This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa
File:                     AS142330.roa (raw, json)
Hash identifier:          lcJtzlU5t3B/hFSY8+EJY9IFm/w1Uaqdy844M2e6wBk=
Subject key identifier:   51:5E:F1:49:59:5D:AE:0D:D9:73:84:BF:39:88:D5:77:84:76:F3:AB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       481C2284394121F491A6974D235C19CB7774A058
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa
Signing time:             Tue 11 Nov 2025 06:00:24 +0000
ROA not before:           Tue 11 Nov 2025 05:55:24 +0000
ROA not after:            Tue 10 Nov 2026 06:00:24 +0000
asID:                     142330
IP address blocks:        103.168.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1c:22:84:39:41:21:f4:91:a6:97:4d:23:5c:19:cb:77:74:a0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:24 2025 GMT
            Not After : Nov 10 06:00:24 2026 GMT
        Subject: CN=515EF149595DAE0DD97384BF3988D5778476F3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:c4:9f:01:c7:ab:f3:76:26:93:c4:23:66:
                    49:37:25:6c:33:f1:81:62:d5:ad:53:3e:a4:97:80:
                    d3:8e:ea:99:08:76:d0:74:80:cc:51:6f:fa:a1:9e:
                    59:3d:05:b5:bc:c8:9c:6e:06:3a:68:01:69:b6:ce:
                    1c:55:78:09:44:ed:85:46:11:9d:0b:4f:46:ac:11:
                    0b:46:60:35:79:3f:50:c4:88:58:b7:eb:7b:64:2f:
                    79:13:94:c4:fa:eb:ae:92:ab:7b:a9:81:9f:49:5c:
                    e9:61:db:03:8a:52:db:82:3a:6d:22:eb:3d:56:a8:
                    80:5b:c8:dc:f9:d1:76:d3:dc:b4:85:1c:01:6f:38:
                    5d:7c:af:95:f7:64:a0:f0:55:50:9d:ad:73:99:d2:
                    e7:85:4f:42:72:9d:af:1e:7a:3c:76:cb:5d:66:50:
                    71:ca:15:e1:4f:4c:92:1a:ca:d4:4c:90:6b:b4:45:
                    24:2b:9c:00:d7:17:05:75:98:51:e7:3a:6f:91:47:
                    b8:1f:66:58:2b:2f:37:54:71:d7:7b:d6:79:69:dd:
                    11:92:53:d9:b3:95:ec:52:0c:3f:e3:ca:3c:2a:08:
                    81:c5:4a:a7:9e:5f:f6:2f:4e:a6:57:1c:d9:38:33:
                    b2:73:9a:f2:db:77:f1:c1:fa:9f:a0:5f:96:bb:8f:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:F1:49:59:5D:AE:0D:D9:73:84:BF:39:88:D5:77:84:76:F3:AB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:c0:70:21:09:b5:17:a6:fc:5f:5d:70:b4:68:1e:2c:3f:
         24:84:0c:8c:e5:ac:b2:f1:67:cf:aa:3b:17:20:6c:37:ff:ba:
         4e:ac:88:24:e9:de:d0:1e:ee:4b:fe:66:0c:ab:69:f6:10:c5:
         c6:9e:92:54:b5:18:12:6f:97:6f:ce:4b:6f:3e:49:5d:98:4f:
         42:9c:87:e0:4c:04:65:cd:d8:ad:ca:52:6a:d1:fc:4c:0b:51:
         c8:45:9e:03:5f:71:f6:d1:02:99:19:9c:ec:a3:a4:df:49:7d:
         1e:32:88:97:f6:a4:ee:c5:21:23:be:79:56:99:b1:0a:f4:7f:
         9c:1d:be:69:6d:51:05:06:5e:be:3d:ce:f3:80:40:ca:a0:f8:
         7b:3f:ee:dd:6f:bb:36:42:bc:51:e3:49:2f:70:f2:e1:47:74:
         56:a3:ce:1a:ed:a5:41:61:c1:65:11:01:94:c5:c3:39:3d:de:
         9b:ef:7b:af:dc:94:c4:b1:c6:71:ee:40:bb:7d:6f:c9:5a:89:
         67:08:f2:08:da:30:b8:b2:eb:3f:b0:86:59:83:2e:22:78:ee:
         5f:18:53:29:e4:92:25:08:1b:f5:bb:52:a0:26:66:93:13:6c:
         b2:50:92:db:fb:2f:b0:89:0b:48:4f:76:93:11:c1:2e:d6:7b:
         bb:64:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:55 2025 by rpki-client