This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131784.roa
File:                     AS131784.roa (raw, json)
Hash identifier:          eRa7hGFsDcxhore8uG7I1pfIbK9VSRHabqvVLRnTIrI=
Subject key identifier:   1D:05:96:97:BB:71:2A:3F:CD:7A:1F:59:09:B5:EF:D2:80:97:60:57
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12F0F53F0FB0563E96539FF0119DDCD9F458834E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131784.roa
Signing time:             Tue 11 Nov 2025 06:00:00 +0000
ROA not before:           Tue 11 Nov 2025 05:55:00 +0000
ROA not after:            Tue 10 Nov 2026 06:00:00 +0000
asID:                     131784
IP address blocks:        103.17.164.0/24 maxlen: 24
                          2001:df4:7100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:f5:3f:0f:b0:56:3e:96:53:9f:f0:11:9d:dc:d9:f4:58:83:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:00 2025 GMT
            Not After : Nov 10 06:00:00 2026 GMT
        Subject: CN=1D059697BB712A3FCD7A1F5909B5EFD280976057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:92:c6:89:a9:ac:9b:94:4e:56:97:e2:97:
                    95:0f:b9:bf:f0:d1:d1:fa:63:64:34:2b:eb:71:c9:
                    7b:95:4d:bd:4a:94:7e:8c:89:25:b2:1a:a7:31:14:
                    cf:40:21:42:af:fc:fc:d3:b0:30:82:a5:64:9f:1f:
                    ab:d4:4f:7e:6d:7a:1b:37:2f:5d:69:56:7a:d8:cd:
                    48:d9:11:00:19:f0:6f:6e:e8:cf:23:f1:50:c4:2a:
                    5f:9c:9e:82:d1:d8:c0:0e:94:03:89:c3:7d:8b:dd:
                    03:16:4e:f9:ab:b1:07:42:1d:27:06:45:2c:41:75:
                    4d:b6:4f:cf:2f:27:84:6c:06:b4:1d:54:05:e5:46:
                    a9:9e:dc:2a:2f:b5:6a:b0:b6:53:cb:04:9b:b8:6d:
                    c5:8c:90:1f:61:7e:6e:90:40:2e:d0:bf:e9:d5:6f:
                    9f:44:72:f1:68:45:c1:43:7e:94:7b:d3:6c:fc:fd:
                    b3:29:45:eb:3d:80:0f:73:98:8d:4c:f6:48:7b:bd:
                    f8:02:bd:7a:a1:b0:d7:e5:0d:07:dd:0e:09:d2:48:
                    b6:56:d0:d9:4d:7c:c8:e2:b5:03:2a:4e:60:bd:a7:
                    96:97:5b:89:2e:49:a0:fc:1d:d3:93:19:b3:df:8a:
                    7f:c4:8f:c5:e9:5b:7e:88:dd:ec:41:18:b2:53:bd:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:05:96:97:BB:71:2A:3F:CD:7A:1F:59:09:B5:EF:D2:80:97:60:57
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131784.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.164.0/24
                IPv6:
                  2001:df4:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:0a:2c:76:47:aa:a6:de:fb:92:bb:c6:00:5c:08:bb:28:
         bd:76:99:d9:6d:5c:b2:60:78:ec:7e:72:fe:0a:49:ee:9d:e1:
         04:0d:b2:4f:d3:7b:8a:24:2f:17:45:92:4b:00:61:61:81:49:
         20:eb:7f:cd:9e:9a:4f:55:9b:45:07:6e:25:30:9e:79:0c:cd:
         8a:0b:f8:aa:74:92:47:1d:2d:ad:db:6a:26:e9:24:c4:f7:5d:
         ea:4b:13:29:31:fe:3e:8e:13:70:51:98:47:1e:18:8d:8d:ed:
         4e:f8:71:28:0f:c7:3a:59:96:be:b4:93:26:ae:1a:59:c2:55:
         2c:a5:23:d2:e6:22:6d:02:6b:67:c2:f1:5f:34:a9:7c:f5:e7:
         da:64:39:e7:5c:9a:01:e6:a3:c7:3a:e4:ce:83:a2:52:33:be:
         94:3b:86:e8:25:1f:3e:ec:63:e1:7a:14:1c:37:59:e6:f6:ec:
         8d:53:22:0e:85:9a:5b:44:65:cb:78:33:25:fc:a4:b8:76:9a:
         c2:bb:71:9c:94:22:2e:b6:b3:81:de:bc:09:bb:fd:d9:b7:d7:
         e5:8a:f8:08:f8:e8:9d:a8:40:51:ab:2e:5c:fc:59:4e:5d:f9:
         e0:bc:ac:35:9a:8b:8e:ea:a1:4f:5e:9a:ad:47:66:08:67:8a:
         12:c1:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:40 2025 by rpki-client