This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149358.roa
File:                     AS149358.roa (raw, json)
Hash identifier:          3pJlpm3+yrvExFNxtP+jojZ4sPS2cDHGP8JhZnWPgyo=
Subject key identifier:   DA:6E:8A:A3:05:CB:54:82:30:3C:F4:8D:A0:B1:ED:1E:86:84:15:B4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5CC1EDBB8E341FBF5FBDD147E67508050672BF0E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149358.roa
Signing time:             Mon 05 Jan 2026 03:00:00 +0000
ROA not before:           Mon 05 Jan 2026 02:55:00 +0000
ROA not after:            Mon 04 Jan 2027 03:00:00 +0000
asID:                     149358
IP address blocks:        103.180.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 14:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c1:ed:bb:8e:34:1f:bf:5f:bd:d1:47:e6:75:08:05:06:72:bf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  5 02:55:00 2026 GMT
            Not After : Jan  4 03:00:00 2027 GMT
        Subject: CN=DA6E8AA305CB5482303CF48DA0B1ED1E868415B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:60:d0:85:3c:10:36:02:94:50:9c:f3:9d:b1:
                    52:bf:db:98:7d:1a:d5:b0:78:4a:5e:02:e1:e7:0e:
                    9e:34:4a:58:b7:0b:12:59:96:71:92:6e:73:ad:41:
                    f0:66:a3:80:5d:3a:d6:33:68:57:2e:00:06:c5:cf:
                    be:9d:38:6d:75:e3:70:f5:18:f0:bf:ce:1e:4c:12:
                    66:92:c9:aa:5f:c3:2e:f1:a4:a4:6e:1d:ad:b1:7f:
                    30:66:b2:c6:4e:b2:9e:5f:c9:26:a3:5e:61:e2:5a:
                    76:07:f2:76:fe:ed:01:3d:76:77:f2:8b:e0:dc:12:
                    5b:96:55:19:ec:9c:93:ab:ee:3e:42:8c:87:3b:4b:
                    51:b8:83:bf:25:f6:31:66:36:96:96:2c:af:c7:11:
                    29:14:2a:7a:8d:37:f5:95:37:d8:9a:7a:fb:5b:e4:
                    2f:8e:b3:86:7f:1d:7a:35:54:35:51:1c:39:e2:99:
                    cb:57:74:c2:f8:6a:1b:64:6f:c6:5f:58:0d:a8:d6:
                    8a:e6:91:85:10:21:92:88:27:4a:43:16:3c:4c:f6:
                    c2:b6:a4:95:e6:94:87:ad:46:52:e4:95:0f:a8:2e:
                    ee:8a:35:7e:c3:64:91:b1:8b:4c:33:4e:79:d2:a9:
                    d1:ce:ef:03:ea:e8:2d:2f:09:2e:e6:3d:29:0b:12:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:8A:A3:05:CB:54:82:30:3C:F4:8D:A0:B1:ED:1E:86:84:15:B4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149358.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:69:a1:ed:78:27:de:dc:80:75:87:47:38:40:91:5b:fd:12:
         64:38:03:d6:bf:aa:84:ad:ec:b6:cc:a7:01:ac:33:6e:d2:e9:
         b0:60:78:66:01:cd:23:4b:2b:7d:9a:59:1a:65:18:67:9f:4c:
         e6:0b:e1:a4:79:a7:24:39:cb:89:40:09:ef:f2:dd:1a:52:05:
         09:28:d4:4b:12:bf:e9:8a:e0:22:ea:fa:2c:0c:e0:69:a4:a4:
         9d:a1:55:31:f5:60:4d:c9:2f:13:0d:55:85:a9:a9:aa:a1:4b:
         14:7c:d3:c6:68:de:af:69:a0:97:e2:fa:7b:00:a9:65:a9:09:
         2f:7c:49:de:29:9b:f7:a0:eb:71:02:6a:2b:a3:2d:1f:c0:fd:
         f1:60:d5:f4:65:9c:b6:26:eb:9f:0e:a1:ef:01:8e:92:66:aa:
         ce:df:c7:5b:cb:8b:a4:d7:2d:5d:d5:71:af:93:cd:a0:42:d6:
         57:b1:95:cf:75:f4:de:c8:8b:48:c9:c9:73:32:be:a9:5b:e1:
         ec:29:e2:aa:5c:32:7b:25:3e:0e:37:10:30:84:0b:64:27:45:
         e7:79:ff:a3:22:c8:6e:27:93:03:4e:aa:02:cf:06:93:ca:b3:
         72:89:a9:52:4f:b8:d6:ab:c1:27:89:80:dc:7e:84:be:f1:fc:
         77:8b:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:11:27 2026 by rpki-client