This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154201.roa
File:                     AS154201.roa (raw, json)
Hash identifier:          P19wXEgeP0C8qNbiimKaP+wDaxz1Mq7ZggKarBEqRtQ=
Subject key identifier:   47:A0:8C:14:69:33:5D:3E:53:DF:95:8C:62:B9:3A:CA:81:B3:36:CF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       62781C82FAD417FABD99E73AD214D98E6A3C31C7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154201.roa
Signing time:             Fri 30 Jan 2026 01:35:03 +0000
ROA not before:           Fri 30 Jan 2026 01:30:03 +0000
ROA not after:            Fri 29 Jan 2027 01:35:03 +0000
asID:                     154201
IP address blocks:        163.227.146.0/23 maxlen: 24
                          180.148.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 14:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:78:1c:82:fa:d4:17:fa:bd:99:e7:3a:d2:14:d9:8e:6a:3c:31:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 30 01:30:03 2026 GMT
            Not After : Jan 29 01:35:03 2027 GMT
        Subject: CN=47A08C1469335D3E53DF958C62B93ACA81B336CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:3f:5e:9d:c9:d8:49:c6:3c:d9:f3:79:10:
                    da:cb:23:14:00:a4:68:53:88:e2:71:32:41:24:db:
                    b7:58:ee:91:ff:87:69:aa:3f:9b:44:ba:f1:77:2c:
                    d3:fb:dc:f7:bc:41:68:ef:7b:17:19:aa:eb:d8:81:
                    61:2e:24:18:bc:83:a9:9f:2f:c4:87:2d:67:ed:37:
                    37:12:c2:3a:98:70:90:64:05:e2:ed:a5:80:fb:2b:
                    8e:54:cb:cf:fd:4b:fe:81:73:73:39:6b:3f:12:ce:
                    ee:dd:e3:38:0d:61:38:6e:90:5f:23:c7:d1:8a:c5:
                    8d:2a:63:93:6e:a5:27:31:18:80:3b:29:07:d2:58:
                    ff:61:4b:e2:aa:53:b2:a5:89:97:4a:9e:93:84:8d:
                    b5:fc:55:2a:2a:df:c9:73:5f:f5:94:80:6c:ac:18:
                    81:c8:cf:c5:af:79:db:1c:97:78:b0:28:5a:76:ad:
                    ec:ea:f2:a7:a0:93:aa:1b:46:0a:65:52:bc:6f:86:
                    b9:dd:60:08:0e:1a:e9:90:9e:22:01:bb:58:58:62:
                    e5:2f:a2:6c:e9:c4:2c:be:9b:a2:8e:f0:55:14:03:
                    1b:f1:ab:63:4c:dd:25:75:4a:3e:ba:f3:fd:77:97:
                    25:c1:c8:33:e9:71:22:b3:8f:c3:b6:60:e5:74:ef:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A0:8C:14:69:33:5D:3E:53:DF:95:8C:62:B9:3A:CA:81:B3:36:CF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS154201.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.146.0/23
                  180.148.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:67:87:01:65:6f:78:c9:75:52:a5:4c:8a:4f:74:c1:1f:39:
         38:41:78:e4:d4:42:8c:4b:10:bf:0e:22:c5:3d:e1:e5:a8:3c:
         3e:fe:05:d8:7b:26:c1:d7:91:33:eb:ad:37:4f:b0:4b:ce:9f:
         01:d4:56:ee:fe:cb:87:78:3e:66:77:ad:4b:dc:9e:27:df:f5:
         5c:9f:91:e8:c4:82:c4:ef:07:4d:e4:d3:7f:70:8d:51:aa:37:
         19:f5:80:e4:49:1f:eb:c6:9f:71:3a:d1:7d:32:97:7f:83:6c:
         41:d1:41:89:80:18:e6:3e:37:0e:14:a9:eb:02:7b:7f:90:7f:
         33:46:a6:53:da:a5:3b:b3:79:25:5d:ae:e0:22:fe:ad:27:53:
         95:f2:39:57:55:48:a5:99:cb:77:2d:8c:5c:0b:2a:f3:8a:e2:
         c2:38:d2:f6:e3:d2:b9:4f:af:0c:df:6a:a2:e6:5c:9f:0d:de:
         04:cf:37:e4:a5:67:fb:01:35:46:2c:7f:82:4a:c5:2d:be:81:
         51:d1:e2:13:81:84:83:ea:59:8b:a0:79:3b:ed:e5:bd:03:1b:
         81:33:c6:ed:58:36:7e:18:62:75:70:cd:d5:03:0e:44:eb:89:
         ac:75:69:7e:db:6e:29:77:8b:50:71:5b:e4:5f:a8:a8:99:41:
         d5:d9:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:06:59 2026 by rpki-client