This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
File:                     AS150515.roa (raw, json)
Hash identifier:          PDjFxwaGlPQ3fBHfCqZu/H90XWcHI7FyU5/Tr8JNnVM=
Subject key identifier:   E9:97:62:2D:0E:18:26:1F:14:AD:40:AC:72:79:A5:CE:C0:09:E6:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4ECCD75DA17D20B6C136A489F0656FA2A84D9C5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa
Signing time:             Tue 02 Dec 2025 03:00:00 +0000
ROA not before:           Tue 02 Dec 2025 02:55:00 +0000
ROA not after:            Tue 01 Dec 2026 03:00:00 +0000
asID:                     150515
IP address blocks:        103.61.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cc:d7:5d:a1:7d:20:b6:c1:36:a4:89:f0:65:6f:a2:a8:4d:9c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  2 02:55:00 2025 GMT
            Not After : Dec  1 03:00:00 2026 GMT
        Subject: CN=E997622D0E18261F14AD40AC7279A5CEC009E6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:08:6b:b0:a9:b0:25:fe:90:9c:54:f4:9f:70:
                    18:b0:65:6f:9c:6e:f9:be:5d:8a:79:a4:87:b8:38:
                    a7:ff:a3:50:78:6d:05:46:b0:56:24:71:d4:4e:1a:
                    dd:d4:4f:07:39:3e:c5:2c:aa:3d:c6:82:17:f5:27:
                    eb:5c:a4:d2:b7:5a:94:9c:d8:e4:0f:d3:93:0c:ab:
                    84:62:aa:90:07:00:82:83:86:cc:b0:a4:1c:f0:fa:
                    48:a6:60:85:b7:0a:a2:79:fc:ef:63:1e:9a:25:02:
                    6b:2f:39:53:43:e6:a0:4f:de:86:2f:07:b6:5e:e6:
                    33:a9:b7:99:56:a7:ec:3b:ac:9c:a8:7e:e5:c9:70:
                    56:76:52:56:f4:b1:6f:20:52:51:a8:4b:01:33:d5:
                    d0:28:de:14:a4:70:14:e6:71:00:be:a0:dd:f8:60:
                    92:51:b5:cb:aa:35:c0:9e:ca:29:f3:94:40:fc:8a:
                    fc:46:bc:f7:06:33:0f:32:f6:e3:07:32:fe:c8:a0:
                    32:6f:91:fa:7e:81:00:05:c3:ab:ed:01:68:1a:03:
                    05:7f:d8:92:5d:1e:50:0e:02:8a:95:92:b3:8e:5d:
                    9f:e0:ee:71:62:a9:4a:2d:65:cb:dd:b1:80:23:ba:
                    f0:07:2e:93:96:fa:6f:19:6f:57:2f:b3:59:62:ab:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:62:2D:0E:18:26:1F:14:AD:40:AC:72:79:A5:CE:C0:09:E6:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:42:93:11:84:38:5c:66:0b:f1:34:44:3d:99:47:84:1c:
         65:e9:e5:f9:c6:91:c9:53:75:ae:2c:17:8e:96:88:49:ca:c3:
         c7:3b:38:78:5e:8d:f8:77:75:11:a7:17:17:75:97:ac:d3:23:
         63:4c:f1:3a:6d:f7:91:70:a0:86:b5:5f:f3:91:c7:4f:c5:39:
         9f:be:90:3b:56:c4:59:39:7f:5e:d9:15:f5:4d:26:1e:11:a1:
         8c:9b:5c:5b:a7:99:d0:06:d8:4d:15:0b:96:0f:15:44:53:43:
         03:3d:5c:32:64:43:71:b3:25:55:47:13:b4:52:78:35:c6:b2:
         26:05:94:b5:46:17:46:63:9f:e4:05:31:73:55:6f:ee:bb:50:
         91:1d:e5:e6:51:14:95:c4:87:d4:5e:72:4c:a1:23:5a:78:3a:
         b8:9c:5a:60:98:41:43:9a:09:67:13:16:0c:82:05:08:10:08:
         aa:93:c8:3f:16:54:53:52:00:f0:42:81:bc:b4:b8:ec:eb:bc:
         d7:3a:56:b0:44:ff:ac:8b:c6:ae:ad:72:92:36:5f:99:a7:ae:
         53:55:f4:d4:01:56:f7:cd:df:83:40:c0:a7:2d:fb:99:88:25:
         6e:45:b1:fd:e3:5f:65:8e:c6:ea:1f:d1:c7:a7:f6:de:68:33:
         ba:96:eb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:55:22 2025 by rpki-client