This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa
File:                     AS141644.roa (raw, json)
Hash identifier:          Gby5dQLj/cg3b7kUCGW6VxPuOwbL22Nt3if/yM7ndKk=
Subject key identifier:   3E:3B:FA:F0:31:61:59:E4:A0:76:AF:04:31:1A:A8:03:97:C4:A3:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7502F2606B463E2F7495A3A8B797D6B28C3C636D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa
Signing time:             Tue 11 Nov 2025 06:00:08 +0000
ROA not before:           Tue 11 Nov 2025 05:55:08 +0000
ROA not after:            Tue 10 Nov 2026 06:00:08 +0000
asID:                     141644
IP address blocks:        103.162.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:02:f2:60:6b:46:3e:2f:74:95:a3:a8:b7:97:d6:b2:8c:3c:63:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:08 2025 GMT
            Not After : Nov 10 06:00:08 2026 GMT
        Subject: CN=3E3BFAF0316159E4A076AF04311AA80397C4A3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:17:56:32:4e:54:ee:f6:b8:c9:47:5f:7e:
                    16:e7:27:49:82:4d:8b:a8:86:e7:b4:d6:ac:80:d9:
                    2a:19:3f:d5:e8:b3:a7:33:c7:8e:95:2a:38:f9:d7:
                    20:5d:3b:80:e6:fe:1d:e7:87:6e:5c:7e:90:ae:a9:
                    f1:6e:b2:29:d9:d7:b6:a1:a0:1c:6f:51:85:4b:e0:
                    da:ef:b7:26:3d:a5:5d:f3:c5:c7:e0:1a:8e:5d:f3:
                    f4:cf:bf:d9:b1:9d:a3:e2:53:f7:fe:13:4e:5c:90:
                    c1:cc:58:4a:74:54:ae:ba:5b:8a:fe:80:05:b1:dc:
                    fb:70:a6:b2:ef:24:da:45:c4:c8:94:76:88:49:bd:
                    85:04:20:22:dc:34:d9:29:68:3f:5f:ec:e2:ed:76:
                    a2:73:e6:b9:70:fc:9a:6a:52:5c:a1:14:5b:6d:78:
                    d7:c1:6b:13:55:da:f5:42:34:20:fc:dd:9c:cf:c5:
                    dd:c1:b2:cb:08:22:56:51:0b:45:ca:17:12:5f:52:
                    99:17:3f:c1:77:70:4a:68:8c:a8:40:d4:44:c8:80:
                    ab:88:8e:b3:49:29:25:b3:36:21:50:f3:65:94:b8:
                    e5:1a:bd:76:64:a6:43:fd:33:e7:27:be:df:f3:72:
                    b0:a1:2f:4e:11:1e:8d:df:03:28:a2:fa:4f:4a:6d:
                    fd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3B:FA:F0:31:61:59:E4:A0:76:AF:04:31:1A:A8:03:97:C4:A3:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141644.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:49:a1:25:94:b6:9e:3d:f1:2b:66:2f:b3:7d:31:a6:b1:a0:
         c9:1c:3d:34:59:8a:8d:8b:fb:33:4b:09:b9:34:44:9e:1f:bc:
         a3:88:cc:51:b2:a3:d1:f3:2f:4d:6a:85:6b:47:d6:c9:60:15:
         5d:fe:53:9f:d0:98:4d:1b:d0:aa:e2:c2:e8:df:ac:d3:cd:34:
         00:a9:49:be:a9:83:d8:a1:f0:fb:61:4a:0f:ba:a8:64:da:55:
         c2:15:98:28:11:98:2f:e5:74:f5:61:b0:3c:0c:90:e4:10:3b:
         fc:15:61:bf:f9:a1:47:b2:33:b6:d9:a7:ec:5d:22:c3:c1:34:
         38:da:d8:22:55:00:19:d0:40:98:c2:7a:1d:b1:58:f5:97:6c:
         7a:08:38:8f:82:e0:22:e0:1d:cc:fe:a1:f7:c9:42:03:ea:6c:
         37:8d:0e:e5:cb:d2:e0:fa:7c:48:be:af:de:7f:c8:b0:13:f1:
         05:ca:52:02:d7:cc:b7:d6:41:25:83:c1:12:73:ed:52:43:0a:
         c4:1a:84:94:f5:c5:90:44:a8:70:97:0e:54:7c:b9:b2:eb:30:
         39:f4:4c:9c:c8:a5:81:1e:eb:97:f1:97:e4:07:17:2c:d6:71:
         f0:6e:34:75:c7:fb:ea:99:79:ee:59:3d:41:b1:bb:48:61:67:
         a5:5d:fb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:27 2025 by rpki-client