This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa
File:                     AS141929.roa (raw, json)
Hash identifier:          vWZdLtbwiBGaToiqd33+2N/kEJbkI8/tnN6QwahgU8M=
Subject key identifier:   4D:7D:E7:C5:C6:0D:E4:34:57:C2:8C:F2:39:E1:C8:11:97:07:10:99
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       694AF7D459E4C704CAFE16EAD0CDAB41790BE766
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa
Signing time:             Tue 11 Nov 2025 06:00:04 +0000
ROA not before:           Tue 11 Nov 2025 05:55:04 +0000
ROA not after:            Tue 10 Nov 2026 06:00:04 +0000
asID:                     141929
IP address blocks:        103.166.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4a:f7:d4:59:e4:c7:04:ca:fe:16:ea:d0:cd:ab:41:79:0b:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:04 2025 GMT
            Not After : Nov 10 06:00:04 2026 GMT
        Subject: CN=4D7DE7C5C60DE43457C28CF239E1C81197071099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d7:29:e9:2f:0d:e8:b4:ec:54:bf:25:9c:39:
                    9e:b9:f5:17:21:d9:79:f3:99:00:66:60:a5:d3:4b:
                    03:e3:d6:6e:d4:ca:30:66:ee:36:72:a5:99:49:16:
                    34:d5:5a:84:08:cc:4c:bc:6b:fd:4d:80:97:cc:2f:
                    d8:0f:c3:68:81:fc:f4:85:a2:92:7a:6e:5e:dd:80:
                    1a:2d:eb:44:0b:1e:da:db:9d:54:0f:1e:5e:b6:2d:
                    8c:a9:29:6c:ee:97:2c:58:c5:3f:d6:72:9e:fc:f5:
                    ec:db:7b:36:67:74:a1:16:76:2a:9d:ea:96:b6:59:
                    e9:e2:72:53:9a:ae:cd:d7:e3:b5:13:42:b1:12:05:
                    da:98:88:aa:5d:ec:26:0c:44:80:ba:7c:f2:d6:56:
                    e2:9a:8c:e0:11:c6:00:fd:04:40:d7:dc:30:92:56:
                    35:e3:b5:5e:a2:a0:2c:3f:db:4c:c6:64:f9:31:67:
                    19:15:f3:2a:fc:fa:ef:85:a4:14:88:4b:59:1a:2f:
                    bb:eb:3b:e4:18:c0:2c:4a:06:19:bf:0d:10:0d:0e:
                    23:8f:d6:37:0f:69:b2:83:c0:15:2b:a6:fa:0e:9c:
                    8b:94:c5:69:36:16:47:10:82:22:54:b1:20:f7:6e:
                    a6:03:79:de:b6:f5:af:ab:7b:3b:58:35:31:cf:fc:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7D:E7:C5:C6:0D:E4:34:57:C2:8C:F2:39:E1:C8:11:97:07:10:99
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS141929.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:09:6f:95:50:0c:f3:7e:4d:ba:73:cc:7b:3d:fa:26:6b:b7:
         c8:5b:c8:ed:e8:c6:69:f1:74:db:b8:bf:b9:a0:72:96:8c:38:
         9d:9f:de:ad:c4:16:31:33:5b:57:e9:cc:6b:77:f2:d6:18:c4:
         93:c3:a6:b1:da:09:24:cd:96:3c:11:cb:d6:7d:64:9d:75:d7:
         bc:5c:4f:1a:14:8e:19:92:a2:a0:28:a4:ec:31:fa:b9:76:99:
         c7:41:ec:10:54:8b:e4:ec:11:2d:0c:9d:79:84:79:6c:bc:f3:
         26:8d:09:b9:1e:c0:9b:62:cf:e0:69:fa:8c:33:18:a7:d1:21:
         8e:f9:a3:e8:76:54:ec:5a:ff:5c:43:5a:72:c7:f9:27:4b:45:
         27:f9:ef:65:d1:8f:d1:3b:d1:93:67:2a:75:32:3e:ae:6c:b5:
         c7:00:ee:75:fa:1b:d3:8f:63:3c:46:a6:c3:e0:c3:fd:85:ca:
         0c:69:62:92:61:e0:78:22:0b:7c:12:48:4e:79:ba:30:16:4c:
         8e:70:db:40:27:bf:f4:6d:80:fe:a9:30:e1:c7:eb:bc:d2:f7:
         64:5b:21:61:cb:5f:1e:1f:b5:d0:6c:11:ff:0f:ad:80:88:e0:
         0c:46:43:02:1e:6a:37:8f:be:34:3c:8e:6f:31:59:6d:32:5e:
         6c:4c:02:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:50:53 2025 by rpki-client