This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa
File:                     AS136103.roa (raw, json)
Hash identifier:          2emQhflDdMC0P6z720/NdsIz2Awmsy9mrvwGo8PppZU=
Subject key identifier:   AF:AF:0F:BF:8E:65:3E:1C:EE:31:FC:36:07:F0:13:39:7D:AC:D2:C6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5447369079B8EA69843939CFDD0D1CC01D63AACB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa
Signing time:             Tue 11 Nov 2025 06:00:19 +0000
ROA not before:           Tue 11 Nov 2025 05:55:19 +0000
ROA not after:            Tue 10 Nov 2026 06:00:19 +0000
asID:                     136103
IP address blocks:        103.90.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:47:36:90:79:b8:ea:69:84:39:39:cf:dd:0d:1c:c0:1d:63:aa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:19 2025 GMT
            Not After : Nov 10 06:00:19 2026 GMT
        Subject: CN=AFAF0FBF8E653E1CEE31FC3607F013397DACD2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:01:ac:8b:4d:77:f3:ae:bc:f8:d7:71:0b:
                    3f:9a:43:aa:15:1e:c7:bc:9a:e3:4c:3d:8e:db:52:
                    d6:7a:d7:e6:cb:15:d1:58:91:b1:2b:ae:48:e8:55:
                    4e:9d:3a:63:b9:ce:02:d7:e6:f2:67:b2:ec:00:e8:
                    46:93:87:81:93:2b:33:e0:73:a9:39:0f:73:44:c6:
                    e7:c0:8f:ad:16:08:4e:e2:73:c1:71:06:3f:36:80:
                    a8:89:ba:8c:1e:9d:21:c1:48:6e:bd:44:bb:34:57:
                    0a:58:a0:c0:4e:e2:ec:86:3b:a3:cd:cb:f2:71:cc:
                    d8:8e:07:ac:7f:e1:14:90:87:b7:8d:14:af:99:82:
                    b2:c0:11:ac:2e:90:29:7e:80:ec:f9:08:85:d5:bf:
                    48:f8:69:fa:67:ea:81:bd:71:a0:8f:84:99:74:2d:
                    d1:9a:26:52:1a:44:77:c8:d7:37:d3:31:94:54:dc:
                    9d:02:46:8c:9b:eb:6f:7d:c4:da:e9:bb:61:36:51:
                    02:5e:92:5c:e5:85:fe:b7:56:1e:05:1f:a5:e1:ff:
                    a4:23:b8:30:98:d8:1d:34:0e:16:0e:00:8a:dd:8b:
                    21:4e:37:66:f7:6f:45:d8:a2:26:c4:c6:82:54:e5:
                    ca:a7:62:44:fc:31:1f:31:79:dd:8f:d0:e8:91:3d:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AF:0F:BF:8E:65:3E:1C:EE:31:FC:36:07:F0:13:39:7D:AC:D2:C6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS136103.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f7:e6:10:80:02:15:6c:b4:c8:ce:09:48:e8:2c:50:af:29:
         bb:36:12:6f:08:48:39:e8:58:c9:9c:41:28:d2:17:dd:c9:14:
         7a:51:ab:5c:80:38:7e:2b:d4:eb:26:22:d8:66:eb:6a:2f:71:
         de:25:ba:3c:41:75:e0:08:5a:22:08:6b:ec:f6:fd:40:66:b5:
         70:57:6f:9c:87:0a:60:92:8e:30:2c:e6:ce:f5:ba:f7:5d:e6:
         c7:49:84:20:f0:9f:a9:88:60:36:b9:22:59:23:9c:7d:6a:6d:
         0f:90:ce:4e:ff:43:4c:c9:eb:be:ca:b9:a2:a2:7e:44:e7:94:
         c3:4f:ec:39:c7:be:a5:77:55:3b:6e:b5:0b:cf:be:25:9f:a7:
         14:c2:95:96:04:ac:19:51:80:0a:ed:30:52:8e:ea:a8:4b:62:
         af:f6:d5:ab:dc:b9:e6:a4:66:97:bf:13:61:27:f3:f1:04:66:
         7f:7b:cc:ad:7a:19:4e:c9:5c:95:da:c2:46:c8:40:4f:5d:a1:
         a6:66:d9:95:5f:c7:5b:ad:6e:82:c4:19:bd:ce:44:5a:e8:59:
         d8:57:70:fc:4a:21:44:14:26:cc:de:88:06:ac:a7:18:53:7b:
         27:38:de:e8:3e:fb:21:d3:e1:5e:af:da:12:d3:d2:f0:73:42:
         61:65:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:29 2025 by rpki-client