This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45700.roa
File:                     AS45700.roa (raw, json)
Hash identifier:          KdyrcRwlGErZz+0V54nwyD/S0DIDODjIssIRlcRdmWM=
Subject key identifier:   A4:C9:AF:EF:CA:81:80:01:40:B4:B5:A2:0A:C2:7B:7E:11:88:84:11
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       197268AFC31A608BEDE6180AD08D26E0360F1A37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45700.roa
Signing time:             Mon 01 Dec 2025 10:02:32 +0000
ROA not before:           Mon 01 Dec 2025 09:57:32 +0000
ROA not after:            Mon 30 Nov 2026 10:02:32 +0000
asID:                     45700
IP address blocks:        27.131.248.0/22 maxlen: 24
                          116.254.96.0/22 maxlen: 24
                          202.65.224.0/20 maxlen: 24
                          2401:e320::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:68:af:c3:1a:60:8b:ed:e6:18:0a:d0:8d:26:e0:36:0f:1a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  1 09:57:32 2025 GMT
            Not After : Nov 30 10:02:32 2026 GMT
        Subject: CN=A4C9AFEFCA81800140B4B5A20AC27B7E11888411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:9e:a2:99:43:c1:25:66:94:a4:61:e5:45:
                    c1:2c:95:f3:9e:06:f5:b4:3e:e0:ae:6e:ec:8e:07:
                    77:15:3d:65:70:73:66:3c:fa:f5:5c:4b:7c:39:13:
                    36:17:7b:0e:6c:a1:19:c3:5e:1e:86:1c:c3:78:97:
                    35:0c:18:fe:05:d0:c1:71:33:c5:0e:1b:c4:02:63:
                    94:0e:07:a5:81:0d:d0:98:a4:a5:fa:be:35:b2:39:
                    65:94:0c:4f:3c:8d:46:61:6a:d9:53:42:e0:9e:5e:
                    91:ac:5f:e1:d4:00:cb:ca:2f:c8:ab:bc:90:0c:79:
                    40:54:c0:37:4f:7b:02:3a:3f:be:f6:50:51:47:05:
                    67:6c:c1:08:75:c5:9e:8c:36:7d:85:06:c8:0f:ca:
                    6c:e8:6d:80:ee:78:ea:f6:26:d8:58:a5:81:b6:93:
                    3d:60:65:e1:f6:26:dc:48:76:e0:20:f8:6c:fb:03:
                    82:16:50:5c:8b:c9:b2:0d:11:fb:6f:dd:ea:b0:7f:
                    ea:2d:b7:9e:af:c6:03:49:58:70:43:ce:e9:7b:41:
                    cf:18:48:2a:55:2a:6f:aa:4c:9b:97:12:86:29:b6:
                    16:bf:9a:9d:ea:1f:2b:29:09:82:dc:6d:f3:2a:e8:
                    9e:0b:31:9d:11:e5:d4:df:3f:84:2d:58:ce:53:82:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:AF:EF:CA:81:80:01:40:B4:B5:A2:0A:C2:7B:7E:11:88:84:11
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.131.248.0/22
                  116.254.96.0/22
                  202.65.224.0/20
                IPv6:
                  2401:e320::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:2e:74:45:09:8b:69:26:04:10:b1:01:93:6a:67:20:2b:
         d6:c0:8b:b0:a6:56:52:81:49:1a:3c:dc:4e:5b:2b:66:cc:67:
         81:95:04:6c:ba:a8:65:58:fc:a0:23:49:9a:12:4d:ef:e3:7e:
         d0:86:54:87:4f:7b:cd:17:8c:16:2d:5b:44:42:e7:fa:43:05:
         1a:63:1b:da:04:34:14:82:b9:71:f3:f3:db:e5:29:61:0d:40:
         43:58:19:a0:e8:b3:85:c3:32:93:5c:f9:d7:03:fd:92:84:1b:
         f3:75:ea:d4:80:f4:7e:43:03:f5:7c:6d:01:31:c0:28:58:0b:
         c2:cb:a4:dc:8e:ab:71:d7:9f:ca:39:dc:62:89:a1:f7:37:c5:
         69:ae:28:fd:eb:43:0a:f0:b1:7a:93:5e:4b:a7:88:8c:79:a0:
         b4:a1:f7:a1:ad:6e:9b:9f:9c:26:56:3d:96:45:b9:20:7a:e8:
         bc:5b:2b:73:77:d8:83:3a:19:75:81:e3:10:e2:8c:2a:97:af:
         0c:c9:7b:56:72:80:45:91:a8:0b:33:da:8a:d7:f3:8e:b9:fa:
         6c:c2:ee:f7:8a:11:75:89:ac:de:67:87:19:b5:48:5a:5d:02:
         39:43:8f:c3:4e:fe:4f:2b:fd:b3:47:80:f4:c6:e7:76:09:f9:
         85:59:be:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:01:08 2025 by rpki-client