This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141968.roa
File:                     AS141968.roa (raw, json)
Hash identifier:          oX3vOUZgB7nd4K77ebP32W5szreGWoarXoK5d6UYPgs=
Subject key identifier:   58:27:BC:CB:F0:48:5A:84:4A:C0:23:03:54:0F:E9:97:85:4F:A5:6A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1EDA4FB35D6F8FED927D19D02507F18EA74EA21A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141968.roa
Signing time:             Tue 11 Nov 2025 05:00:01 +0000
ROA not before:           Tue 11 Nov 2025 04:55:01 +0000
ROA not after:            Tue 10 Nov 2026 05:00:01 +0000
asID:                     141968
IP address blocks:        103.177.94.0/23 maxlen: 24
                          103.180.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 19:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:da:4f:b3:5d:6f:8f:ed:92:7d:19:d0:25:07:f1:8e:a7:4e:a2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 04:55:01 2025 GMT
            Not After : Nov 10 05:00:01 2026 GMT
        Subject: CN=5827BCCBF0485A844AC02303540FE997854FA56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:01:2f:a1:ae:29:78:42:ed:6d:bd:d0:59:61:
                    9a:7e:c1:d5:6c:fa:58:64:e5:c3:81:72:8f:ac:69:
                    3e:73:76:fc:9d:36:b3:e5:1c:7c:f8:09:dd:b8:56:
                    f6:4d:de:9c:28:f9:f1:fe:85:37:5b:f9:8c:4f:e1:
                    76:b0:4b:90:25:5a:fe:19:b4:dd:0a:ab:0c:4b:c4:
                    d3:c5:52:27:3d:1c:3d:fe:ee:53:47:4d:7b:82:b8:
                    b5:f7:58:86:1a:d9:5d:2d:8b:95:8e:3e:36:56:6f:
                    ef:3c:34:03:38:bc:2d:30:f4:9b:55:22:3c:95:f4:
                    92:8a:f0:ff:df:2d:9b:0e:e2:11:9f:6d:b7:bd:64:
                    30:32:c2:bf:39:c6:b3:1a:ad:97:c9:25:21:2d:55:
                    a0:44:58:d5:8a:bc:36:c1:94:e5:93:c5:92:b0:b8:
                    fb:73:86:52:10:7f:73:3f:86:8d:89:15:b2:a1:24:
                    06:ec:ca:3c:6c:34:a2:9b:51:03:2e:e3:f0:eb:09:
                    28:d7:b9:7c:dc:ed:2e:ff:b1:64:d0:45:8c:3d:d3:
                    c5:a1:5e:6a:bc:28:15:9d:8f:5d:fc:ac:04:49:12:
                    f5:17:bd:03:03:12:31:cc:0e:70:a4:ca:e4:41:7f:
                    b4:6f:10:24:c3:f8:91:ba:51:a1:59:41:ff:f3:c0:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:BC:CB:F0:48:5A:84:4A:C0:23:03:54:0F:E9:97:85:4F:A5:6A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141968.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.94.0/23
                  103.180.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:06:11:e3:76:f3:af:c2:d6:f9:5e:8d:91:03:87:03:85:da:
         f6:da:49:01:ee:68:99:a1:ff:18:35:95:ab:d3:56:84:6e:29:
         73:75:f0:7e:7c:20:73:67:0d:d1:b7:da:71:49:ae:40:70:bb:
         87:3d:14:cd:2e:30:b2:2f:9d:71:7c:74:8f:6b:8b:91:03:ea:
         d9:60:9a:ad:01:95:a9:4b:21:58:4f:40:5d:ed:71:10:dd:c8:
         8c:0e:cf:e4:a2:2c:dd:93:19:35:dd:ca:02:51:75:e7:11:80:
         94:2f:e1:0f:e9:af:15:96:29:8f:3c:58:c8:b7:e6:e9:6e:35:
         5e:f2:67:fb:e0:7c:df:d4:e5:32:bc:28:fd:83:d5:82:0d:4e:
         a0:14:7e:d7:c3:61:45:68:f0:a7:7f:70:81:9d:4b:09:03:44:
         62:19:cc:7b:46:61:57:fe:d7:a9:cf:d7:3a:fa:06:0b:30:08:
         97:cd:bc:a5:a7:9d:14:c0:b4:73:e8:18:7e:62:1d:98:49:ff:
         0e:a6:d9:c3:c3:90:0b:50:c0:a9:ec:5d:89:ad:32:8e:68:37:
         a8:32:e3:e9:f8:2e:7a:f6:d0:c1:7a:3b:46:cb:39:6f:3f:2b:
         e9:5f:63:c5:be:ab:ca:59:f0:6e:83:1b:7f:4e:8c:e0:3c:2f:
         20:58:2c:12
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUHtpPs11vj+2SfRnQJQfxjqdOohowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExMTA0NTUwMVoX
DTI2MTExMDA1MDAwMVowMzExMC8GA1UEAxMoNTgyN0JDQ0JGMDQ4NUE4NDRBQzAy
MzAzNTQwRkU5OTc4NTRGQTU2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOABL6GuKXhC7W290Flhmn7B1Wz6WGTlw4Fyj6xpPnN2/J02s+UcfPgJ3bhW
9k3enCj58f6FN1v5jE/hdrBLkCVa/hm03QqrDEvE08VSJz0cPf7uU0dNe4K4tfdY
hhrZXS2LlY4+NlZv7zw0Azi8LTD0m1UiPJX0korw/98tmw7iEZ9tt71kMDLCvznG
sxqtl8klIS1VoERY1Yq8NsGU5ZPFkrC4+3OGUhB/cz+GjYkVsqEkBuzKPGw0optR
Ay7j8OsJKNe5fNztLv+xZNBFjD3TxaFearwoFZ2PXfysBEkS9Re9AwMSMcwOcKTK
5EF/tG8QJMP4kbpRoVlB//PArgECAwEAAaOCAdYwggHSMB0GA1UdDgQWBBRYJ7zL
8EhahErAIwNUD+mXhU+lajAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MTk2OC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw
EgQCAAEwDAMEAWexXgMEAWe0fDANBgkqhkiG9w0BAQsFAAOCAQEAOwYR43bzr8LW
+V6NkQOHA4Xa9tpJAe5omaH/GDWVq9NWhG4pc3Xwfnwgc2cN0bfacUmuQHC7hz0U
zS4wsi+dcXx0j2uLkQPq2WCarQGVqUshWE9AXe1xEN3IjA7P5KIs3ZMZNd3KAlF1
5xGAlC/hD+mvFZYpjzxYyLfm6W41XvJn++B839TlMrwo/YPVgg1OoBR+18NhRWjw
p39wgZ1LCQNEYhnMe0ZhV/7Xqc/XOvoGCzAIl828paedFMC0c+gYfmIdmEn/DqbZ
w8OQC1DAqexdia0yjmg3qDLj6fguevbQwXo7Rss5bz8r6V9jxb6rylnwboMbf06M
4DwvIFgsEg==
-----END CERTIFICATE-----
Generated at Fri Dec 5 19:12:50 2025 by rpki-client