0:ef:94:07:34:b6:74:22:
                    a8:9c:de:13:12:16:ab:3a:77:49:8e:c4:21:d2:21:
                    d7:e5:00:a1:ae:ce:b8:8a:51:20:11:de:d7:91:31:
                    40:9e:ee:d4:01:4b:df:ac:9b:43:ad:72:45:00:5e:
                    e2:88:8a:0b:f6:7f:b2:d7:92:5e:b6:aa:47:3a:fd:
                    3f:25:a0:f5:65:6d:ba:6b:d2:2b:53:10:98:28:47:
                    5a:06:6e:56:75:43:5a:3c:52:e7:0a:8e:5d:f4:59:
                    d1:34:35:1e:bb:98:59:d4:81:d9:99:e5:26:f6:0b:
                    29:a1:f0:3a:1b:af:7a:32:5f:0a:1b:5c:49:d4:b6:
                    67:80:1e:2a:47:6c:6b:4e:76:41:bd:81:55:29:bb:
                    0b:5b:32:00:a5:48:1d:86:0d:e5:44:81:0f:ad:2e:
                    ce:d3:9b:31:62:bf:99:3b:b7:81:45:40:f7:d8:4e:
                    1b:34:46:48:0b:a7:19:dd:8d:99:23:f3:24:24:e6:
                    3a:2e:97:32:75:dd:b5:a6:e9:c5:58:fc:33:9f:9f:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A4:5F:06:CC:77:F4:C4:B2:84:9C:B7:6F:22:C0:D8:60:02:4D:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138115.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.77.0/24
                  163.61.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:a8:47:35:94:cd:2e:03:6a:8b:81:68:83:78:a1:54:3f:
         09:a0:ad:40:a5:62:3d:d6:e9:21:20:fa:7a:9a:19:70:4d:e0:
         19:04:dc:71:08:6d:68:f2:a8:be:c8:65:70:e9:31:20:3a:d7:
         16:1d:92:0d:52:d3:03:1e:0e:1c:e5:28:a5:ea:e0:0d:96:25:
         b8:06:27:70:8a:54:8a:a1:2a:51:59:df:65:87:11:2e:ac:bd:
         e0:ec:8a:28:e1:6d:45:d2:4b:94:78:dd:52:0d:15:ec:1f:94:
         6c:75:14:04:2c:91:dd:b1:11:41:e9:4f:9a:63:f6:ac:f2:b1:
         93:ec:d9:60:8e:43:25:3d:c0:4b:86:5f:f9:8f:2f:1b:e7:05:
         2c:91:d3:37:a3:5a:3b:50:df:0f:ee:02:c0:5a:fb:a4:6e:4a:
         c5:53:1e:55:bb:a1:99:2a:0c:c6:fa:de:47:6c:71:1d:19:f9:
         f9:b6:bb:00:4b:dc:1a:89:be:48:ca:58:d3:0a:72:90:91:b7:
         a5:ea:bd:a7:30:af:13:4e:17:4c:f2:1c:62:b6:c5:b3:94:29:
         08:80:28:42:04:5b:f3:43:da:cd:d5:ae:b2:4e:9f:19:e1:6c:
         3d:b2:19:17:77:15:30:36:e2:65:99:a7:60:96:d3:05:05:a8:
         92:41:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:50 2026 by rpki-client