This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142206.roa
File:                     AS142206.roa (raw, json)
Hash identifier:          OWaAb0V0K1r0cOT6ZyWL55CH2sZ+xQATUQlxB6pvd4A=
Subject key identifier:   97:B0:E8:BA:C8:DE:3D:DA:12:01:18:9D:61:E1:A7:D2:59:74:35:77
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       3ABF67B132008605B9FC5F034F5CBF2BB58E6E60
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142206.roa
Signing time:             Fri 23 Jan 2026 01:11:44 +0000
ROA not before:           Fri 23 Jan 2026 01:06:44 +0000
ROA not after:            Fri 22 Jan 2027 01:11:44 +0000
asID:                     142206
IP address blocks:        192.232.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 21:04:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bf:67:b1:32:00:86:05:b9:fc:5f:03:4f:5c:bf:2b:b5:8e:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Jan 23 01:06:44 2026 GMT
            Not After : Jan 22 01:11:44 2027 GMT
        Subject: CN=97B0E8BAC8DE3DDA1201189D61E1A7D259743577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:21:ef:78:85:60:1b:1e:40:6c:02:98:45:
                    98:f3:92:28:98:00:35:37:99:86:8d:89:7c:22:1c:
                    3d:b3:50:9a:09:0a:87:67:68:b7:12:1d:49:ea:8d:
                    b5:7d:5f:93:9e:19:bf:25:6c:c8:b5:46:cf:22:db:
                    03:81:46:bd:c3:b0:56:8b:bd:80:cf:54:bd:09:b2:
                    a4:1d:7b:99:31:8d:ac:dd:65:88:32:10:10:d5:38:
                    08:59:6f:47:09:1b:3a:f0:61:94:9c:65:71:3d:9a:
                    a3:3a:8c:ba:97:66:30:66:e8:41:fc:87:bc:34:d0:
                    fa:31:15:b6:70:d3:94:18:62:88:7e:13:78:29:c0:
                    cd:7f:35:2e:3f:ff:cb:ef:0b:8a:63:e7:1c:b0:4e:
                    4e:bb:6d:f9:5a:8c:38:da:98:71:91:ee:3d:a0:70:
                    a0:15:f6:03:7d:84:2f:2d:06:54:07:c7:92:eb:e8:
                    b8:45:6b:7b:df:bb:45:72:ec:f6:2a:75:9f:27:9d:
                    5e:e8:5b:f9:ee:ce:3d:67:7e:3f:88:9e:6a:cc:58:
                    b5:fd:78:70:77:70:ee:dd:1b:4c:2f:60:a5:91:1c:
                    f3:bf:30:65:7d:7a:21:33:a8:5a:a7:26:53:57:db:
                    2c:6f:43:6e:9c:17:03:59:f4:37:61:c6:4a:d8:42:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B0:E8:BA:C8:DE:3D:DA:12:01:18:9D:61:E1:A7:D2:59:74:35:77
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS142206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:5b:0e:31:23:26:da:0c:a8:c7:01:75:28:86:24:0d:09:
         ac:4e:9b:cc:cf:0e:70:fd:45:af:bb:d4:25:6a:f2:7f:b1:a7:
         54:e9:63:51:93:48:e1:21:7f:2c:1f:2d:cd:e6:86:a0:d0:6a:
         4f:58:e7:1a:db:23:e8:d2:21:3f:80:67:dc:02:d8:21:44:54:
         3c:58:62:41:8d:14:36:0b:5a:43:c5:bd:09:84:2f:f0:d5:c0:
         cb:84:e4:ac:4c:de:da:ab:fc:1e:19:48:f1:10:2a:27:07:dd:
         ec:27:12:ae:42:d8:67:b5:6d:f6:4f:d0:07:33:32:0a:bf:bf:
         a0:08:c3:52:73:52:a5:3e:af:ef:0b:49:3f:b4:e4:f4:ba:e2:
         b4:66:f4:2d:7b:f3:2b:ce:19:d0:17:3e:1d:16:62:d1:34:4a:
         02:e1:5e:d9:d8:0c:f2:2c:f3:8b:ca:c8:79:64:2a:99:43:e7:
         92:7c:47:8c:d4:0c:44:8a:0d:a4:10:c7:57:4d:eb:b9:75:55:
         24:38:13:05:03:5b:e0:1c:b4:84:d8:95:c2:3d:bd:22:84:20:
         0b:c3:f6:39:2c:40:87:06:62:e4:bf:4f:92:f1:92:f7:7a:a7:
         6a:30:e3:2e:4c:36:03:d7:0e:a8:d6:73:5c:ec:ad:5d:a5:37:
         5a:f6:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:39:05 2026 by rpki-client