This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa
File:                     AS142206.roa (raw, json)
Hash identifier:          cHShuE4nDoiR6JzrEk1+MK/Iz8StgztRQKOezL3kdHs=
Subject key identifier:   49:39:5F:CE:8E:69:D2:3F:4C:95:4E:2A:98:29:4A:8B:C5:D6:46:C7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0D6E379CD4789BC619620E261A23703B833B5A71
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa
Signing time:             Fri 23 Jan 2026 01:13:26 +0000
ROA not before:           Fri 23 Jan 2026 01:08:26 +0000
ROA not after:            Fri 22 Jan 2027 01:13:26 +0000
asID:                     142206
IP address blocks:        2001:df6:8c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6e:37:9c:d4:78:9b:c6:19:62:0e:26:1a:23:70:3b:83:3b:5a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 23 01:08:26 2026 GMT
            Not After : Jan 22 01:13:26 2027 GMT
        Subject: CN=49395FCE8E69D23F4C954E2A98294A8BC5D646C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:9a:55:61:bb:74:e8:10:0a:cd:de:82:bf:
                    1f:28:68:58:f9:de:5d:4e:78:84:9b:98:48:0a:f5:
                    5c:4f:e4:b5:09:8b:31:1c:04:1f:ae:33:62:93:e0:
                    22:8e:6a:e2:98:44:03:90:b0:d4:32:c6:8d:a1:99:
                    fb:d2:3f:fc:da:6d:6b:5c:40:16:36:b2:1e:de:9d:
                    b4:e7:97:a1:16:a1:9e:c0:66:53:86:19:20:1b:09:
                    91:00:ae:cc:31:60:d6:c3:7e:74:4c:6c:47:87:ad:
                    89:7b:7c:b4:02:02:64:f9:a6:8f:08:ee:f8:80:d5:
                    06:a7:27:77:1f:72:82:ca:d5:80:63:43:ad:10:29:
                    a7:35:51:70:15:ea:d4:58:ff:64:95:f5:03:ea:c2:
                    d8:51:51:25:a7:f8:75:f3:5d:c5:e8:a2:b0:73:35:
                    36:eb:97:d4:88:50:61:02:8c:56:53:18:7f:28:ea:
                    3f:ad:4a:65:00:a5:8e:09:60:74:89:93:db:89:25:
                    f2:4e:d1:ae:5d:47:2b:61:dd:fe:34:eb:8e:fc:34:
                    38:6e:1e:8e:67:33:10:35:e4:2a:ea:65:0a:93:87:
                    94:f3:9c:7e:3f:5a:cb:87:d6:d4:9b:66:df:99:47:
                    e4:f7:43:c2:08:67:82:8b:79:44:79:db:da:f1:50:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:39:5F:CE:8E:69:D2:3F:4C:95:4E:2A:98:29:4A:8B:C5:D6:46:C7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:40:de:57:db:67:04:5f:11:58:38:3a:10:b6:c4:a9:e5:
         1b:a4:be:88:c0:06:1b:a7:d7:d0:86:4d:17:b3:6e:b9:15:2b:
         63:8b:f6:e1:1e:ab:31:05:3c:2b:4a:0a:c5:b1:44:cd:a1:a0:
         94:aa:15:bd:3e:0c:04:b2:a7:21:bc:fd:d0:64:c3:24:54:10:
         d1:43:b4:e1:b2:7d:20:88:3c:48:84:dc:22:4b:cc:c2:bd:38:
         dc:c2:23:db:85:30:6e:97:0b:76:c3:80:b6:e3:ee:50:fb:89:
         e9:15:8e:da:64:6d:a3:f3:f5:d6:fa:bd:f8:31:63:10:df:36:
         b6:0c:ac:49:a9:e9:e1:ff:ad:87:61:85:5c:83:e3:2e:1c:e5:
         88:9b:6b:20:1f:54:b0:85:bd:3f:a8:f3:e9:56:7b:c9:75:ce:
         52:67:66:64:d3:56:0f:ff:b7:3f:3b:75:0f:ea:a3:1c:f3:e1:
         3b:e0:72:94:15:26:b0:c9:80:35:80:1f:95:a1:19:74:27:c1:
         cd:f9:46:e8:4a:db:8c:e4:84:e4:a1:73:6d:e6:97:20:5c:16:
         b9:14:8a:42:b9:24:b6:6a:e8:a4:62:7b:51:b6:68:74:3f:56:
         2f:05:9f:5e:e5:5c:26:c7:f5:e4:43:bd:1e:1b:3d:b8:00:23:
         a5:76:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:53 2026 by rpki-client