This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa
File:                     AS46044.roa (raw, json)
Hash identifier:          TcnM75iyB9kv8ncBUjcp0qLalOq+RrmG9PbPB5/ZlLQ=
Subject key identifier:   5B:BD:8F:A5:03:2B:3F:38:58:C2:5B:72:D8:0F:0F:B1:6B:F1:C6:9A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       339677AEC4AEE3F49DA1715EE01864CB19A06124
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa
Signing time:             Tue 11 Nov 2025 06:00:06 +0000
ROA not before:           Tue 11 Nov 2025 05:55:06 +0000
ROA not after:            Tue 10 Nov 2026 06:00:06 +0000
asID:                     46044
IP address blocks:        111.223.252.0/22 maxlen: 24
                          2405:9940::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:96:77:ae:c4:ae:e3:f4:9d:a1:71:5e:e0:18:64:cb:19:a0:61:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:06 2025 GMT
            Not After : Nov 10 06:00:06 2026 GMT
        Subject: CN=5BBD8FA5032B3F3858C25B72D80F0FB16BF1C69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:ef:27:87:9a:cb:b4:d2:8d:25:32:9b:36:
                    1c:be:9d:43:66:70:98:63:df:ab:25:12:95:a8:17:
                    80:89:31:17:03:30:91:2d:1c:6c:73:82:a9:5f:0a:
                    60:9e:e3:27:cf:ab:d4:df:5e:f8:ed:cb:a4:33:1b:
                    97:6d:d4:c8:3d:36:1c:b8:45:25:6c:74:09:3f:f5:
                    7e:19:c6:d8:a5:48:2b:d0:6b:eb:af:11:00:7c:46:
                    6d:ae:1f:89:7a:3e:46:13:57:d9:6d:9f:ad:d6:b3:
                    8d:9d:96:82:e0:5a:ab:4a:66:27:de:10:4d:6f:21:
                    f9:bc:6f:88:f9:03:c8:0c:52:43:a9:d4:63:81:87:
                    f3:cc:b1:13:5d:33:fa:a1:bc:99:2b:57:4f:ab:2c:
                    02:96:b7:12:15:17:31:22:e9:c7:17:da:9f:d8:d0:
                    5e:2d:00:42:e7:aa:79:30:ef:5e:ce:7c:71:e1:2d:
                    1a:fc:1c:f5:6b:16:1a:32:78:22:0a:b3:88:e4:47:
                    a2:34:21:51:4d:3f:f9:27:eb:65:bf:d5:12:e3:72:
                    1b:d4:a1:9e:67:fc:16:79:ab:27:75:33:72:55:ac:
                    26:88:e0:1c:ae:04:7c:e1:88:0d:fe:ce:3f:82:a6:
                    bf:71:46:e2:97:6b:51:b6:81:d1:26:b8:1c:7b:d9:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:8F:A5:03:2B:3F:38:58:C2:5B:72:D8:0F:0F:B1:6B:F1:C6:9A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS46044.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.252.0/22
                IPv6:
                  2405:9940::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:75:b1:f0:b4:f9:70:56:50:9f:23:b1:f4:79:02:c2:07:e8:
         0f:22:a7:34:ba:1d:40:dd:cd:66:89:e4:ff:27:0c:3e:39:76:
         93:eb:d8:3a:f8:da:14:88:0d:fc:6e:55:fb:1a:01:b1:96:13:
         5f:fa:25:1f:28:78:c8:47:49:8a:af:a3:af:8e:51:52:b3:da:
         bd:2a:17:09:8d:2a:f0:c9:2c:9c:bf:e0:77:59:34:53:ac:2f:
         75:cc:64:cb:28:10:4b:9d:3c:3a:41:80:1a:38:9c:fb:79:c5:
         cf:27:2a:bb:cc:96:62:76:e8:38:b0:a0:1c:6f:70:81:7a:37:
         6b:86:f9:70:d2:1a:81:20:8f:4d:9f:79:18:c9:a8:b2:9c:80:
         4d:fe:63:f5:38:75:45:48:bf:ab:18:c5:66:e4:27:d3:b7:aa:
         05:c1:f2:35:85:bd:fe:24:16:a2:d7:59:b9:e7:ea:42:aa:16:
         f3:8d:2b:fb:b8:07:06:6c:0e:68:7e:d8:cb:b7:77:e0:53:84:
         f8:3b:bf:3d:fb:d3:37:74:f3:01:4f:25:3b:27:54:97:29:74:
         9a:84:a5:a3:12:3a:2c:10:95:67:11:4a:ab:53:1b:0d:7c:8e:
         87:83:af:4f:26:6b:6b:d1:b7:ee:2b:3b:0f:dc:c4:83:6c:25:
         a4:bc:30:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:14:51 2025 by rpki-client