This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139942.roa
File:                     AS139942.roa (raw, json)
Hash identifier:          uA4anK7afMMSdL8hsuxZITjZe/dfGoITqCUw92LktBg=
Subject key identifier:   64:A6:D6:61:31:73:32:C2:30:52:B7:E4:F2:9C:A2:2E:06:6C:09:95
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       56D4BE1450CBF9938642CC06FEE62CE98C482F95
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139942.roa
Signing time:             Tue 11 Nov 2025 06:00:02 +0000
ROA not before:           Tue 11 Nov 2025 05:55:02 +0000
ROA not after:            Tue 10 Nov 2026 06:00:02 +0000
asID:                     139942
IP address blocks:        103.146.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d4:be:14:50:cb:f9:93:86:42:cc:06:fe:e6:2c:e9:8c:48:2f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:02 2025 GMT
            Not After : Nov 10 06:00:02 2026 GMT
        Subject: CN=64A6D661317332C23052B7E4F29CA22E066C0995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:8c:56:df:1a:7b:0d:df:71:2d:f6:46:7f:
                    75:95:7f:58:8d:40:b2:7f:45:29:53:37:12:d3:3e:
                    8d:8f:bb:0b:0f:14:90:5b:07:83:69:46:72:16:99:
                    59:9f:dc:28:df:d4:a8:61:49:b9:6c:44:66:26:37:
                    a9:84:de:f7:41:0a:d9:e0:bb:f1:8d:e8:0f:74:73:
                    f9:7d:30:69:50:9d:3b:de:0c:30:e0:ac:8b:f8:b0:
                    a9:cf:07:59:33:f6:69:c0:5d:39:e4:03:f1:23:64:
                    c4:a4:cd:09:a8:d9:c2:4d:2c:7d:52:6d:13:8e:2f:
                    99:ed:6c:68:35:93:6e:89:73:5e:0c:a5:39:92:fa:
                    01:31:12:09:23:6f:ba:0b:fe:3a:16:d9:cf:ee:0f:
                    1c:b1:0b:84:16:7c:b8:48:71:a9:dc:ed:97:51:58:
                    9b:ae:2a:7c:fa:80:11:da:16:77:bf:f5:3b:e7:a6:
                    d2:66:04:7b:aa:2f:15:1d:a0:61:a6:3d:3f:b9:97:
                    5f:0f:6e:43:c4:85:ff:9d:d8:a6:58:61:15:6f:1d:
                    75:c2:ef:d9:76:5c:b3:fd:f0:ee:7a:6b:31:bf:8e:
                    81:4e:de:ac:ee:25:75:83:75:37:42:4e:5e:07:20:
                    09:38:3c:f8:06:4b:b0:37:95:3b:23:83:a3:27:b2:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:D6:61:31:73:32:C2:30:52:B7:E4:F2:9C:A2:2E:06:6C:09:95
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139942.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:26:ae:fc:c4:5d:e8:d7:89:23:a8:f4:80:a0:11:e9:b7:8b:
         c6:6e:64:16:ee:38:5b:98:3a:cb:0e:71:81:7f:64:9a:e1:84:
         7b:0a:e7:ee:a9:36:5b:a1:20:38:74:9a:b1:0e:9d:c2:d1:51:
         ca:6c:77:ef:74:e2:5f:f8:da:90:94:46:0b:6c:89:fa:ae:0d:
         47:a8:f9:24:68:2a:fc:7e:78:ab:a5:e4:ad:12:24:74:52:c2:
         36:1c:a0:7f:3b:f4:d2:a1:90:05:9d:18:6b:69:93:72:bd:6e:
         fc:fc:df:7f:d5:8f:6b:45:71:2d:7a:c8:10:23:e5:98:c4:02:
         eb:54:9f:6a:e5:de:94:6a:66:be:90:da:82:44:40:82:b8:3d:
         25:9d:ee:63:0d:e4:27:e0:7f:d0:f2:e9:26:1c:38:05:a4:c7:
         61:d9:82:c0:3a:38:7d:30:a6:03:49:6c:42:60:9e:f0:36:52:
         9e:a2:4c:f3:98:01:f0:c8:46:75:e6:41:58:fc:06:5c:2c:bd:
         3a:49:d4:dc:92:09:95:49:34:90:73:75:40:1f:12:35:ac:a7:
         39:de:d5:88:61:64:9a:ff:c3:fe:49:55:6d:76:b6:f8:03:77:
         47:b2:73:12:46:65:1e:e9:ec:49:6f:9a:92:95:7d:31:2c:65:
         9a:67:5e:b0
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUVtS+FFDL+ZOGQswG/uYs6YxIL5UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUwMloX
DTI2MTExMDA2MDAwMlowMzExMC8GA1UEAxMoNjRBNkQ2NjEzMTczMzJDMjMwNTJC
N0U0RjI5Q0EyMkUwNjZDMDk5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOT6jFbfGnsN33Et9kZ/dZV/WI1Asn9FKVM3EtM+jY+7Cw8UkFsHg2lGchaZ
WZ/cKN/UqGFJuWxEZiY3qYTe90EK2eC78Y3oD3Rz+X0waVCdO94MMOCsi/iwqc8H
WTP2acBdOeQD8SNkxKTNCajZwk0sfVJtE44vme1saDWTbolzXgylOZL6ATESCSNv
ugv+OhbZz+4PHLELhBZ8uEhxqdztl1FYm64qfPqAEdoWd7/1O+em0mYEe6ovFR2g
YaY9P7mXXw9uQ8SF/53YplhhFW8ddcLv2XZcs/3w7nprMb+OgU7erO4ldYN1N0JO
XgcgCTg8+AZLsDeVOyODoyeyvKUCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBRkptZh
MXMywjBSt+TynKIuBmwJlTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzOTk0Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGeSxzANBgkqhkiG9w0BAQsFAAOCAQEAEiau/MRd6NeJI6j0gKAR
6beLxm5kFu44W5g6yw5xgX9kmuGEewrn7qk2W6EgOHSasQ6dwtFRymx373TiX/ja
kJRGC2yJ+q4NR6j5JGgq/H54q6XkrRIkdFLCNhygfzv00qGQBZ0Ya2mTcr1u/Pzf
f9WPa0VxLXrIECPlmMQC61SfauXelGpmvpDagkRAgrg9JZ3uYw3kJ+B/0PLpJhw4
BaTHYdmCwDo4fTCmA0lsQmCe8DZSnqJM85gB8MhGdeZBWPwGXCy9OknU3JIJlUk0
kHN1QB8SNaynOd7ViGFkmv/D/klVbXa2+AN3R7JzEkZlHunsSW+akpV9MSxlmmde
sA==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:01 2025 by rpki-client