This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa
File:                     AS141960.roa (raw, json)
Hash identifier:          hJetnmQJMWuCrlHnT9qoICiu3cVUFWzByt7bDT3grss=
Subject key identifier:   5E:B4:D1:64:C9:E6:C7:AA:FF:14:C2:48:85:23:7F:A4:5E:CF:47:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       39F526B97F1970A33B619F9E034DBF2D4CC71B4C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa
Signing time:             Tue 11 Nov 2025 06:00:13 +0000
ROA not before:           Tue 11 Nov 2025 05:55:13 +0000
ROA not after:            Tue 10 Nov 2026 06:00:13 +0000
asID:                     141960
IP address blocks:        103.165.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f5:26:b9:7f:19:70:a3:3b:61:9f:9e:03:4d:bf:2d:4c:c7:1b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:13 2025 GMT
            Not After : Nov 10 06:00:13 2026 GMT
        Subject: CN=5EB4D164C9E6C7AAFF14C24885237FA45ECF473B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:fe:ef:5c:a3:d3:7f:f0:44:6b:64:14:e6:
                    55:35:62:6f:20:ce:34:be:52:86:03:82:29:f6:3a:
                    ab:6c:d9:e4:86:31:43:7c:ca:06:53:b8:26:28:d0:
                    72:6a:1d:19:e7:96:9c:91:ac:ad:c8:17:ff:64:d5:
                    e7:c8:b4:fc:13:85:9b:c7:c3:dc:44:52:8d:18:63:
                    50:e1:6b:50:fe:b5:33:ee:08:16:0d:01:dc:fc:fa:
                    ff:a4:7d:f2:2a:b0:05:6f:21:09:a0:1b:b0:a6:75:
                    5b:eb:53:7c:69:6b:e9:25:03:de:39:7a:76:ef:0b:
                    da:af:f7:24:d2:87:d1:7f:23:82:0e:bb:a8:75:41:
                    54:11:42:b0:c9:10:3b:a4:d2:61:1e:13:a8:5b:aa:
                    1b:14:53:9e:98:bf:7d:0a:3b:6d:6f:35:03:32:c1:
                    3b:45:74:2d:5b:72:cf:c7:4e:c9:3f:0d:fa:29:a5:
                    76:cf:c9:91:de:c5:84:f0:97:b0:c7:c4:d1:1b:c3:
                    9f:9a:ff:6f:44:08:d7:82:4d:9e:a3:b2:b5:14:5d:
                    f6:7b:08:17:30:ab:e3:e5:17:42:50:12:d8:c0:d0:
                    cc:50:71:06:de:af:8b:46:dd:be:c6:88:e4:d3:65:
                    fd:67:97:8f:8d:30:2c:1f:ee:df:c5:4c:02:bd:60:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B4:D1:64:C9:E6:C7:AA:FF:14:C2:48:85:23:7F:A4:5E:CF:47:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141960.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:0c:93:e5:ee:a4:a7:20:d1:2b:75:e2:a6:9d:c1:ba:f2:0e:
         d8:79:f9:08:b9:a8:f4:0c:ea:88:4f:45:53:a7:f2:e4:7f:39:
         03:f1:a7:cd:ef:82:65:06:ac:e9:64:ab:48:1c:3d:09:7e:69:
         83:87:8a:71:75:13:c9:d3:13:18:18:89:b2:8a:73:93:78:f1:
         15:df:58:33:d2:4a:c3:b0:65:58:0f:1f:bd:e3:ef:a4:cb:f8:
         c7:77:e9:f1:45:cc:2d:d4:7e:fa:2e:eb:8b:b6:42:12:56:1c:
         6b:b4:87:9d:ff:39:03:df:c9:0d:e3:ec:c2:7b:0c:05:c0:50:
         51:44:f2:0e:45:e0:28:97:11:35:81:d0:80:6b:de:98:90:71:
         3d:6e:a5:ef:31:54:44:f4:85:58:38:31:76:2b:7e:61:ec:2a:
         8b:8f:2c:96:45:5c:ec:d0:27:ac:55:16:66:0c:fe:d1:b6:30:
         8c:4b:5a:a0:c0:bc:cc:ec:01:5f:6f:84:46:39:de:e5:cb:cd:
         3f:8c:7b:e5:bc:cb:52:4a:47:12:bb:db:06:41:27:c5:28:eb:
         a0:fd:11:22:32:04:45:52:01:76:87:b6:5c:13:e1:e0:cb:98:
         97:6e:d4:d3:b0:08:7e:51:0d:95:26:a7:a6:12:3c:5d:8e:71:
         7d:41:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:31 2025 by rpki-client