This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59272.roa
File:                     AS59272.roa (raw, json)
Hash identifier:          I7v7EXjbwHNm6fxXkYH7Xtsv/Qe/cWzksqE0j9VsGL8=
Subject key identifier:   D8:7C:D5:26:21:7C:0E:E7:8F:51:8C:B0:9C:32:63:4D:EA:8D:8F:44
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       33B88188D058612569DF0BBF362257F971ABDBA1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59272.roa
Signing time:             Tue 11 Nov 2025 04:00:00 +0000
ROA not before:           Tue 11 Nov 2025 03:55:00 +0000
ROA not after:            Tue 10 Nov 2026 04:00:00 +0000
asID:                     59272
IP address blocks:        103.81.246.0/24 maxlen: 24
                          103.81.248.0/23 maxlen: 24
                          103.225.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 12:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b8:81:88:d0:58:61:25:69:df:0b:bf:36:22:57:f9:71:ab:db:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 03:55:00 2025 GMT
            Not After : Nov 10 04:00:00 2026 GMT
        Subject: CN=D87CD526217C0EE78F518CB09C32634DEA8D8F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:ec:28:b9:95:a8:9d:00:db:c4:74:70:b4:
                    80:0e:e8:64:f1:f8:1c:c3:ee:32:63:b3:0a:a7:7a:
                    b2:38:60:77:a7:0d:1a:47:13:b5:a7:0b:b2:50:cf:
                    22:ac:2c:62:9e:63:b2:66:7e:4f:16:c9:75:8a:92:
                    ba:11:79:4b:40:b6:21:f9:1d:ce:81:c9:9d:be:76:
                    17:22:31:b7:06:c5:f9:42:56:d3:cd:f0:21:1a:e5:
                    4b:4d:97:5b:26:00:02:29:9c:e9:e2:71:32:af:79:
                    e5:ef:57:d7:f6:34:e7:0d:72:43:36:d3:64:d4:59:
                    e7:a2:de:e0:7a:7f:24:36:b6:b8:99:84:cc:bc:a5:
                    ea:73:b5:a8:48:53:6a:8e:d8:0d:f8:8d:e6:b4:51:
                    32:8a:85:bc:a4:f8:22:52:a6:2b:58:01:de:17:a7:
                    f6:e8:5d:c9:3c:8b:9d:bc:62:5d:9a:dd:db:9a:f3:
                    af:56:01:17:94:6b:83:14:a5:21:6b:1a:38:a2:e9:
                    b3:e1:08:84:5f:5b:37:b1:cc:78:a0:fb:d3:26:cd:
                    66:73:2d:40:8e:d6:58:ed:37:67:df:55:e9:2f:40:
                    c6:ee:4a:f1:a1:54:9d:9f:99:10:3d:13:50:bc:f8:
                    a2:71:23:0d:77:f9:80:69:91:ae:dd:f0:f7:d0:e9:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7C:D5:26:21:7C:0E:E7:8F:51:8C:B0:9C:32:63:4D:EA:8D:8F:44
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS59272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.246.0/24
                  103.81.248.0/23
                  103.225.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:77:ae:9d:ce:66:77:c1:3a:e2:cb:0d:bb:d4:1b:c4:ad:f3:
         8f:82:df:19:c4:71:b2:e7:44:db:48:df:fc:3d:92:84:91:e5:
         e1:50:ba:99:ae:91:c9:5f:cb:48:8c:1b:52:ce:d1:72:1c:4a:
         40:a6:20:71:81:ce:8a:d6:1d:df:41:b3:e6:e1:c0:0b:8f:44:
         85:c5:08:1e:d4:6d:49:aa:64:db:40:98:3b:85:a0:86:d0:dc:
         de:07:2d:2e:ba:64:59:ee:f4:47:f2:99:91:d5:18:ce:e7:cb:
         1b:cf:78:e2:de:82:75:2b:21:64:32:c4:7a:0b:2b:77:3a:28:
         8e:4f:e9:8f:76:3c:c4:71:12:77:41:d2:5f:c7:cf:b3:d8:0f:
         9b:64:a2:24:12:82:93:53:67:73:bb:6a:35:be:5e:6c:42:77:
         f5:61:a6:d0:4f:91:1c:5b:df:ee:a9:a8:fc:08:80:4b:17:b7:
         76:fb:09:17:e3:55:60:48:f6:e4:e7:1e:9c:c2:f8:eb:ca:a3:
         08:5d:da:5a:db:4c:5b:71:2d:03:cd:25:e3:6b:cc:da:b5:a8:
         98:3f:7d:e4:89:24:2b:57:58:f5:d7:8b:5d:77:1f:f4:aa:b4:
         e3:a1:eb:7c:6c:df:4e:0f:63:51:08:9f:d0:82:61:e2:a4:cc:
         d4:70:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:15:06 2025 by rpki-client