This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139693.roa
File:                     AS139693.roa (raw, json)
Hash identifier:          D2nDCRLSpDVQu+Z3IFJ9/E5sy5BCKh7vt63rsFLoBUg=
Subject key identifier:   ED:0A:7C:E0:30:B2:7D:F4:C6:A8:5F:34:FC:7D:9F:1F:22:2E:68:2D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4368544F725547DD20CB5E8ED897F7FB47D061D6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139693.roa
Signing time:             Mon 02 Feb 2026 01:00:00 +0000
ROA not before:           Mon 02 Feb 2026 00:55:00 +0000
ROA not after:            Mon 01 Feb 2027 01:00:00 +0000
asID:                     139693
IP address blocks:        163.61.187.0/24 maxlen: 24
                          2001:df5:1e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:68:54:4f:72:55:47:dd:20:cb:5e:8e:d8:97:f7:fb:47:d0:61:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 00:55:00 2026 GMT
            Not After : Feb  1 01:00:00 2027 GMT
        Subject: CN=ED0A7CE030B27DF4C6A85F34FC7D9F1F222E682D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:bf:9f:ee:38:c8:88:2e:a3:b8:05:80:b6:
                    ae:47:1e:7d:1c:52:a8:ab:51:0f:26:6a:83:07:eb:
                    44:ea:0a:1c:b9:aa:1d:5c:df:c4:1a:c4:39:6e:9b:
                    83:bd:0f:e3:ce:f1:dc:6d:47:7d:45:a3:d9:15:11:
                    13:53:ef:41:40:b3:e3:88:29:76:e9:99:47:d1:25:
                    dd:8f:d8:f3:e8:2b:e9:14:66:1d:55:7b:1f:22:98:
                    ba:bd:14:b7:ee:0f:dc:a6:6d:d8:a7:04:6d:34:7e:
                    52:74:70:85:b4:97:89:54:81:69:40:f5:e1:a8:16:
                    2e:7b:c0:a0:a8:70:e0:08:26:f5:61:f0:b9:44:3a:
                    e1:9a:56:fe:ea:ca:e5:80:5c:db:c7:66:fe:33:ff:
                    1e:49:20:67:fa:43:d1:e7:f4:a1:4c:d5:31:34:57:
                    c6:da:ee:f8:bd:5f:a5:89:57:13:01:f8:d2:d4:29:
                    d5:67:45:14:b9:0d:d4:f4:6a:0e:8b:44:b9:d1:15:
                    e6:a6:fd:5c:aa:76:b7:f4:ed:53:8d:b0:6f:3b:7e:
                    60:08:95:61:4d:89:41:10:9d:8e:3b:ca:27:d9:57:
                    5c:31:97:83:ae:20:74:0a:fc:d3:55:1e:f3:54:a9:
                    98:d6:d5:ba:5a:05:a4:a7:2e:46:35:02:ca:6f:31:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0A:7C:E0:30:B2:7D:F4:C6:A8:5F:34:FC:7D:9F:1F:22:2E:68:2D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139693.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.187.0/24
                IPv6:
                  2001:df5:1e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:4d:b7:ce:41:7f:89:b1:e2:c3:11:24:23:9a:cf:8c:5f:
         5d:98:fd:8d:c2:2e:c0:ac:90:a3:b5:7a:85:80:cb:24:21:f4:
         30:f2:9a:c4:02:38:10:81:a9:72:f2:37:56:8e:a7:ac:23:fe:
         bc:38:00:7b:c2:b2:5e:48:24:f8:17:f0:90:8b:9e:de:6a:0a:
         bb:31:ce:d3:78:d0:f1:e4:30:1b:0c:61:d1:62:42:c4:d4:f8:
         f8:51:d8:cd:0f:3e:c7:6f:27:15:07:6c:99:11:69:4b:21:e9:
         88:83:5b:8f:94:22:e8:52:ad:e8:66:e8:57:76:69:18:50:96:
         41:de:ef:8b:54:40:69:a0:43:50:61:55:2f:48:b9:ad:a0:b6:
         a4:5e:75:fd:6d:51:9e:25:3c:7e:95:49:e5:80:0f:93:ab:fc:
         de:e3:f6:87:05:95:50:f6:44:67:7b:0e:a8:ac:2d:43:ca:60:
         41:c8:9f:3d:ad:e6:dd:23:df:22:3b:9c:d3:3c:7f:df:c9:9b:
         f7:08:90:81:39:de:74:aa:b2:f9:73:22:80:8a:8c:d9:b5:cb:
         2e:19:94:19:65:85:d4:c4:aa:94:a7:f2:1e:f1:3d:2b:bd:08:
         0a:40:89:83:87:29:97:dd:f5:4c:12:28:d6:5d:30:f8:d7:41:
         ad:b0:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:24 2026 by rpki-client