This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135481.roa
File:                     AS135481.roa (raw, json)
Hash identifier:          t0VDl8Z9etBfCcmKkc67gYSRqquJXiitGS1wxNtx0WY=
Subject key identifier:   2A:7D:FF:91:15:8E:2D:D9:9C:4C:F4:01:43:E7:8F:D0:B1:AD:17:B6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1D7F1AB63883098E91DC3AF88F6361C757C991F1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135481.roa
Signing time:             Tue 06 Jan 2026 04:09:49 +0000
ROA not before:           Tue 06 Jan 2026 04:04:49 +0000
ROA not after:            Tue 05 Jan 2027 04:09:49 +0000
asID:                     135481
IP address blocks:        103.31.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7f:1a:b6:38:83:09:8e:91:dc:3a:f8:8f:63:61:c7:57:c9:91:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  6 04:04:49 2026 GMT
            Not After : Jan  5 04:09:49 2027 GMT
        Subject: CN=2A7DFF91158E2DD99C4CF40143E78FD0B1AD17B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:47:15:59:bb:ed:75:f4:e3:57:c7:b3:a0:
                    4d:96:9c:5b:22:aa:73:3d:43:2a:f6:95:9a:2c:4b:
                    b1:59:2f:d8:10:82:6a:7d:f4:40:b6:8b:c3:ac:19:
                    34:1d:6f:ca:56:d8:b1:a4:4a:3b:55:3e:d2:4c:6b:
                    ab:1a:91:7b:e4:cf:06:b8:6d:31:a2:7b:4b:7f:a7:
                    92:0b:c2:f1:68:19:4f:0e:45:76:56:f9:19:d0:b4:
                    c5:a0:e2:d8:23:2d:21:18:b5:9e:6d:43:1f:b4:d0:
                    5b:16:5d:99:ce:a9:b4:73:fd:63:64:e6:a3:ad:9c:
                    8e:56:49:67:89:48:2b:63:41:b5:67:ae:5f:93:1d:
                    50:e1:cb:bf:92:da:70:4b:7a:a4:1f:37:8b:d9:4c:
                    96:4e:ca:93:40:48:8c:4c:84:64:22:c7:db:0f:3e:
                    a7:ba:20:d9:71:7e:71:59:af:b0:a7:e9:7b:a7:dc:
                    1c:e2:62:6a:1b:4d:fd:50:51:f9:c0:70:36:ce:3e:
                    54:37:0a:9c:c6:55:5c:53:36:69:97:7e:62:e6:36:
                    df:b4:ad:0e:70:ab:12:5a:0b:b0:40:94:35:32:25:
                    76:35:ab:41:4a:9c:5f:73:0e:1c:b6:32:58:1e:88:
                    9d:31:97:ed:61:b9:d8:87:a3:c2:88:31:c7:7f:04:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7D:FF:91:15:8E:2D:D9:9C:4C:F4:01:43:E7:8F:D0:B1:AD:17:B6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:31:c2:c8:60:dd:78:03:ad:db:12:74:66:9d:64:8b:0c:e4:
         18:44:60:10:5f:cf:c4:0f:3b:5b:53:3e:43:94:e9:93:61:c1:
         83:14:db:14:2c:40:41:ec:ca:aa:b1:0f:13:13:24:ac:18:31:
         09:b8:9c:6a:3e:fd:af:0a:1d:5f:86:23:2e:86:6b:71:92:6d:
         05:b1:2b:23:f2:55:78:42:c5:a1:4d:00:7f:b2:39:22:b4:8b:
         93:c7:36:75:d6:b8:b2:77:0b:ea:54:25:3b:2c:c0:f7:29:17:
         a0:78:b0:07:a3:6f:05:32:1d:60:b0:b0:fe:c9:b7:17:56:4d:
         99:c5:7c:f4:40:38:46:38:68:51:76:9f:68:c7:69:bc:80:de:
         1f:a0:c7:a5:a3:55:ef:fa:f5:1c:9f:83:59:84:52:2b:1e:fc:
         eb:00:51:da:87:94:4f:2d:71:48:3a:47:71:1b:d6:98:8f:5f:
         84:8f:3e:3f:19:58:96:d1:00:f5:27:ba:fa:59:8f:60:be:ab:
         9b:b1:ff:24:6c:b2:df:96:63:7b:68:3c:5a:02:7f:af:c8:b4:
         26:7b:85:c7:df:07:d1:77:b9:bf:3e:6f:94:d7:a7:72:b0:ab:
         d4:3d:ff:d1:f1:25:7a:a3:cb:06:69:9b:c9:4f:5a:44:c0:8e:
         dd:16:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:55 2026 by rpki-client