This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa
File:                     AS150559.roa (raw, json)
Hash identifier:          HdnO7g/E56M/0+AwPXmTD+7s3HBxQ2RecVIaYfDej3M=
Subject key identifier:   61:57:23:8B:1E:24:ED:47:EC:03:B7:A8:89:47:4D:E6:3A:15:09:F8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       23C90C9F7231494FAEC4DE223EE6FAE7143305C4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa
Signing time:             Mon 02 Feb 2026 02:23:24 +0000
ROA not before:           Mon 02 Feb 2026 02:18:24 +0000
ROA not after:            Mon 01 Feb 2027 02:23:24 +0000
asID:                     150559
IP address blocks:        103.95.20.0/23 maxlen: 24
                          2402:4560::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c9:0c:9f:72:31:49:4f:ae:c4:de:22:3e:e6:fa:e7:14:33:05:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 02:18:24 2026 GMT
            Not After : Feb  1 02:23:24 2027 GMT
        Subject: CN=6157238B1E24ED47EC03B7A889474DE63A1509F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:28:52:34:91:df:30:14:cd:ff:da:c0:33:
                    58:31:5c:81:27:9d:65:55:79:c8:52:bf:8e:ff:3d:
                    11:eb:75:1a:1b:4b:f0:0b:16:8b:86:48:cb:46:67:
                    ff:14:dc:b3:2b:b6:9f:74:01:25:bd:26:3d:d0:e5:
                    a3:a1:cf:e1:7e:97:80:1d:8b:4f:8e:67:77:15:5f:
                    e2:b7:ea:32:0d:f0:61:69:03:0b:29:8d:6e:5f:ce:
                    e1:89:70:f1:9d:71:fe:69:b9:34:87:09:0b:ba:c7:
                    0f:9a:e8:11:b9:b3:a0:fe:4f:c2:b1:54:41:5a:c8:
                    59:e5:dc:40:47:49:89:60:d3:7f:7e:9c:a2:6d:af:
                    2f:df:d5:03:cc:6a:c4:dc:9f:9a:fa:ac:de:bf:b0:
                    8a:53:b7:3a:49:18:11:0d:ac:40:eb:21:66:49:a9:
                    17:7f:0c:bb:c2:fc:65:1f:29:f9:78:79:82:fd:36:
                    a9:9c:81:27:29:f7:5e:bc:c3:11:b6:87:7a:24:7d:
                    84:bb:83:c4:68:51:be:9b:c8:ff:07:81:0e:62:a4:
                    bb:18:46:d5:23:01:dc:eb:10:45:69:0d:3d:ec:ee:
                    5e:25:31:db:10:46:1d:9d:ca:50:6f:18:dc:e5:37:
                    d5:ae:69:98:a1:5c:a8:37:e6:75:c8:2d:85:8d:89:
                    87:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:57:23:8B:1E:24:ED:47:EC:03:B7:A8:89:47:4D:E6:3A:15:09:F8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150559.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.20.0/23
                IPv6:
                  2402:4560::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:65:e4:0c:fa:16:93:f2:c8:5f:54:16:ed:c6:50:d3:ad:08:
         97:ce:d3:d5:ab:71:9a:c1:2e:7a:df:2b:da:f0:0a:bd:43:bb:
         2d:75:02:d6:4f:f0:a4:16:7e:41:ae:1b:7c:76:23:01:dc:be:
         f9:7c:a8:0b:36:e3:05:c6:72:59:52:a1:ff:24:3f:d4:7b:53:
         6b:7a:0f:ec:c2:dc:ad:f5:bb:bd:f5:34:aa:5c:b3:f2:92:75:
         f2:9d:85:fd:45:0c:bc:0d:c3:a6:ac:ea:d0:de:6a:64:90:67:
         37:40:67:76:57:33:3a:85:6a:3f:9d:48:a8:13:9e:3a:09:d6:
         2b:e7:2e:6d:88:9d:8b:ea:3c:77:f1:3c:24:10:d5:71:6a:73:
         a1:e6:2b:9c:f9:19:20:96:bd:c2:a3:c4:75:dc:96:3f:29:c7:
         8f:bd:cf:a8:b5:a9:a3:ce:57:7f:c0:b4:8f:dc:4b:86:1b:23:
         b8:30:cb:cb:7f:24:1a:4b:c2:88:94:22:cc:f9:de:6d:d9:b0:
         37:ae:ed:8a:df:26:da:38:b5:c3:9e:7f:57:d2:ee:01:58:1c:
         9e:f1:ae:e8:db:f0:af:1b:b0:d9:25:29:56:5a:ce:35:4d:53:
         b1:8a:72:0f:0e:ee:65:af:dd:0b:dd:7b:c1:37:42:5e:e9:b8:
         7a:16:53:d6
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUI8kMn3IxSU+uxN4iPub65xQzBcQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMjAyMTgyNFoX
DTI3MDIwMTAyMjMyNFowMzExMC8GA1UEAxMoNjE1NzIzOEIxRTI0RUQ0N0VDMDNC
N0E4ODk0NzRERTYzQTE1MDlGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALBIKFI0kd8wFM3/2sAzWDFcgSedZVV5yFK/jv89Eet1GhtL8AsWi4ZIy0Zn
/xTcsyu2n3QBJb0mPdDlo6HP4X6XgB2LT45ndxVf4rfqMg3wYWkDCymNbl/O4Ylw
8Z1x/mm5NIcJC7rHD5roEbmzoP5PwrFUQVrIWeXcQEdJiWDTf36com2vL9/VA8xq
xNyfmvqs3r+wilO3OkkYEQ2sQOshZkmpF38Mu8L8ZR8p+Xh5gv02qZyBJyn3XrzD
EbaHeiR9hLuDxGhRvpvI/weBDmKkuxhG1SMB3OsQRWkNPezuXiUx2xBGHZ3KUG8Y
3OU31a5pmKFcqDfmdcgthY2Jh0cCAwEAAaOCAd8wggHbMB0GA1UdDgQWBBRhVyOL
HiTtR+wDt6iJR03mOhUJ+DAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE1MDU1OS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0w
DAQCAAEwBgMEAWdfFDANBAIAAjAHAwUAJAJFYDANBgkqhkiG9w0BAQsFAAOCAQEA
h2XkDPoWk/LIX1QW7cZQ060Il87T1atxmsEuet8r2vAKvUO7LXUC1k/wpBZ+Qa4b
fHYjAdy++XyoCzbjBcZyWVKh/yQ/1HtTa3oP7MLcrfW7vfU0qlyz8pJ18p2F/UUM
vA3Dpqzq0N5qZJBnN0BndlczOoVqP51IqBOeOgnWK+cubYidi+o8d/E8JBDVcWpz
oeYrnPkZIJa9wqPEddyWPynHj73PqLWpo85Xf8C0j9xLhhsjuDDLy38kGkvCiJQi
zPnebdmwN67tit8m2ji1w55/V9LuAVgcnvGu6Nvwrxuw2SUpVlrONU1TsYpyDw7u
Za/dC917wTdCXum4ehZT1g==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:12:06 2026 by rpki-client