This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141654.roa
File:                     AS141654.roa (raw, json)
Hash identifier:          eJPKUSb8+CBSujHHQtUJlamgB1heyM64HsLNIZLV/KI=
Subject key identifier:   BB:F5:A6:A6:F0:ED:C9:40:33:BD:64:90:06:F7:C2:6A:0F:A8:B7:A9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6CE92FC34296DBCF2F50F912511E47A6A1530401
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141654.roa
Signing time:             Tue 11 Nov 2025 06:00:08 +0000
ROA not before:           Tue 11 Nov 2025 05:55:08 +0000
ROA not after:            Tue 10 Nov 2026 06:00:08 +0000
asID:                     141654
IP address blocks:        103.162.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e9:2f:c3:42:96:db:cf:2f:50:f9:12:51:1e:47:a6:a1:53:04:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:08 2025 GMT
            Not After : Nov 10 06:00:08 2026 GMT
        Subject: CN=BBF5A6A6F0EDC94033BD649006F7C26A0FA8B7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:ad:a6:92:b6:cc:c1:82:12:56:67:80:b4:
                    fc:1a:25:1c:67:46:92:f8:8b:9b:17:67:fe:06:53:
                    83:53:45:95:66:ae:7f:44:13:0a:57:40:42:4a:88:
                    b7:d9:ab:28:02:87:90:78:b4:0b:38:d8:01:5a:97:
                    9d:3c:2d:f6:6b:2c:a7:15:75:48:9e:91:62:43:23:
                    c8:06:b5:f8:64:67:63:6c:e7:10:c3:53:e9:7e:8e:
                    13:1e:58:0c:f1:bd:62:99:ae:3e:77:78:f9:98:52:
                    d7:83:36:8c:d1:c7:86:69:22:b0:2f:b6:34:09:a0:
                    aa:82:44:31:8d:3a:a0:96:28:c4:17:ff:5a:21:2f:
                    2d:e5:39:d5:2c:4d:1e:c9:fd:79:d6:0f:21:67:c0:
                    81:e0:73:49:16:2d:b5:92:6c:fa:f1:7c:b5:e0:cd:
                    a0:30:cd:12:2e:f9:62:12:92:50:9e:4a:b2:e1:c0:
                    dc:c3:f5:6d:3b:46:1f:5a:dc:ed:f9:ef:5e:58:2d:
                    ed:06:2f:7c:db:ad:20:32:ca:31:96:0f:33:2f:07:
                    02:bd:b3:5c:4f:9f:1a:3b:1a:9b:56:46:17:2d:b7:
                    6f:32:ec:dd:db:01:21:fc:12:47:9c:f3:04:23:ae:
                    e4:55:a3:38:2c:74:74:b0:d7:c8:7b:40:6b:f9:f6:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:A6:A6:F0:ED:C9:40:33:BD:64:90:06:F7:C2:6A:0F:A8:B7:A9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141654.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:cd:56:77:0a:35:bc:e5:90:f1:f5:15:93:14:6a:c2:1a:
         7d:e4:55:f3:4c:c7:8e:13:44:76:20:44:93:37:d6:ac:64:6a:
         92:dc:76:47:fe:00:73:0f:c8:dc:ed:22:39:f1:29:ba:48:2d:
         81:2c:9e:30:b1:4d:6a:55:aa:c9:0b:da:68:be:13:4c:01:89:
         be:c1:42:34:b4:61:f4:04:7e:8a:d3:95:01:6c:f6:2f:24:b9:
         e5:4b:1d:eb:c7:86:9b:6f:0c:14:8a:6c:41:48:9b:33:09:1d:
         5b:2a:8a:a4:82:0f:d9:ca:60:ce:8b:16:26:08:3b:09:75:08:
         c8:76:5d:53:fe:3a:cf:cd:26:89:12:3f:86:5d:ac:dd:2b:bc:
         5e:09:4a:3b:73:ea:40:76:1a:30:98:91:37:89:80:f2:af:20:
         93:35:89:a2:c4:27:a8:a9:44:fc:b8:ec:cd:75:e8:79:af:b9:
         28:6e:b6:c8:37:c0:78:51:38:8f:e0:ca:b3:fb:a3:37:f8:ac:
         25:25:17:8f:27:d4:09:36:95:5b:c5:04:99:e7:bf:3d:ae:fd:
         92:04:61:7f:88:69:95:dd:6d:3c:ef:f4:43:7b:57:3f:13:35:
         da:83:50:e1:83:5a:d7:2d:ce:10:ac:64:3f:71:2a:91:d0:22:
         b0:99:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:54:07 2025 by rpki-client