This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa
File:                     AS149359.roa (raw, json)
Hash identifier:          9xggb5ErJwl0KbptrCyeFhSqLcU/NM0Q/JbmdrMtV6k=
Subject key identifier:   CE:01:E8:9F:D4:03:2E:D2:3B:35:92:08:B1:A0:FD:D4:88:3A:8F:F1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       13C253FE16B894415C27A2349EF4BD91788855CC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa
Signing time:             Fri 16 Jan 2026 15:00:00 +0000
ROA not before:           Fri 16 Jan 2026 14:55:00 +0000
ROA not after:            Fri 15 Jan 2027 15:00:00 +0000
asID:                     149359
IP address blocks:        49.0.26.0/23 maxlen: 24
                          103.19.78.0/23 maxlen: 24
                          103.176.107.0/24 maxlen: 24
                          103.180.118.0/23 maxlen: 24
                          103.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c2:53:fe:16:b8:94:41:5c:27:a2:34:9e:f4:bd:91:78:88:55:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 16 14:55:00 2026 GMT
            Not After : Jan 15 15:00:00 2027 GMT
        Subject: CN=CE01E89FD4032ED23B359208B1A0FDD4883A8FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:00:ff:ad:4f:89:64:a5:3d:76:4d:c6:eb:
                    4c:cb:5e:10:26:35:a2:6a:8d:7e:c6:ee:f8:0c:66:
                    7d:ca:1e:37:1a:2d:b6:19:6c:4b:6b:ab:ba:45:87:
                    1f:26:e5:d9:34:2e:e8:ad:39:ad:79:ad:f5:2f:c0:
                    5c:79:92:35:1b:e0:f4:5f:00:05:7d:90:53:5f:e9:
                    68:c2:14:6f:8d:8b:8f:ac:af:63:02:e1:80:1e:c5:
                    2e:f6:ca:7e:aa:37:34:cf:83:db:93:00:69:a3:9b:
                    2d:50:f4:c5:0e:2e:b2:ff:33:a1:df:72:56:56:c0:
                    8e:72:9d:a7:1a:68:2b:66:25:aa:22:fe:02:4f:89:
                    8e:d3:f2:fb:57:1f:d1:43:c8:42:e9:68:04:3a:7b:
                    9f:66:a6:70:12:73:37:fa:0f:5e:31:37:20:f6:bb:
                    2e:3a:6f:a2:e8:8d:19:c0:7d:55:57:a9:20:99:e8:
                    a5:f4:e2:50:fb:df:5d:21:fd:5b:db:e4:5c:43:b8:
                    b8:ed:c0:38:2a:ae:90:d4:8e:de:3f:81:58:ef:bd:
                    c0:38:87:fa:84:2e:51:21:21:86:0d:20:9f:ed:24:
                    ec:18:2a:e7:b8:9f:a0:cb:86:1e:d4:0e:32:80:26:
                    7f:f0:44:50:88:8c:28:9d:f3:37:67:ed:f5:36:07:
                    5b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:E8:9F:D4:03:2E:D2:3B:35:92:08:B1:A0:FD:D4:88:3A:8F:F1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS149359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.26.0/23
                  103.19.78.0/23
                  103.176.107.0/24
                  103.180.118.0/23
                  103.215.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a6:f4:b6:c5:e7:25:10:1d:f6:f6:3b:b1:43:bc:7d:36:b5:
         e6:56:79:62:3f:b8:ac:63:e6:c2:9e:fa:42:38:44:60:50:14:
         0e:d4:24:4c:bc:d7:da:06:e5:a6:b1:e0:0a:e0:de:1d:64:f6:
         06:be:6a:8f:46:86:df:0e:d6:ac:4a:73:63:c7:c9:71:84:4a:
         d7:0c:20:88:e6:01:f1:59:a4:0e:5f:41:81:e1:9d:cd:af:c6:
         26:9f:18:ee:d6:1a:3f:f1:8a:27:1d:84:1c:30:d2:a3:73:b3:
         49:60:a7:2e:bd:4f:3a:53:54:8f:19:5b:8e:e2:db:c7:b7:c1:
         7e:df:4d:2f:f0:e3:81:ea:33:00:7c:a7:e0:2a:21:d0:42:75:
         b8:df:4f:a7:6a:be:85:64:24:f9:fa:2e:67:38:81:e9:6f:58:
         b4:c5:03:3c:41:08:aa:9a:dc:b7:48:cd:b9:b0:db:ee:6a:1f:
         43:83:33:39:3d:c5:f5:6a:a9:c4:c9:e1:c1:36:e3:b0:39:e2:
         07:cb:ca:c0:49:92:c3:8f:19:6e:9e:ca:2a:c2:93:21:f7:a7:
         e9:aa:45:c9:31:3b:b0:48:42:83:9a:0e:83:2d:f1:d2:be:87:
         65:3d:af:41:8b:ce:75:e8:33:1f:2d:b9:da:12:ee:a3:24:fd:
         39:4b:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:36:46 2026 by rpki-client