This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa
File:                     AS154444.roa (raw, json)
Hash identifier:          7hRg9gzdL/gCU3E185YG7rH78G6gqgG/7Nd4AspA+BU=
Subject key identifier:   4C:75:F0:82:23:A7:0D:62:E0:86:0B:A3:FC:00:FC:29:B8:8C:24:DA
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       5493F5460534B6A089BBB31747F0225ED01EFBB9
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa
Signing time:             Wed 17 Dec 2025 01:15:16 +0000
ROA not before:           Wed 17 Dec 2025 01:10:16 +0000
ROA not after:            Wed 16 Dec 2026 01:15:16 +0000
asID:                     154444
IP address blocks:        144.79.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 09:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:93:f5:46:05:34:b6:a0:89:bb:b3:17:47:f0:22:5e:d0:1e:fb:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Dec 17 01:10:16 2025 GMT
            Not After : Dec 16 01:15:16 2026 GMT
        Subject: CN=4C75F08223A70D62E0860BA3FC00FC29B88C24DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9c:ef:61:2a:da:ee:f6:6e:84:ed:63:f1:71:
                    ce:ee:8a:4c:34:28:bc:0f:e6:f8:7c:04:4a:34:31:
                    20:1a:7e:68:42:f7:69:fc:e9:5d:e8:d9:b2:26:6d:
                    32:0d:ab:3e:0e:74:03:15:41:6d:af:c7:69:ce:b2:
                    2b:cd:6d:7f:16:f9:00:e1:85:f6:98:03:e6:6e:ff:
                    c7:3a:d0:6b:28:78:e3:b6:08:44:83:87:49:83:e8:
                    1e:9e:b3:ef:56:b1:84:10:6e:4f:02:20:3a:62:33:
                    91:49:03:f7:40:fb:ca:a8:8e:a7:5e:e7:6a:67:24:
                    5b:3b:05:36:2d:2a:d3:d0:cb:85:58:0b:75:8b:95:
                    e9:86:c0:e7:aa:40:fa:43:0c:13:74:a8:00:b7:05:
                    b9:55:18:f5:07:29:9f:9f:62:3e:c4:44:c3:4a:ef:
                    ae:45:b9:e1:50:44:80:fe:96:3f:52:f0:9e:c2:c7:
                    ab:8f:de:2e:73:c3:ef:de:f2:c7:64:f5:1c:8a:09:
                    92:0a:d1:a6:e5:1c:39:4d:10:34:35:e9:99:71:bf:
                    3c:3b:71:41:75:b7:1f:e8:3e:2f:34:d7:db:89:1c:
                    44:66:78:57:1b:78:10:65:91:14:ae:f0:40:f9:67:
                    0e:a7:6d:80:0b:f4:88:d8:4c:26:f3:67:b0:e6:a7:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:F0:82:23:A7:0D:62:E0:86:0B:A3:FC:00:FC:29:B8:8C:24:DA
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AS154444.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:4e:70:10:53:ae:03:df:d5:1c:1e:b9:fd:5b:61:4b:59:
         3f:d1:f4:8f:f6:09:c0:82:b2:c7:3e:f8:8b:95:84:1d:e7:87:
         3b:fe:cd:48:d3:d6:40:87:c4:79:35:91:a5:62:f6:f4:f9:bf:
         c4:84:8b:b4:70:fb:06:0c:8d:0b:0f:66:ae:4e:a7:3d:e0:0f:
         41:77:9f:22:50:99:2c:3e:6b:8a:11:c8:71:50:b3:77:df:17:
         0d:fb:22:ec:4a:10:e6:d5:1a:24:65:69:73:87:e6:aa:95:8e:
         14:ef:88:18:58:7c:33:6b:90:97:5f:d9:4d:15:21:ce:18:3f:
         f7:9b:18:0c:b9:49:09:d1:08:12:28:ce:8d:31:42:14:18:77:
         6c:0e:90:ed:e9:a1:da:37:9f:ad:00:46:dd:85:a4:17:03:8b:
         22:58:e0:5f:21:46:d6:47:2b:9f:7b:af:18:eb:81:05:b4:cc:
         c5:e1:25:c0:f0:5c:23:6e:25:af:70:cd:e4:84:ed:a9:a5:aa:
         dc:51:25:ee:d6:c5:0b:e8:14:b2:e3:fb:ca:db:28:04:1f:4f:
         9a:18:8f:19:75:0f:34:3c:56:45:51:78:7d:f3:98:de:79:a2:
         8f:e3:8b:ee:26:13:f0:06:5d:bd:33:69:b3:03:12:b4:46:c6:
         10:7a:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:07:27 2025 by rpki-client