This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa
File:                     AS141592.roa (raw, json)
Hash identifier:          0AAfzJIM1j2Je9NeAc6NEgGdhH1BJrmNXKtHzmofL3I=
Subject key identifier:   23:14:4A:D5:79:94:FE:2C:F2:DB:4D:30:08:10:D0:9F:A5:CF:D6:B5
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       87964D6277EF4672E872AC44D5E4C8BB5CB715
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa
Signing time:             Tue 11 Nov 2025 06:00:23 +0000
ROA not before:           Tue 11 Nov 2025 05:55:23 +0000
ROA not after:            Tue 10 Nov 2026 06:00:23 +0000
asID:                     141592
IP address blocks:        103.160.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:96:4d:62:77:ef:46:72:e8:72:ac:44:d5:e4:c8:bb:5c:b7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:23 2025 GMT
            Not After : Nov 10 06:00:23 2026 GMT
        Subject: CN=23144AD57994FE2CF2DB4D300810D09FA5CFD6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:83:01:d2:34:a9:c2:53:21:27:0c:f2:d5:
                    14:c0:45:d9:34:b2:5d:2c:40:e7:43:94:19:ba:39:
                    c8:52:09:49:07:73:9b:14:a5:8f:bd:8a:05:3e:85:
                    11:25:5d:00:0b:1c:83:0f:ed:92:ca:dc:a3:da:69:
                    02:1b:c6:78:c2:ae:2e:a1:b0:a8:30:d5:72:3e:01:
                    39:2d:3c:51:55:59:af:12:37:a4:54:88:ab:d8:b1:
                    d3:f2:bf:a8:1e:84:71:38:24:b0:b3:62:d6:62:b9:
                    6f:78:4d:9c:f1:d9:10:bd:84:72:fb:a7:5d:9a:8b:
                    9a:af:86:ac:5e:1e:d9:20:f7:95:50:c7:55:74:e3:
                    e7:58:e7:2a:e0:37:72:23:60:d7:79:e4:15:c3:51:
                    fc:50:85:48:09:69:1a:6c:fc:6e:07:91:ae:e2:d2:
                    d0:c2:9d:97:ab:15:30:8d:ff:63:80:9e:96:df:9b:
                    dc:b6:84:a9:d7:ac:9c:87:3e:17:4e:a7:27:c6:01:
                    c6:60:e7:42:8a:a2:0b:4c:15:5c:06:cc:7d:96:d3:
                    49:8e:e4:98:61:41:6d:a3:af:a6:c2:8b:f1:27:0e:
                    75:e1:7e:e6:98:3f:df:67:c0:e5:d8:0b:86:ac:17:
                    f3:c4:4c:28:3d:30:6e:0f:98:29:40:af:3d:14:75:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:4A:D5:79:94:FE:2C:F2:DB:4D:30:08:10:D0:9F:A5:CF:D6:B5
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:dc:c5:0d:76:db:06:85:d1:51:ca:13:8f:ac:fa:d5:8c:
         42:9e:0e:cf:d1:95:15:e4:04:b9:39:96:90:88:e8:45:83:92:
         8c:92:3f:51:36:ff:11:b1:b5:58:2f:91:14:14:6e:5f:6b:48:
         11:2d:95:d8:a3:bd:9e:df:2a:48:f3:4f:95:13:6a:8d:95:dd:
         90:2a:dd:81:85:0e:0c:ac:73:93:e4:cb:a0:b5:87:4e:bc:2f:
         82:59:ed:d4:06:4b:65:a4:a2:e4:b3:19:f3:bd:25:20:e6:62:
         46:30:3b:2b:a6:1a:08:17:e7:ca:4d:79:ce:b7:0c:8d:c1:af:
         8f:82:ba:62:24:8c:db:2c:32:f0:4b:22:f3:dc:a1:8a:11:03:
         33:5b:9f:49:57:6d:c5:b0:13:fd:96:bc:7e:cd:b8:1d:98:4e:
         f0:09:8a:0d:b3:35:6f:ba:27:f5:45:51:2f:43:a7:a1:5e:e1:
         b4:e2:f1:e5:16:3d:ce:0f:25:a6:78:5e:33:b5:45:f4:3f:f2:
         1c:f7:73:b4:5e:78:28:c0:15:b7:7c:ff:66:91:1d:7c:92:4f:
         ed:a4:14:5e:72:76:19:72:fb:19:58:5e:8e:9f:36:88:ac:bd:
         98:0f:29:01:32:17:e0:75:6f:4a:1e:96:34:d5:9c:9f:68:bf:
         6a:57:11:f4
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUAIeWTWJ370Zy6HKsRNXkyLtctxUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA1NTUyM1oX
DTI2MTExMDA2MDAyM1owMzExMC8GA1UEAxMoMjMxNDRBRDU3OTk0RkUyQ0YyREI0
RDMwMDgxMEQwOUZBNUNGRDZCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK3VgwHSNKnCUyEnDPLVFMBF2TSyXSxA50OUGbo5yFIJSQdzmxSlj72KBT6F
ESVdAAscgw/tksrco9ppAhvGeMKuLqGwqDDVcj4BOS08UVVZrxI3pFSIq9ix0/K/
qB6EcTgksLNi1mK5b3hNnPHZEL2EcvunXZqLmq+GrF4e2SD3lVDHVXTj51jnKuA3
ciNg13nkFcNR/FCFSAlpGmz8bgeRruLS0MKdl6sVMI3/Y4Celt+b3LaEqdesnIc+
F06nJ8YBxmDnQoqiC0wVXAbMfZbTSY7kmGFBbaOvpsKL8ScOdeF+5pg/32fA5dgL
hqwX88RMKD0wbg+YKUCvPRR1IVcCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQjFErV
eZT+LPLbTTAIENCfpc/WtTAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTU5Mi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWegsjANBgkqhkiG9w0BAQsFAAOCAQEAbA7cxQ122waF0VHKE4+s
+tWMQp4Oz9GVFeQEuTmWkIjoRYOSjJI/UTb/EbG1WC+RFBRuX2tIES2V2KO9nt8q
SPNPlRNqjZXdkCrdgYUODKxzk+TLoLWHTrwvglnt1AZLZaSi5LMZ870lIOZiRjA7
K6YaCBfnyk15zrcMjcGvj4K6YiSM2ywy8Esi89yhihEDM1ufSVdtxbAT/Za8fs24
HZhO8AmKDbM1b7on9UVRL0OnoV7htOLx5RY9zg8lpnheM7VF9D/yHPdztF54KMAV
t3z/ZpEdfJJP7aQUXnJ2GXL7GVhejp82iKy9mA8pATIX4HVvSh6WNNWcn2i/alcR
9A==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:21 2025 by rpki-client