This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141642.roa
File:                     AS141642.roa (raw, json)
Hash identifier:          xBLKgTgHEprpzSjgSUVq/duwBeqkYBbXkU1YfcOXzU4=
Subject key identifier:   D9:0B:8A:E9:F4:67:88:77:80:C6:6A:9D:EC:ED:36:F6:FF:65:C1:11
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1227A8DA07055049DCAEE44A175071A6BDBD9F2F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141642.roa
Signing time:             Thu 27 Nov 2025 04:18:22 +0000
ROA not before:           Thu 27 Nov 2025 04:13:22 +0000
ROA not after:            Thu 26 Nov 2026 04:18:22 +0000
asID:                     141642
IP address blocks:        36.50.92.0/24 maxlen: 24
                          103.190.170.0/23 maxlen: 24
                          2401:13e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:27:a8:da:07:05:50:49:dc:ae:e4:4a:17:50:71:a6:bd:bd:9f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 27 04:13:22 2025 GMT
            Not After : Nov 26 04:18:22 2026 GMT
        Subject: CN=D90B8AE9F467887780C66A9DECED36F6FF65C111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:77:ed:a0:6f:d7:46:36:83:34:fd:46:70:
                    99:1b:a0:e4:20:ad:88:fb:06:69:a7:c7:a4:a4:1f:
                    50:c6:7d:3a:ae:34:fa:f9:71:9c:24:36:97:21:a8:
                    67:12:4f:34:c3:b5:af:71:8b:94:9b:bd:fb:d1:50:
                    44:9f:75:93:51:9d:22:23:79:ee:aa:70:f8:90:2c:
                    c2:a2:fe:7f:ad:6c:42:12:37:75:62:d6:6e:9d:d4:
                    e7:76:ce:b0:13:29:2e:d4:2f:ea:98:c0:6b:4b:25:
                    f4:c0:26:b8:17:d5:c3:63:5e:04:67:7a:c3:50:59:
                    61:1e:04:5c:ca:4a:0a:e9:ae:71:93:6b:21:a3:08:
                    68:d8:76:36:21:71:fc:79:4c:3c:74:32:a7:b7:05:
                    29:9b:59:bb:ea:5f:69:f5:e5:c9:99:7d:98:8f:20:
                    3f:09:2c:13:6f:80:a9:c7:99:e6:6b:48:36:87:2c:
                    7d:68:0b:22:a1:da:9c:0c:77:13:a1:06:7c:b4:75:
                    c5:64:fd:fe:0f:09:1d:7b:16:a9:18:71:08:60:73:
                    08:ab:22:d8:a0:19:b3:2b:2f:c7:6e:cf:24:f7:2a:
                    e5:97:f7:a7:a7:6e:5e:1d:c6:57:14:67:5b:21:7a:
                    ad:fb:94:6a:f1:7f:15:07:9c:0e:ca:90:90:bd:f0:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0B:8A:E9:F4:67:88:77:80:C6:6A:9D:EC:ED:36:F6:FF:65:C1:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.92.0/24
                  103.190.170.0/23
                IPv6:
                  2401:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:88:5a:c2:76:22:4a:54:c9:59:34:af:90:43:cf:3d:27:06:
         ab:70:cf:6f:48:ef:12:ed:ee:4c:ce:d1:76:d6:51:93:44:8d:
         53:6d:59:be:d1:5a:09:35:0c:bb:5b:de:75:86:66:b8:c3:f8:
         6d:c8:42:f1:bc:3c:35:fa:4d:83:66:96:71:f2:f4:d3:77:d8:
         b9:65:d3:29:03:37:7d:45:a5:4a:5d:d6:fd:4c:a2:3b:91:d1:
         5c:64:92:f2:7c:b8:51:40:38:28:69:f9:55:ca:13:0b:83:56:
         26:16:87:ab:b0:f3:2e:03:2d:b3:40:bd:19:17:89:80:3d:de:
         e0:d4:0c:76:30:c4:b2:31:25:42:ac:e8:1a:cc:e2:d7:ae:b1:
         2e:27:c9:c2:ce:e5:12:38:be:d2:b0:19:16:63:7c:16:ab:a7:
         8b:75:eb:9f:82:fd:db:2f:d9:f1:b3:7b:c0:ad:fa:85:c6:a0:
         36:df:f4:eb:0c:28:5e:9e:86:ba:bf:7d:5a:bb:a9:9c:50:c3:
         c3:39:1c:91:21:25:b4:71:b7:6d:8a:c0:da:76:08:98:b2:8f:
         d4:b3:11:4c:e5:4a:98:16:9d:8e:45:79:06:fc:1e:5b:d9:32:
         75:da:78:5e:72:b7:58:13:17:06:e6:a1:b8:9c:e5:62:7c:c8:
         18:a5:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:16:11 2025 by rpki-client