This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa
File:                     AS149392.roa (raw, json)
Hash identifier:          jdQr+smzAgGyoRr6pyOfckvtep66RSV9XUVYm/FJutw=
Subject key identifier:   80:2A:88:B6:01:B9:91:C3:E6:AA:D3:EF:77:8F:EE:5C:02:C7:81:6B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       13F9B1D6DE74104C12ABE9A616D2FD1CF1FFDE8A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa
Signing time:             Fri 21 Nov 2025 07:00:00 +0000
ROA not before:           Fri 21 Nov 2025 06:55:00 +0000
ROA not after:            Fri 20 Nov 2026 07:00:00 +0000
asID:                     149392
IP address blocks:        103.181.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:b1:d6:de:74:10:4c:12:ab:e9:a6:16:d2:fd:1c:f1:ff:de:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 21 06:55:00 2025 GMT
            Not After : Nov 20 07:00:00 2026 GMT
        Subject: CN=802A88B601B991C3E6AAD3EF778FEE5C02C7816B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:3f:4e:40:5d:6e:ce:aa:53:fb:6c:40:7d:
                    8e:e5:1f:ae:61:9e:9a:37:d9:0c:fb:63:16:a7:69:
                    6e:26:df:83:87:3b:23:6c:f0:45:4d:c9:50:13:a2:
                    b5:90:4f:4e:85:8b:f0:2c:09:5d:3a:c2:8b:17:a5:
                    56:aa:ef:bd:24:35:b0:92:73:c2:e4:51:06:03:74:
                    f2:dd:3c:ff:77:24:55:e7:77:25:d9:14:46:b7:58:
                    37:28:9a:c8:06:09:92:19:41:eb:5c:5d:8a:7b:4f:
                    6d:89:33:54:d4:9f:0f:46:51:74:13:4a:e9:9b:af:
                    08:5b:fc:c9:98:04:0c:cb:19:71:d7:cf:0a:1e:83:
                    78:3b:9a:3f:98:ae:40:5a:4c:01:e9:c0:cf:8b:3f:
                    41:42:f8:32:ac:f7:18:a0:12:b4:5d:3a:0d:0d:38:
                    9c:33:61:42:3b:78:6b:46:ee:f3:ed:ad:63:8d:e9:
                    16:72:07:21:d8:ae:b7:65:41:c0:f2:38:62:ea:85:
                    bd:2b:a9:61:dc:5e:6a:fb:cc:e5:1f:6b:d4:f9:c1:
                    d3:7b:dc:d8:1a:57:94:40:d1:1d:4b:2a:1e:eb:e8:
                    9b:34:e4:5c:2c:ca:90:69:b7:68:44:b0:11:40:8b:
                    92:5d:48:97:68:9b:a0:0e:59:1c:f1:63:1a:23:17:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2A:88:B6:01:B9:91:C3:E6:AA:D3:EF:77:8F:EE:5C:02:C7:81:6B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149392.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:55:e6:6f:80:6c:b5:b4:98:73:6a:76:25:01:d8:6f:fd:79:
         f9:58:58:69:89:a6:72:93:b9:93:f3:12:ce:60:65:1d:84:31:
         35:5b:f4:24:3e:63:5e:c7:ba:b2:7a:c2:c0:ff:f9:d1:a9:9f:
         51:a2:4b:92:7a:29:92:8e:15:73:7e:82:35:fe:fa:ae:4c:6c:
         30:13:7f:e0:47:46:25:b1:e4:f6:b8:ee:88:2b:04:eb:00:c0:
         5b:7c:bf:a6:e5:09:2a:71:c6:80:76:9c:c0:f1:69:f7:7a:28:
         5d:d4:92:81:df:07:e4:1c:16:01:6b:1a:39:cb:75:1b:4b:f9:
         2f:cb:5a:d3:5a:c0:97:bc:c0:80:50:f8:6d:3d:8c:5e:ba:f2:
         6a:15:6f:f1:2e:fb:61:1d:85:f2:f1:64:5c:55:7e:1e:aa:22:
         f4:14:25:6e:8e:19:37:50:57:32:ff:23:2f:0b:1a:ea:74:f5:
         47:cb:77:02:98:41:2e:c5:07:f8:4e:ab:1c:33:24:6e:19:35:
         fc:b2:2b:85:6c:3b:32:ec:4c:95:4f:23:f0:eb:d7:43:8d:93:
         f7:5f:91:a4:6c:66:8f:69:f3:73:51:f0:58:22:f5:31:a7:af:
         11:33:e7:ce:a1:4b:2d:07:e2:ad:17:a2:df:c8:e6:2e:89:d3:
         62:48:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:51 2025 by rpki-client