This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45715.roa
File:                     AS45715.roa (raw, json)
Hash identifier:          wgzwDlW+BcBGlwBLhmaXDEsR3KPFESdjsgjbrw/pubM=
Subject key identifier:   9B:EA:8A:A5:51:11:11:9E:99:ED:14:AC:A4:03:D3:6A:80:E6:95:C8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       25E1D79C06521DC819305DA7318F653053BAB42D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45715.roa
Signing time:             Tue 11 Nov 2025 06:00:21 +0000
ROA not before:           Tue 11 Nov 2025 05:55:21 +0000
ROA not after:            Tue 10 Nov 2026 06:00:21 +0000
asID:                     45715
IP address blocks:        45.250.100.0/24 maxlen: 24
                          45.250.101.0/24 maxlen: 24
                          45.250.102.0/24 maxlen: 24
                          45.250.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e1:d7:9c:06:52:1d:c8:19:30:5d:a7:31:8f:65:30:53:ba:b4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 11 05:55:21 2025 GMT
            Not After : Nov 10 06:00:21 2026 GMT
        Subject: CN=9BEA8AA55111119E99ED14ACA403D36A80E695C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:81:dd:32:a9:fd:df:bc:f6:ea:3e:0c:b0:
                    07:3a:3b:f0:bd:8b:24:8f:0a:91:8e:ed:50:09:13:
                    db:7d:ef:36:02:05:d4:80:a5:03:6a:cb:d9:ce:e0:
                    fc:43:be:b2:73:9f:ea:5a:cd:1e:bb:a6:17:c5:6d:
                    2d:ee:83:a0:63:4e:35:79:c6:0b:b6:85:13:f1:95:
                    7b:d2:24:0e:bc:e0:52:c2:da:5b:a0:a2:87:ef:37:
                    60:cd:85:88:66:4b:6c:76:fe:7c:4a:ba:27:95:f4:
                    00:48:ff:66:a8:a0:bf:55:08:d5:f2:c8:08:5f:63:
                    15:d1:ee:74:ea:b5:26:99:52:d3:f4:6d:db:5a:b8:
                    2e:e4:e9:cd:bb:bf:3a:c5:15:e4:fe:4c:2a:70:b5:
                    5c:24:9b:82:91:f5:6a:dd:15:9a:ae:53:8b:18:3c:
                    69:1d:5b:e7:5a:e6:26:b3:03:a5:d5:26:dd:95:b3:
                    4c:7e:f5:7d:20:d0:22:fb:f5:f9:89:bc:ce:f6:b8:
                    db:dd:e9:b0:e5:fc:b8:58:ee:4d:e4:3b:d8:29:92:
                    ef:5c:7a:00:da:26:88:a6:aa:35:96:85:03:8b:17:
                    e3:a8:2d:5f:ca:0a:04:e9:6c:b9:64:3d:c8:b0:58:
                    cf:76:7a:87:fc:c8:e9:b9:0a:41:38:bf:e1:b2:11:
                    e8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EA:8A:A5:51:11:11:9E:99:ED:14:AC:A4:03:D3:6A:80:E6:95:C8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS45715.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:e6:71:83:d0:ef:6c:54:94:61:5c:fc:ad:14:3b:17:5d:
         0f:74:6e:4c:dc:03:f5:2a:3e:59:74:e1:aa:13:dc:af:a6:ad:
         05:13:ff:f6:cc:6b:46:7e:2f:81:72:87:83:76:79:f1:ab:58:
         bc:85:64:33:d8:af:60:c7:d6:c1:24:f3:14:53:c9:b6:8b:6e:
         c9:38:c9:b3:e1:72:d2:20:18:be:0e:48:e8:92:80:37:e4:f5:
         88:50:ab:27:a0:04:0c:10:f0:4a:0b:03:f6:6f:a8:fc:ce:d4:
         c7:30:a4:a2:80:ee:56:79:a8:aa:84:01:52:41:7e:f6:ec:52:
         53:9c:c6:57:04:42:b7:8e:17:5c:ba:a3:6b:87:86:2f:8c:d7:
         05:b1:8f:65:1b:83:ce:82:e8:58:84:fa:6b:e9:a9:09:4a:3c:
         21:d4:33:3b:2a:43:15:d9:49:5f:e8:b0:78:e8:70:76:2c:ab:
         15:ca:61:52:e3:57:ed:8f:f1:86:e7:01:95:21:06:58:83:d6:
         2a:3e:d7:f2:08:e3:31:b5:28:98:11:10:5c:21:9e:e9:5d:8c:
         70:44:2c:2d:8e:4f:9e:bb:e4:81:5c:98:0c:c8:00:8f:ef:49:
         14:89:74:e4:5d:20:e0:41:f9:16:d1:6c:03:b6:5f:e8:bd:69:
         67:b6:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:51:33 2025 by rpki-client