This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142201.roa
File:                     AS142201.roa (raw, json)
Hash identifier:          Gj1c4x1W4GD9eRy4OIROkaoHs4873ybVJT33QSSPacI=
Subject key identifier:   8D:C1:9B:29:BA:08:B5:5F:50:26:17:80:CA:88:13:3F:B7:F7:4C:FD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       705CA0FC06FB0FAF6B24CAE534615A1D00D46E01
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142201.roa
Signing time:             Tue 20 Jan 2026 01:44:48 +0000
ROA not before:           Tue 20 Jan 2026 01:39:48 +0000
ROA not after:            Tue 19 Jan 2027 01:44:48 +0000
asID:                     142201
IP address blocks:        2001:df6:8cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5c:a0:fc:06:fb:0f:af:6b:24:ca:e5:34:61:5a:1d:00:d4:6e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 20 01:39:48 2026 GMT
            Not After : Jan 19 01:44:48 2027 GMT
        Subject: CN=8DC19B29BA08B55F50261780CA88133FB7F74CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:ec:25:03:29:94:38:55:f0:15:f2:b3:ac:
                    10:41:88:52:1b:4d:bf:3c:f6:98:e8:59:2a:b0:c1:
                    d5:8e:01:c8:90:a4:e3:3a:fd:a3:da:ae:ac:d6:3c:
                    6b:30:36:b1:25:2d:b2:4d:94:f3:2d:d5:c0:83:e1:
                    69:0c:0c:f6:04:34:ac:ed:33:eb:d3:58:06:fc:aa:
                    14:e5:ad:a1:42:6c:da:69:39:25:51:cd:ae:79:ef:
                    fc:3d:ba:c1:f9:9a:72:8a:cd:ac:93:7b:d7:ab:f0:
                    d1:a3:cd:8e:be:95:99:15:10:bb:53:71:4a:7a:c6:
                    4d:2f:73:59:3d:32:86:03:0a:ed:44:d8:0e:89:e5:
                    c5:9e:e3:05:c1:a2:04:12:99:50:b9:e4:3c:6d:69:
                    82:53:95:21:71:aa:94:35:2b:8a:87:aa:81:9c:4a:
                    81:2a:d6:72:8f:21:ec:98:4a:17:c1:2c:df:be:af:
                    90:74:6e:93:ac:72:0c:76:bd:7c:97:49:66:1f:1c:
                    a8:0f:57:99:9c:b4:93:84:13:31:af:8d:77:4a:2f:
                    01:a2:45:11:12:cf:c5:80:e0:6d:3c:2a:bc:a9:0c:
                    83:77:93:f1:80:b3:69:31:d5:d9:59:68:3a:b9:ba:
                    d4:3a:bf:d7:65:b8:9f:95:2d:b1:77:53:52:9f:d8:
                    94:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C1:9B:29:BA:08:B5:5F:50:26:17:80:CA:88:13:3F:B7:F7:4C:FD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:7a:d6:48:52:60:c3:f1:19:38:d4:5b:a9:7e:45:95:9e:
         c6:80:a0:d0:74:b6:9f:06:95:93:d2:95:54:84:b3:27:05:e3:
         bf:75:2c:f1:8a:ee:ac:67:7b:57:3d:57:ee:8f:1b:d0:93:65:
         08:f6:fe:3b:2f:13:15:ec:7a:d2:86:e7:59:e6:aa:77:eb:41:
         63:2b:6a:81:85:ef:37:22:0d:fe:a7:9f:b1:f1:19:4c:02:ca:
         81:63:22:ac:b0:5c:8f:0e:c7:f3:3e:8d:da:5f:46:2f:bc:c1:
         1e:62:70:9a:fe:45:4c:b1:d3:d7:fe:46:6d:0d:fa:be:d5:7d:
         17:6c:81:53:80:57:1f:c5:cf:20:40:f3:0f:d5:58:10:77:d8:
         1d:e1:f4:fd:12:71:91:eb:0f:88:92:f0:f7:9d:2d:a3:4e:ce:
         87:fc:36:80:c5:4a:7b:ea:1e:a2:d7:eb:e7:2e:cc:03:e4:74:
         91:dc:fa:45:15:ea:50:bc:d1:e1:8a:a4:3d:34:7f:c1:4a:cc:
         79:06:1b:03:7d:4b:7a:89:e5:a3:68:35:a5:15:05:25:f5:65:
         69:67:82:b8:7c:d9:9d:6c:bf:38:23:99:3e:8f:3e:c5:3b:77:
         2f:76:2b:a6:41:1e:85:a7:58:31:5d:ff:c8:73:2f:45:9a:fa:
         55:85:8e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:30:06 2026 by rpki-client