This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147094.roa
File:                     AS147094.roa (raw, json)
Hash identifier:          hDVD09cq/6sNGhhWPx6aXG2Uu6vtFrLVjnxuHu1dhlo=
Subject key identifier:   12:CC:F8:67:7D:02:36:C3:8F:A0:36:C4:7A:67:9A:4A:7F:D6:7A:DC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       753429F6D301C8623E98AB72C230D357CF8A370F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147094.roa
Signing time:             Wed 14 Jan 2026 04:53:13 +0000
ROA not before:           Wed 14 Jan 2026 04:48:13 +0000
ROA not after:            Wed 13 Jan 2027 04:53:13 +0000
asID:                     147094
IP address blocks:        103.215.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:34:29:f6:d3:01:c8:62:3e:98:ab:72:c2:30:d3:57:cf:8a:37:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 14 04:48:13 2026 GMT
            Not After : Jan 13 04:53:13 2027 GMT
        Subject: CN=12CCF8677D0236C38FA036C47A679A4A7FD67ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:c1:6b:d4:fe:75:fa:1f:0b:91:6c:b0:40:
                    6e:83:22:9a:f7:0d:49:6c:0c:aa:51:22:ae:ef:b4:
                    ff:43:ed:6f:7c:46:5e:83:1d:c7:16:fc:58:42:53:
                    d8:18:a7:11:cc:e7:a4:67:62:92:d0:18:8e:0a:e1:
                    1e:43:0c:44:cb:78:bf:3f:79:14:ef:5e:fe:d6:82:
                    c5:76:31:30:09:c9:50:2a:3e:7c:bc:54:c9:17:b5:
                    27:87:07:1d:1d:a1:03:b9:b4:3e:ac:7f:6e:cb:a5:
                    f0:b0:19:4c:58:86:bf:35:c7:18:e2:eb:bb:25:53:
                    4e:a7:f0:47:1b:3e:22:ba:16:98:d6:68:56:59:f0:
                    16:87:2b:e5:5c:69:61:7d:16:2a:e5:9e:28:9f:02:
                    8f:d2:e5:ef:d3:7a:46:a0:19:12:c3:a6:d3:98:9e:
                    e5:39:f2:b9:ea:41:05:21:6d:27:f7:c6:ef:01:15:
                    71:66:42:2d:13:a8:d8:d3:26:ae:d5:36:92:c1:4d:
                    64:1d:46:b6:6f:af:e9:66:74:fc:b2:19:20:3e:50:
                    41:77:21:42:bf:0c:f4:f2:12:17:be:c4:f3:25:3a:
                    a8:de:fb:6a:9b:e2:ac:93:ab:09:8e:79:90:07:29:
                    0e:32:50:a4:11:ca:2f:16:a3:89:44:46:d1:8b:6b:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:F8:67:7D:02:36:C3:8F:A0:36:C4:7A:67:9A:4A:7F:D6:7A:DC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:fa:fa:5d:db:be:b6:14:11:7f:76:ee:b2:0e:34:3d:d0:2a:
         a8:a1:61:a2:6c:1f:5c:5b:59:67:b7:53:a4:34:c5:16:1e:77:
         a9:fc:30:a3:77:79:a9:c1:87:e7:20:b2:f6:aa:fe:5d:4e:40:
         e4:5c:d3:5f:94:ac:5c:44:55:01:50:5b:73:2b:c2:b9:5b:99:
         92:b0:a9:75:3b:40:f9:70:9b:51:0d:d3:29:7c:2e:bf:42:b6:
         d6:30:1d:77:60:d9:88:2d:83:d0:24:12:6c:19:a9:98:f0:0d:
         65:55:5a:18:63:76:68:89:f1:09:94:ff:4e:22:c3:03:0b:43:
         fc:39:6c:ec:72:d8:f3:69:ac:90:15:9d:3c:86:23:23:2f:31:
         27:e2:a0:d2:e9:2c:e5:32:f0:a1:7f:75:1b:84:b8:97:fd:76:
         b0:e4:07:e4:39:cd:b5:bb:0f:6e:f8:0a:07:c3:12:ef:47:d8:
         36:e9:ba:1e:bd:29:f3:ff:f8:d2:66:07:eb:04:44:96:d0:36:
         40:8e:7d:d9:09:e2:d6:c4:68:48:64:94:56:23:f3:ba:d9:e1:
         cc:2b:8a:ac:bd:60:3f:ee:40:9c:74:e1:3f:28:92:ad:6e:fd:
         b1:20:11:5a:9b:db:22:e7:89:7e:5c:a8:2a:34:1a:0e:45:5c:
         0b:38:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:49:54 2026 by rpki-client