This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa
File:                     AS141919.roa (raw, json)
Hash identifier:          6XzrLIKbxi0odku4nB3NYCr14UJZGQdo5IgJgyTcGqA=
Subject key identifier:   E3:77:69:69:F9:B7:CD:BC:4B:95:A7:DE:37:EE:3B:61:45:93:06:03
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2DEBEC5EABAEBC7431391DDAF3DAC2D4844FD719
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa
Signing time:             Tue 11 Nov 2025 06:00:21 +0000
ROA not before:           Tue 11 Nov 2025 05:55:21 +0000
ROA not after:            Tue 10 Nov 2026 06:00:21 +0000
asID:                     141919
IP address blocks:        103.165.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:eb:ec:5e:ab:ae:bc:74:31:39:1d:da:f3:da:c2:d4:84:4f:d7:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:21 2025 GMT
            Not After : Nov 10 06:00:21 2026 GMT
        Subject: CN=E3776969F9B7CDBC4B95A7DE37EE3B6145930603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:57:f1:39:42:16:5a:4d:cd:41:d7:b6:df:
                    2c:8f:b3:27:5e:83:0f:a3:75:17:f9:6a:d5:83:46:
                    fe:2f:5f:26:b2:88:72:a0:92:77:35:f7:56:0f:20:
                    9e:d5:2a:9e:3c:14:49:9a:39:29:b9:fd:99:e0:a1:
                    bb:74:69:c6:2d:18:14:65:5f:01:a3:cc:1f:bc:4c:
                    da:3e:8e:65:d0:3d:61:a8:e6:0b:11:f9:2e:2e:4e:
                    9e:55:d9:c8:14:e0:90:97:4a:74:63:84:0f:2c:e0:
                    52:1b:f0:1b:a7:16:05:9b:90:4e:f4:59:d6:df:a3:
                    f4:e3:50:03:8a:93:33:d1:04:03:d8:5a:d1:63:61:
                    11:07:a6:49:2e:40:3c:11:23:51:d3:68:71:04:3d:
                    a8:eb:40:60:0f:8a:67:30:e8:44:12:3c:55:9e:5e:
                    e6:8f:58:bb:fb:6f:87:2e:6f:d2:97:d4:85:13:e8:
                    be:b7:e6:ee:89:21:a0:02:3d:39:f5:8d:18:e2:f0:
                    24:f9:a9:61:d3:9f:d3:9c:9a:e8:16:0e:19:d1:8d:
                    c9:f4:f6:33:56:78:bd:bf:16:41:da:39:8d:c5:49:
                    dc:75:f2:a2:1c:4d:36:a5:fe:95:9b:99:91:8b:32:
                    73:c0:c3:17:ca:61:cf:3c:0e:90:86:ca:c7:33:37:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:77:69:69:F9:B7:CD:BC:4B:95:A7:DE:37:EE:3B:61:45:93:06:03
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141919.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:25:1f:94:20:a2:3c:37:0b:22:05:14:91:55:cd:93:d2:
         10:c0:4e:69:a5:af:87:81:b4:e1:f3:75:4f:85:13:c4:da:c7:
         bc:3e:8f:bc:26:24:a3:89:e0:59:34:a5:f4:65:33:cf:f6:2a:
         f5:86:bf:ea:07:ed:0d:d1:61:84:8c:ca:79:fb:5a:98:d0:04:
         06:00:04:0c:9a:b0:ba:1c:1a:4e:6c:99:66:9e:3f:5c:16:ff:
         af:6c:82:c2:63:b8:09:c0:e7:1f:8b:5c:e5:7d:3e:cc:ab:5e:
         ac:ba:38:7d:3c:03:91:6f:0b:a6:af:9d:4a:bd:1c:d7:07:93:
         58:2c:3f:79:61:e5:75:01:6c:39:59:7b:53:63:c0:ab:7a:f5:
         6f:37:ce:a6:09:99:96:56:5c:82:8f:d6:6b:35:85:db:c8:22:
         db:ff:a7:7e:86:24:a5:79:1c:54:75:a9:28:a5:50:95:66:e2:
         a4:57:c6:73:88:b2:2d:1b:24:e9:94:82:c9:d4:b3:b3:f3:61:
         9e:9c:dd:71:8f:22:bb:2a:2e:df:f4:c5:67:1b:3f:33:bd:39:
         2d:d1:8e:fd:f8:0a:db:2c:35:32:10:76:24:fb:cc:22:5b:8b:
         28:52:e2:99:ac:c1:04:bf:ca:75:40:23:24:f7:99:a3:c1:2a:
         7d:bf:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:58:56 2025 by rpki-client