This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa
File:                     AS141101.roa (raw, json)
Hash identifier:          L/uJpJDV7g660tt6vY6UqGq7jN/LRHFm1F0cVM7CvyY=
Subject key identifier:   96:C7:21:5C:3C:8E:9A:D4:56:1E:97:18:AF:5D:6A:9F:78:27:6C:55
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       19C146FFFB0C277347894D326513877633FD98A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa
Signing time:             Fri 30 Jan 2026 05:00:00 +0000
ROA not before:           Fri 30 Jan 2026 04:55:00 +0000
ROA not after:            Fri 29 Jan 2027 05:00:00 +0000
asID:                     141101
IP address blocks:        103.156.235.0/24 maxlen: 24
                          2001:df5:380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c1:46:ff:fb:0c:27:73:47:89:4d:32:65:13:87:76:33:fd:98:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 30 04:55:00 2026 GMT
            Not After : Jan 29 05:00:00 2027 GMT
        Subject: CN=96C7215C3C8E9AD4561E9718AF5D6A9F78276C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:b0:a4:bf:54:6e:2b:1e:e6:7d:61:46:5c:
                    bd:48:4f:89:f2:71:b0:10:cb:78:10:a9:a8:40:30:
                    80:f8:9f:5a:6a:4d:a1:d5:68:79:65:ca:b9:c0:7f:
                    03:8a:d0:32:37:00:a9:dd:00:45:7c:22:89:f0:6a:
                    80:79:cd:c2:21:40:05:09:13:42:5c:38:2c:9b:a2:
                    f8:b2:65:9a:50:6b:16:eb:bd:a9:a6:d3:27:20:13:
                    b6:c5:c3:7f:30:34:2f:5d:40:09:14:a4:af:8b:e9:
                    91:45:a7:64:6f:03:e5:6b:d7:9f:cb:6d:c7:4f:92:
                    e0:b1:4b:b3:3a:ee:d7:9c:07:c1:e6:f0:af:1e:4f:
                    99:24:a6:c6:76:08:d0:20:61:c0:96:71:8c:bb:ca:
                    49:d7:d9:3f:48:7b:21:67:45:fc:b7:3a:9e:e5:89:
                    3f:bf:3c:1b:46:93:18:a4:c0:ab:87:28:70:53:f9:
                    91:30:22:7f:62:1f:dc:e1:4d:c8:f9:33:26:e6:46:
                    15:9f:3c:18:50:dc:3f:2a:c4:01:17:a7:43:a6:98:
                    26:6f:ff:17:c5:8a:36:b7:c1:79:91:24:60:d1:c9:
                    42:ee:f8:0d:e9:c7:4c:b6:a5:cf:3b:0e:0a:d9:ab:
                    8d:ca:85:9a:7a:3f:a8:42:60:e7:4e:38:77:02:ac:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C7:21:5C:3C:8E:9A:D4:56:1E:97:18:AF:5D:6A:9F:78:27:6C:55
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141101.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.235.0/24
                IPv6:
                  2001:df5:380::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:ad:f7:c4:42:88:98:de:8e:b9:c3:f7:71:e0:b3:0a:dd:
         96:9a:83:f2:9c:40:0e:c4:1b:0e:5f:24:d8:41:7d:45:4d:ce:
         75:6c:73:5e:19:f0:8b:2a:5f:d1:0d:55:59:c7:52:bd:e0:61:
         54:fc:95:3e:01:9c:14:02:e6:06:9d:3a:16:ae:f8:0b:1e:a4:
         07:35:e4:74:6d:7c:b1:cc:b6:d5:be:92:96:d4:48:9e:0d:eb:
         87:d4:3a:7f:ff:57:74:bd:90:bb:11:2c:48:73:b8:60:7c:c0:
         b8:f1:cc:91:b0:d7:6e:3b:3c:69:34:9d:9b:28:d3:30:fa:18:
         09:6b:4e:7a:cb:5f:86:f1:38:f8:09:39:04:7e:76:41:e6:39:
         25:d7:7b:37:80:58:2a:04:3b:68:21:b9:24:5b:68:ef:bf:02:
         8f:d7:0a:69:f6:64:1c:d7:ed:8c:f4:44:64:51:cc:96:2c:2f:
         e6:f3:f7:d7:fd:a7:e3:eb:e1:52:7b:a3:10:79:2c:04:a4:f6:
         ae:05:be:87:76:10:9f:64:44:50:c7:1b:a8:f6:dd:ca:da:95:
         67:f6:54:dc:29:2d:49:bb:e4:37:b3:9e:28:25:a9:ea:d4:9d:
         d9:3a:fc:12:03:cd:77:8f:f2:16:87:03:28:bc:05:a6:73:45:
         12:a1:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:23 2026 by rpki-client