This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142339.roa
File:                     AS142339.roa (raw, json)
Hash identifier:          TcCJAVFIa4oNRW3SesBpiPqUDMAdxDZrPveaDnO3yqA=
Subject key identifier:   D5:16:C8:A7:D6:16:47:83:74:65:02:C0:4B:75:6B:F4:7E:BA:F1:92
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       144D10ED6B75576286BAFEA6BAD4A89684F90EA0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142339.roa
Signing time:             Tue 13 Jan 2026 04:00:00 +0000
ROA not before:           Tue 13 Jan 2026 03:55:00 +0000
ROA not after:            Tue 12 Jan 2027 04:00:00 +0000
asID:                     142339
IP address blocks:        103.18.112.0/23 maxlen: 23
                          103.18.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4d:10:ed:6b:75:57:62:86:ba:fe:a6:ba:d4:a8:96:84:f9:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 13 03:55:00 2026 GMT
            Not After : Jan 12 04:00:00 2027 GMT
        Subject: CN=D516C8A7D6164783746502C04B756BF47EBAF192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:dc:bd:bc:be:b2:af:bb:79:4c:3b:4b:b8:
                    da:f9:5f:a9:6d:e9:02:2c:3c:08:39:56:a4:79:16:
                    e4:99:69:52:eb:70:7f:ec:3f:6c:ef:31:57:da:0d:
                    7c:30:29:ab:15:36:5d:58:dd:3d:4f:bd:f6:00:ec:
                    68:92:51:51:1a:42:22:8b:eb:12:d0:60:76:ea:4f:
                    94:4e:1d:a3:5f:a8:e2:0e:ea:78:b3:e9:f3:bc:69:
                    5a:f0:fd:7a:c8:57:1d:8a:b0:2c:f3:ab:ad:05:73:
                    50:f1:1e:f9:a1:cc:9d:a8:70:13:33:1f:89:22:e2:
                    34:1a:93:ca:a9:d7:ab:78:f3:7d:2b:e3:ee:19:39:
                    3d:5d:68:a0:aa:f1:99:a1:49:45:2a:97:5e:fb:d7:
                    13:80:c9:10:2a:aa:0f:b0:98:d1:48:d4:7c:b6:5f:
                    60:f8:e9:cb:8a:69:b3:04:9a:53:62:69:17:2a:21:
                    f8:44:59:d9:0d:8b:c8:4f:18:04:ba:8e:da:4a:0d:
                    23:a8:6f:c3:b1:2a:df:6e:8a:74:b7:9a:f5:e6:e7:
                    e4:e0:e3:6b:34:8e:55:f6:04:26:9c:4b:f1:46:6f:
                    08:25:b3:1e:ee:a2:4f:b2:0a:f7:e7:79:13:3c:2a:
                    93:1c:e0:db:5e:37:3f:e4:88:e6:1a:8f:13:d9:bd:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:16:C8:A7:D6:16:47:83:74:65:02:C0:4B:75:6B:F4:7E:BA:F1:92
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:d7:69:47:e3:7a:19:c4:5d:ea:b5:12:d2:3d:4e:78:75:bc:
         6c:83:b0:47:42:93:4d:88:60:8b:72:01:a6:9a:29:7f:f6:4d:
         81:62:24:fd:88:59:04:21:a6:c2:50:9a:9f:0c:7f:f1:83:15:
         b5:ec:5d:65:d6:46:2c:19:4e:9c:9f:40:8f:0c:46:db:5f:72:
         12:ce:9d:97:25:63:8c:7e:3d:d8:e3:59:5e:a7:9f:40:0c:a9:
         60:cc:83:6f:eb:fd:e2:7c:56:61:3d:49:d4:80:7b:d6:63:32:
         67:b7:0c:cc:fd:e5:9b:c7:d9:40:e7:a2:08:31:be:98:bc:73:
         9b:a3:07:3d:6e:53:3a:98:41:1e:de:75:54:82:66:ac:98:e1:
         a0:f6:e5:c2:21:cf:6d:26:e0:92:ba:22:91:c8:ab:22:4a:3e:
         b7:ae:6d:27:03:a9:ac:df:4b:ca:cc:3e:c3:44:2b:88:6b:95:
         c7:36:b8:b5:33:d0:ab:71:5b:86:6f:41:88:bd:00:c4:84:46:
         e2:d8:4d:dc:4b:47:6b:f2:c8:85:aa:09:ed:e2:8e:fc:15:66:
         ae:fe:98:3c:8a:9d:d4:74:c8:8b:3c:1c:bb:3a:c6:59:a5:bc:
         36:62:59:26:94:02:82:9f:7b:48:cd:27:6b:29:9c:2f:98:e5:
         bf:d4:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:40 2026 by rpki-client