This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa
File:                     AS150204.roa (raw, json)
Hash identifier:          qWhcKCnlKcIa5XbCtB/oep/8d78jrxFTBMpjSCBG3jI=
Subject key identifier:   15:E4:D1:D0:AF:2E:CE:DF:EB:1C:BC:6F:06:85:9A:CE:14:1A:DC:B7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       121989678DD976C16E93C2F59BC757E0FD86BD55
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa
Signing time:             Wed 21 Jan 2026 07:00:00 +0000
ROA not before:           Wed 21 Jan 2026 06:55:00 +0000
ROA not after:            Wed 20 Jan 2027 07:00:00 +0000
asID:                     150204
IP address blocks:        119.47.93.0/24 maxlen: 24
                          119.47.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:19:89:67:8d:d9:76:c1:6e:93:c2:f5:9b:c7:57:e0:fd:86:bd:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 21 06:55:00 2026 GMT
            Not After : Jan 20 07:00:00 2027 GMT
        Subject: CN=15E4D1D0AF2ECEDFEB1CBC6F06859ACE141ADCB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:bb:84:7f:93:65:91:a8:6c:b6:50:c2:ff:
                    00:a9:4f:6d:da:89:80:1e:7f:3c:68:e4:a0:f1:6f:
                    5c:c2:ee:61:af:52:2a:63:0b:f5:9d:3b:d5:56:15:
                    8c:bb:b3:ca:af:e9:0f:51:bf:28:3f:84:e3:e3:f0:
                    f6:9a:29:28:d3:2b:ce:11:a8:7f:ee:1d:e0:d0:ca:
                    80:e1:05:ef:04:69:2a:32:c6:e1:cb:5a:2f:78:46:
                    c8:0c:39:94:df:25:44:f8:01:25:bf:0e:12:f6:8b:
                    74:d0:02:64:c2:a2:1c:9d:0d:2f:69:98:f0:29:a9:
                    7c:56:05:c3:a8:b9:7f:65:ef:c2:03:82:1b:15:fa:
                    da:dc:37:44:2e:d4:e8:ae:cd:c3:02:f8:5e:39:e7:
                    9b:cd:66:14:fa:58:29:23:8d:cc:ea:07:21:8a:bd:
                    1a:a8:d2:77:14:86:98:b1:c6:8c:7a:8c:34:16:e9:
                    6e:e6:b4:7d:f6:8c:0d:03:fa:64:1f:a3:35:65:19:
                    d2:26:10:91:15:fe:e8:7d:d7:97:0a:05:54:41:d5:
                    d3:78:75:d5:e6:a5:51:19:ad:ed:e6:ad:34:92:6b:
                    0e:e9:71:9e:2c:c4:94:e7:94:4b:45:82:4f:ef:14:
                    52:fa:43:ef:16:ef:fd:2e:b7:30:f6:2f:ff:20:e5:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E4:D1:D0:AF:2E:CE:DF:EB:1C:BC:6F:06:85:9A:CE:14:1A:DC:B7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150204.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.93.0-119.47.94.255

    Signature Algorithm: sha256WithRSAEncryption
         63:bd:d6:92:c8:8f:ea:bb:68:9f:ca:fa:c8:ce:99:2b:56:71:
         e1:a7:f8:64:f6:7b:44:03:20:b6:95:72:af:2c:e0:e5:b0:55:
         fc:f9:99:63:7b:43:91:68:38:2a:5a:0d:63:8e:ca:1f:26:9c:
         41:ff:43:3e:8d:e3:72:7d:40:0e:01:33:46:d3:1a:4e:48:4d:
         ee:fb:77:78:25:03:7a:e9:a0:72:f1:12:1f:d0:86:24:bc:b9:
         17:93:55:c4:f7:89:27:eb:ec:0e:c2:39:e6:fd:7d:0f:7e:b0:
         04:84:bf:c3:94:6d:84:63:88:38:02:2b:d7:e6:f8:6c:fe:13:
         d7:04:62:6d:09:12:d5:8a:8b:10:46:bd:96:f5:33:44:a6:45:
         fe:51:2c:de:e8:aa:84:28:52:23:96:f6:7d:0a:d9:33:85:54:
         4a:94:8d:20:33:27:88:00:6b:cf:6e:aa:5f:aa:9f:d1:32:b5:
         b2:07:4c:0d:3f:a8:28:14:28:06:50:73:3a:36:26:cd:9b:f7:
         00:80:09:b6:57:e7:16:11:4c:37:5f:48:27:18:9e:a0:a3:82:
         cb:ab:52:ef:0a:0b:e2:48:bf:f7:4d:7b:b3:11:47:0a:8f:60:
         b9:99:ba:22:98:81:e5:e9:73:4d:55:98:fd:bd:84:3b:c6:68:
         d8:71:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:28 2026 by rpki-client