This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150496.roa
File:                     AS150496.roa (raw, json)
Hash identifier:          LPB/w5YF6OhaDfAlXNi2gUbOZj7pwU6moxY77CiEO00=
Subject key identifier:   F3:9D:E1:19:CF:EC:8F:5A:B4:5F:DE:B3:9D:80:B1:B3:DC:60:BC:7E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       152B4AF1713B97FD350CFECBBB8A3A9A831BE966
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150496.roa
Signing time:             Fri 14 Nov 2025 08:00:00 +0000
ROA not before:           Fri 14 Nov 2025 07:55:00 +0000
ROA not after:            Fri 13 Nov 2026 08:00:00 +0000
asID:                     150496
IP address blocks:        103.58.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2b:4a:f1:71:3b:97:fd:35:0c:fe:cb:bb:8a:3a:9a:83:1b:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 14 07:55:00 2025 GMT
            Not After : Nov 13 08:00:00 2026 GMT
        Subject: CN=F39DE119CFEC8F5AB45FDEB39D80B1B3DC60BC7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:f7:cd:3a:46:3c:2c:0a:07:9d:87:6e:1a:
                    60:ee:6b:4e:e7:ea:dc:a1:04:1a:21:c5:9b:0c:1f:
                    e1:ea:56:27:00:05:3e:64:77:80:6d:9a:7b:be:a9:
                    92:24:9f:77:af:78:2a:b3:67:4b:98:79:57:5a:55:
                    8b:3e:2a:07:6d:d0:a6:0c:2a:ca:ae:b8:c9:62:98:
                    c2:b3:6f:91:25:81:4e:c4:f9:08:c5:01:94:e4:02:
                    52:93:77:fa:6a:91:a8:ac:03:98:31:2b:49:8c:c7:
                    59:6f:e4:d7:f4:d8:b2:c7:93:f6:58:39:1e:df:cc:
                    b1:55:91:64:12:2c:24:c8:5a:87:72:24:2b:f2:d9:
                    70:da:1b:7a:c8:31:fe:1a:22:07:b1:83:04:c0:dc:
                    e9:38:14:ee:7e:95:6d:17:8c:50:31:01:0b:e7:95:
                    5f:e6:93:04:de:dd:6f:59:20:23:19:ed:b7:9f:9f:
                    1c:cf:06:61:a0:0d:fe:75:63:76:6d:a0:9c:08:84:
                    5c:68:94:b3:b5:7e:84:ca:d6:d9:d1:61:12:9a:47:
                    42:86:70:fe:1e:86:35:2c:6b:74:9b:97:57:34:2e:
                    fe:39:d1:b7:e4:e7:48:7b:2a:ed:5a:b3:0c:11:f7:
                    7e:b6:0c:7f:40:8e:ab:a2:98:c7:05:5a:1f:9e:b5:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9D:E1:19:CF:EC:8F:5A:B4:5F:DE:B3:9D:80:B1:B3:DC:60:BC:7E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150496.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:de:e2:9c:a6:9c:bd:78:e8:66:c6:1d:9a:29:40:5a:db:85:
         92:3b:70:77:97:8c:1b:73:b2:5a:7d:d0:56:00:62:49:38:91:
         41:2f:ad:a3:72:11:88:a2:67:88:11:49:00:a3:e2:a3:18:eb:
         6d:d7:a6:47:cd:92:82:13:52:2d:f1:1d:3e:15:df:aa:95:cd:
         c5:93:16:56:31:0d:75:49:12:b3:70:b8:12:d4:62:ca:0f:b3:
         e6:be:a6:d1:ba:f1:06:17:33:5c:b9:8e:58:03:8c:77:cd:86:
         5d:45:6c:36:5c:c4:c7:6e:37:f5:f0:e0:b4:29:17:82:8f:e9:
         f8:6b:9c:ca:c8:f4:c3:56:7d:7b:4f:58:21:29:2e:18:aa:a5:
         75:2e:e9:3d:94:8c:a4:7e:5a:91:c3:35:56:31:90:41:81:ec:
         a3:fc:8a:c8:0b:f7:03:fa:53:e7:29:73:b3:1f:dd:6d:d6:dc:
         42:f5:f1:8d:4b:d8:2c:a1:3f:69:a3:8d:a6:e6:3d:3c:10:33:
         cb:27:34:1e:3a:88:b7:4c:0a:42:0e:ef:d5:5f:d6:47:99:be:
         11:58:63:82:c6:65:a1:de:e8:66:be:f4:51:bf:eb:ca:f9:9b:
         9b:1b:56:7d:94:1c:d5:d8:32:2c:d5:a9:a2:db:04:ca:3c:a4:
         9d:ea:fd:29
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUFStK8XE7l/01DP7Lu4o6moMb6WYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTExNDA3NTUwMFoX
DTI2MTExMzA4MDAwMFowMzExMC8GA1UEAxMoRjM5REUxMTlDRkVDOEY1QUI0NUZE
RUIzOUQ4MEIxQjNEQzYwQkM3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKhu9806RjwsCgedh24aYO5rTufq3KEEGiHFmwwf4epWJwAFPmR3gG2ae76p
kiSfd694KrNnS5h5V1pViz4qB23Qpgwqyq64yWKYwrNvkSWBTsT5CMUBlOQCUpN3
+mqRqKwDmDErSYzHWW/k1/TYsseT9lg5Ht/MsVWRZBIsJMhah3IkK/LZcNobesgx
/hoiB7GDBMDc6TgU7n6VbReMUDEBC+eVX+aTBN7db1kgIxntt5+fHM8GYaAN/nVj
dm2gnAiEXGiUs7V+hMrW2dFhEppHQoZw/h6GNSxrdJuXVzQu/jnRt+TnSHsq7Vqz
DBH3frYMf0COq6KYxwVaH561iksCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBTzneEZ
z+yPWrRf3rOdgLGz3GC8fjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDQ5Ni5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWc6xDANBgkqhkiG9w0BAQsFAAOCAQEAgd7inKacvXjoZsYdmilA
WtuFkjtwd5eMG3OyWn3QVgBiSTiRQS+to3IRiKJniBFJAKPioxjrbdemR82SghNS
LfEdPhXfqpXNxZMWVjENdUkSs3C4EtRiyg+z5r6m0brxBhczXLmOWAOMd82GXUVs
NlzEx2439fDgtCkXgo/p+Gucysj0w1Z9e09YISkuGKqldS7pPZSMpH5akcM1VjGQ
QYHso/yKyAv3A/pT5ylzsx/dbdbcQvXxjUvYLKE/aaONpuY9PBAzyyc0HjqIt0wK
Qg7v1V/WR5m+EVhjgsZlod7oZr70Ub/ryvmbmxtWfZQc1dgyLNWpotsEyjykner9
KQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:16 2025 by rpki-client