This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142319.roa
File:                     AS142319.roa (raw, json)
Hash identifier:          XTVQTqkzsHztVh+HGRvcNvHlNe/VIyT9QWhD1LscFJk=
Subject key identifier:   28:63:2C:D4:8E:10:79:74:AE:39:FF:1C:B2:A0:FE:1D:A7:0E:D6:A4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2F142F4207025956FA73BFF310F889A4BEEB82EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142319.roa
Signing time:             Tue 13 Jan 2026 04:00:00 +0000
ROA not before:           Tue 13 Jan 2026 03:55:00 +0000
ROA not after:            Tue 12 Jan 2027 04:00:00 +0000
asID:                     142319
IP address blocks:        103.26.188.0/23 maxlen: 24
                          103.186.35.0/24 maxlen: 24
                          2001:df4:c2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Jan 2026 13:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:14:2f:42:07:02:59:56:fa:73:bf:f3:10:f8:89:a4:be:eb:82:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 13 03:55:00 2026 GMT
            Not After : Jan 12 04:00:00 2027 GMT
        Subject: CN=28632CD48E107974AE39FF1CB2A0FE1DA70ED6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:ed:40:bf:65:b3:4b:f9:f5:96:9f:53:b7:
                    21:d8:c0:b9:ef:c2:7c:13:6f:35:3b:08:75:fd:a0:
                    18:73:2d:13:47:31:3b:8d:1d:77:20:6e:30:ef:c7:
                    07:4b:08:76:b3:10:08:72:c3:d5:d8:45:db:02:58:
                    0a:0c:6f:9f:9b:fc:2c:52:de:b6:9d:d8:89:4a:74:
                    f7:58:aa:01:e4:61:51:b2:50:4f:63:aa:a1:5a:24:
                    67:b1:78:10:c0:64:41:65:40:1d:14:78:ea:45:2a:
                    81:20:dc:62:2f:6f:40:e3:6a:81:ac:0f:c1:3c:10:
                    7b:77:3e:47:d4:c5:d1:57:5c:d3:29:b0:01:66:21:
                    34:e5:1a:e8:c3:77:c6:62:dd:b0:15:92:03:96:eb:
                    94:fb:d0:03:ca:49:d1:9b:e7:9c:5a:c5:ae:77:05:
                    5b:c6:4b:2c:fd:37:9b:2b:aa:11:6a:b5:eb:01:c8:
                    b3:8b:6b:7a:34:35:66:f7:71:98:93:79:54:76:5b:
                    a3:25:93:47:0b:f2:09:74:ed:63:22:ce:81:b0:e9:
                    15:1b:84:43:56:46:c7:5c:97:e8:0a:a5:b5:51:f6:
                    bb:32:92:9e:6d:bc:24:af:a0:47:a0:eb:65:da:4f:
                    a1:41:ba:4d:25:ea:70:96:60:9c:fb:9c:f9:17:10:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:63:2C:D4:8E:10:79:74:AE:39:FF:1C:B2:A0:FE:1D:A7:0E:D6:A4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142319.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.188.0/23
                  103.186.35.0/24
                IPv6:
                  2001:df4:c2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:03:30:f5:19:a8:6e:07:79:58:74:01:07:6a:af:f1:96:
         a4:ff:82:61:05:98:13:cb:db:33:fb:0e:f8:59:95:48:7d:05:
         9f:fa:ab:5f:d6:53:17:b6:ab:8c:b0:3c:a8:f7:32:19:ba:f5:
         c5:3e:8d:1a:22:dd:ee:da:ff:54:3b:9f:23:39:a5:6d:c9:e0:
         83:43:37:8c:50:8e:8a:b1:a0:a1:43:70:9a:09:a1:98:d9:ea:
         83:49:83:df:8b:c2:cb:72:0a:24:e7:e6:14:87:2c:a5:35:f1:
         5f:a4:a5:95:a8:4b:0d:1d:2a:1b:44:f9:c1:0d:54:c4:90:0e:
         8d:e8:1c:cc:e7:29:c5:9c:0b:b9:fb:39:49:40:d1:3b:45:43:
         17:f8:fa:8e:06:cf:ad:cf:91:3a:8c:6c:da:ed:1a:4e:1e:6d:
         83:98:73:16:92:c5:d4:8e:99:9b:b0:87:22:eb:73:57:b4:88:
         1e:66:60:3b:d3:5a:7b:8e:6d:cc:de:56:2a:66:22:13:c3:c9:
         9b:76:66:07:48:d1:40:45:23:26:24:ec:1f:8d:11:93:8b:02:
         06:38:20:05:d2:30:29:99:cd:bd:b6:af:d3:79:b4:32:46:ed:
         30:e5:0d:c1:b6:9f:37:06:79:ff:08:2f:7c:9b:4c:1f:b4:b4:
         c0:05:ba:c0
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIULxQvQgcCWVb6c7/zEPiJpL7rguswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExMzAzNTUwMFoX
DTI3MDExMjA0MDAwMFowMzExMC8GA1UEAxMoMjg2MzJDRDQ4RTEwNzk3NEFFMzlG
RjFDQjJBMEZFMURBNzBFRDZBNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/67UC/ZbNL+fWWn1O3IdjAue/CfBNvNTsIdf2gGHMtE0cxO40ddyBuMO/H
B0sIdrMQCHLD1dhF2wJYCgxvn5v8LFLetp3YiUp091iqAeRhUbJQT2OqoVokZ7F4
EMBkQWVAHRR46kUqgSDcYi9vQONqgawPwTwQe3c+R9TF0Vdc0ymwAWYhNOUa6MN3
xmLdsBWSA5brlPvQA8pJ0ZvnnFrFrncFW8ZLLP03myuqEWq16wHIs4trejQ1Zvdx
mJN5VHZboyWTRwvyCXTtYyLOgbDpFRuEQ1ZGx1yX6AqltVH2uzKSnm28JK+gR6Dr
ZdpPoUG6TSXqcJZgnPuc+RcQaSMCAwEAAaOCAecwggHjMB0GA1UdDgQWBBQoYyzU
jhB5dK45/xyyoP4dpw7WpDAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjMxOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUw
EgQCAAEwDAMEAWcavAMEAGe6IzAPBAIAAjAJAwcAIAEN9MLAMA0GCSqGSIb3DQEB
CwUAA4IBAQAl1wMw9Rmobgd5WHQBB2qv8Zak/4JhBZgTy9sz+w74WZVIfQWf+qtf
1lMXtquMsDyo9zIZuvXFPo0aIt3u2v9UO58jOaVtyeCDQzeMUI6KsaChQ3CaCaGY
2eqDSYPfi8LLcgok5+YUhyylNfFfpKWVqEsNHSobRPnBDVTEkA6N6BzM5ynFnAu5
+zlJQNE7RUMX+PqOBs+tz5E6jGza7RpOHm2DmHMWksXUjpmbsIci63NXtIgeZmA7
01p7jm3M3lYqZiITw8mbdmYHSNFARSMmJOwfjRGTiwIGOCAF0jApmc29tq/TebQy
Ru0w5Q3Btp83Bnn/CC98m0wftLTABbrA
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:20:34 2026 by rpki-client