This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa
File:                     AS151505.roa (raw, json)
Hash identifier:          YopZtl629jqhxe/fg2Pur1cnZoqgxH2C8uCFFF524Ls=
Subject key identifier:   0B:36:FD:C1:C7:3B:C1:B2:9E:6D:3E:9E:D7:30:2F:FA:1C:CE:73:98
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16D22B60A5D7C785CF65C5D53A92F10E3A394EC3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa
Signing time:             Fri 05 Dec 2025 05:00:00 +0000
ROA not before:           Fri 05 Dec 2025 04:55:00 +0000
ROA not after:            Fri 04 Dec 2026 05:00:00 +0000
asID:                     151505
IP address blocks:        103.222.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d2:2b:60:a5:d7:c7:85:cf:65:c5:d5:3a:92:f1:0e:3a:39:4e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  5 04:55:00 2025 GMT
            Not After : Dec  4 05:00:00 2026 GMT
        Subject: CN=0B36FDC1C73BC1B29E6D3E9ED7302FFA1CCE7398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:b9:8e:91:d9:44:b3:78:4b:fa:f0:09:6d:
                    5f:c1:fa:bb:59:bf:85:aa:45:90:48:4e:95:6b:5b:
                    ae:3e:1a:ab:60:da:f1:1f:08:aa:66:a1:a7:ba:5c:
                    53:f5:de:2a:a9:d6:b4:30:9c:d9:ef:f1:c8:6a:a1:
                    e5:b7:d6:47:cd:87:17:1f:60:15:0f:13:cd:5b:4b:
                    36:d3:75:4e:ba:10:0a:56:3a:2d:a1:7f:39:44:54:
                    b0:16:7f:6f:c8:35:9a:ab:36:74:fe:0b:06:4b:43:
                    db:88:bd:d3:75:07:60:94:d2:d8:d6:34:09:3f:1c:
                    7e:60:53:da:d7:4d:bb:9e:39:29:a6:19:d7:0d:fb:
                    68:81:fd:a7:ae:18:42:f3:bd:4a:89:39:df:7f:77:
                    0e:e0:3b:60:8e:09:40:fd:d6:0f:ca:fb:18:a9:ed:
                    3b:e1:44:f1:0b:27:06:9b:b4:7f:1e:c3:1d:6f:49:
                    9e:ef:ae:d5:40:14:80:15:e4:21:05:ed:fc:e8:f8:
                    a9:1f:c2:e1:52:5c:63:60:d2:37:72:63:03:e1:49:
                    b5:d1:9e:e1:ba:95:41:b1:2f:38:f6:be:52:95:1d:
                    1b:81:1b:7a:a9:85:0e:84:2e:3f:a6:54:70:63:ec:
                    4d:df:24:76:6c:bd:90:37:3c:77:bd:0b:07:d2:6c:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:36:FD:C1:C7:3B:C1:B2:9E:6D:3E:9E:D7:30:2F:FA:1C:CE:73:98
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS151505.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:2e:5d:81:e3:03:fe:e0:ad:92:66:4f:8b:6e:97:4a:e9:cd:
         ed:a8:ed:d0:f1:30:40:b5:8d:65:94:9f:1f:c3:4b:3a:46:c5:
         96:e8:d6:08:a9:59:a0:db:bd:f2:0f:c2:c5:9a:6d:10:79:d7:
         cd:7d:7a:50:05:37:c6:25:2a:60:b3:8b:5a:d0:dc:c8:ac:f2:
         c6:f4:4e:4b:1c:b9:8d:51:e8:48:ea:11:0f:75:ad:16:74:62:
         e7:62:74:56:dc:df:d6:ed:47:81:b8:0c:a6:10:74:a7:dd:d3:
         6a:fb:96:8f:8f:e4:4d:86:e0:de:28:cd:6c:5d:98:d4:94:90:
         03:06:60:c3:ce:7e:95:31:d4:49:f7:76:e1:1c:85:1a:fb:19:
         b6:dd:6d:c2:3a:ac:b3:34:2a:b1:64:84:a2:b2:94:a9:11:dd:
         7c:4c:eb:84:b5:6f:c5:d9:bc:a7:a9:39:c9:33:c5:64:3a:d2:
         05:a9:f6:77:76:96:f7:1c:fa:24:89:dd:52:45:b1:46:16:7e:
         6a:c1:0b:74:14:42:ac:29:e0:85:24:61:f3:e9:4a:8f:53:cd:
         43:5e:05:b9:8c:6d:f5:4c:e9:bc:63:35:2a:dd:58:6c:f0:dd:
         12:66:e8:52:7f:e9:8c:27:c5:06:2a:3e:38:d5:7f:3a:2d:b6:
         83:34:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:52:33 2025 by rpki-client