This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141643.roa
File:                     AS141643.roa (raw, json)
Hash identifier:          GZja5IEGG426k31sijwy+YLUhA6QT892/awRaQLb6fw=
Subject key identifier:   1A:0C:94:33:8D:C6:26:19:DF:C2:C2:4C:81:68:59:DC:7B:0D:89:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2FD30669BF322A5EEFABC3AA294E402C2761E850
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141643.roa
Signing time:             Tue 11 Nov 2025 06:00:12 +0000
ROA not before:           Tue 11 Nov 2025 05:55:12 +0000
ROA not after:            Tue 10 Nov 2026 06:00:12 +0000
asID:                     141643
IP address blocks:        103.162.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d3:06:69:bf:32:2a:5e:ef:ab:c3:aa:29:4e:40:2c:27:61:e8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:12 2025 GMT
            Not After : Nov 10 06:00:12 2026 GMT
        Subject: CN=1A0C94338DC62619DFC2C24C816859DC7B0D89C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:5d:33:d3:e1:81:03:93:fd:c3:33:1d:b0:
                    83:70:56:1f:dd:31:ee:55:ca:b6:cd:6b:af:64:f2:
                    4f:db:59:42:da:59:d7:e2:6f:e0:cd:ed:07:c0:1b:
                    73:06:3e:1b:9b:f0:8a:1b:b0:e7:a7:6d:20:bf:c5:
                    83:b8:67:f2:13:d6:74:32:38:f9:77:11:37:c8:fc:
                    ec:b5:40:ba:ce:66:d8:92:c4:b9:9b:c2:ff:62:10:
                    2f:17:ed:d8:1f:07:cf:65:41:9e:87:fe:b6:ea:75:
                    46:7d:b0:fa:f8:55:86:78:c1:a0:a0:c5:99:42:27:
                    57:01:96:87:4c:2f:14:39:d3:09:80:9b:d2:6d:b7:
                    6f:5a:0e:e6:9a:32:29:41:33:f0:16:77:9b:55:ae:
                    16:1c:e2:c7:1e:33:e3:29:a2:d2:80:f9:18:e7:9e:
                    98:04:a6:46:7e:0d:91:6a:04:2e:2c:72:cf:33:1b:
                    bd:c9:a8:f3:b0:dd:50:e6:81:11:68:36:3f:bb:9f:
                    be:f8:f1:39:ab:ea:cf:4e:d3:62:c8:a5:dd:c5:c8:
                    de:84:69:24:9e:df:ff:a1:52:71:e5:fa:bc:85:60:
                    63:95:0a:0d:32:cb:a5:3f:3f:9b:27:db:2e:02:e5:
                    fe:15:c0:12:cb:0c:62:47:c7:af:49:31:49:a4:c8:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0C:94:33:8D:C6:26:19:DF:C2:C2:4C:81:68:59:DC:7B:0D:89:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141643.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:8c:8d:0e:92:2b:c7:05:40:db:33:1f:12:9c:82:36:4e:
         9b:84:09:f8:59:2b:78:b2:e4:6c:e8:21:40:b3:6b:72:07:a2:
         a1:bd:47:25:ba:da:68:72:a5:8f:4e:54:b8:4b:4b:5a:36:77:
         da:4a:3e:ce:08:39:3a:83:64:2c:e5:f3:83:68:70:17:00:04:
         b1:e3:41:8c:cc:6d:74:68:5f:2e:b6:84:c6:64:ed:c3:3f:fd:
         85:d6:da:3b:f4:cb:85:cf:61:ed:92:e7:c8:23:52:51:f6:90:
         f9:d6:bf:dd:8f:85:d5:d6:7b:e8:f3:e3:43:91:f0:27:28:b6:
         7b:7c:ec:1b:6f:b4:23:15:1a:ec:d7:97:ff:b5:6a:70:cf:8a:
         fe:d7:cc:c4:ac:25:93:dd:0d:ff:d0:12:d7:03:80:77:f0:7a:
         fc:ae:0b:c5:21:85:fb:94:16:31:3f:d8:bb:c1:b5:33:9c:40:
         f8:e5:bf:f0:a1:d2:22:e7:b5:37:69:13:ca:1e:16:e0:3e:94:
         60:6b:84:3d:83:37:f4:69:34:2d:07:c2:8f:67:43:1d:14:77:
         51:1e:65:5e:5d:50:86:79:b5:be:7b:bd:d1:97:d5:1d:2e:40:
         62:bb:a3:be:83:bf:8c:0d:0e:c9:31:cc:62:fb:7a:8d:67:1a:
         75:89:0d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:16:03 2025 by rpki-client