This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150980.roa
File:                     AS150980.roa (raw, json)
Hash identifier:          +tCeUr1OVeGBY3TNVkAbulCnwN9t5K2Sd7+h56M0YbU=
Subject key identifier:   D5:3D:D4:D8:64:89:20:1F:3E:79:23:5E:FB:94:34:D8:43:C8:99:60
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D222701ECF9B35B0A0BB66444C2A9A1DD81C6E2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150980.roa
Signing time:             Fri 07 Nov 2025 06:00:00 +0000
ROA not before:           Fri 07 Nov 2025 05:55:00 +0000
ROA not after:            Fri 06 Nov 2026 06:00:00 +0000
asID:                     150980
IP address blocks:        103.70.122.0/23 maxlen: 24
                          103.138.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:22:27:01:ec:f9:b3:5b:0a:0b:b6:64:44:c2:a9:a1:dd:81:c6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  7 05:55:00 2025 GMT
            Not After : Nov  6 06:00:00 2026 GMT
        Subject: CN=D53DD4D86489201F3E79235EFB9434D843C89960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:5f:4f:c8:17:d9:83:4a:08:01:48:59:ad:
                    77:c4:86:90:6e:3e:9e:05:88:a6:7a:bc:bc:91:19:
                    21:cc:eb:78:17:e3:33:89:b2:3c:38:75:7a:9f:75:
                    4f:09:ee:98:ce:b5:ce:83:8f:fb:1f:3d:ba:4c:8d:
                    99:c9:e2:0c:52:17:ca:94:70:e9:d7:f3:6e:92:19:
                    5e:93:91:36:38:50:00:cd:30:89:23:6e:ad:ff:8d:
                    75:64:ee:48:f3:ea:0a:c7:00:14:66:8c:0f:95:e9:
                    4d:32:b0:ee:a0:f2:10:bb:86:0d:e5:95:b8:ee:e1:
                    ee:7e:aa:45:af:9f:5f:89:87:0e:1e:80:dd:e2:46:
                    4d:fe:a6:09:ea:35:78:ce:dc:60:02:9c:b3:9e:13:
                    3a:c5:0f:eb:6c:97:06:31:95:9b:f7:43:f2:a3:12:
                    63:a8:c3:a0:9a:b7:03:1b:8a:06:b3:41:0d:3f:7b:
                    18:80:4f:0f:7b:e8:ed:d7:95:c0:21:49:ac:6e:88:
                    68:a8:97:93:06:67:38:1b:34:c0:59:f9:08:4b:4f:
                    16:32:c1:7c:90:c5:b7:5e:d1:56:0c:d2:74:6f:c8:
                    e3:13:1f:72:65:aa:f9:f6:98:66:3d:70:d0:b6:b3:
                    f9:98:45:60:5c:dc:bf:53:e6:f5:cb:96:cf:28:db:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3D:D4:D8:64:89:20:1F:3E:79:23:5E:FB:94:34:D8:43:C8:99:60
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.122.0/23
                  103.138.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:4b:66:12:89:68:6d:c8:6f:98:40:e7:4c:f0:20:50:61:
         c2:ad:74:ce:b5:9d:43:84:66:50:cd:f0:f3:b6:29:ed:99:ca:
         c1:be:94:7a:6e:ce:9d:f3:a1:2c:c9:d1:9a:99:a6:f0:24:18:
         97:6f:b3:67:8a:a5:96:50:24:95:d9:a6:9c:a3:e2:24:9f:b9:
         e5:11:c2:d9:4a:6b:f1:54:5c:91:fc:a6:38:b8:2f:3f:bd:aa:
         7e:60:f8:51:2f:dc:20:c2:0e:70:61:d9:94:d9:59:58:2b:4f:
         3a:da:00:6f:52:23:a4:8e:5c:45:eb:5c:36:5c:35:8c:43:e7:
         71:de:dd:b0:11:d6:45:11:ac:1b:be:b1:d4:a8:03:e6:22:33:
         5f:ab:9f:70:0f:b4:5f:16:81:71:3e:11:d3:2b:63:b6:94:a3:
         43:dd:1b:92:8f:8f:12:66:7e:d4:8c:32:67:30:a6:3d:74:ad:
         87:71:79:c6:91:df:08:9f:85:5a:a8:f0:e4:6e:0e:cf:a1:65:
         d5:2d:3e:67:be:6b:5a:62:d3:a2:78:af:46:c2:00:3f:f6:7d:
         bc:e2:0b:63:fb:17:ff:4d:6a:65:fa:48:f4:0c:79:08:3a:4e:
         91:8a:75:3a:24:5b:c0:33:39:66:e6:5d:cb:e5:15:ac:e9:e8:
         46:e0:30:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:25 2025 by rpki-client