This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa
File:                     AS56246.roa (raw, json)
Hash identifier:          9EUo8dso2lFpmQxn1LD/4tRDH0DzD8JScNIFGQAWyks=
Subject key identifier:   E1:60:5D:DC:67:72:5F:94:4D:8E:A3:34:4B:22:B0:1B:BC:3C:5F:85
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       53D92FB39D653406950AC1C9BBEABCBAE01C5BA8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa
Signing time:             Mon 19 Jan 2026 03:07:04 +0000
ROA not before:           Mon 19 Jan 2026 03:02:04 +0000
ROA not after:            Mon 18 Jan 2027 03:07:04 +0000
asID:                     56246
IP address blocks:        103.143.223.0/24 maxlen: 24
                          103.152.234.0/23 maxlen: 24
                          114.198.240.0/21 maxlen: 24
                          114.198.244.0/24 maxlen: 24
                          114.198.245.0/24 maxlen: 24
                          116.68.166.0/24 maxlen: 24
                          116.68.170.0/24 maxlen: 24
                          116.68.171.0/24 maxlen: 24
                          116.68.172.0/24 maxlen: 24
                          116.68.174.0/24 maxlen: 24
                          116.68.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Jan 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:2f:b3:9d:65:34:06:95:0a:c1:c9:bb:ea:bc:ba:e0:1c:5b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 19 03:02:04 2026 GMT
            Not After : Jan 18 03:07:04 2027 GMT
        Subject: CN=E1605DDC67725F944D8EA3344B22B01BBC3C5F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:b7:3c:8f:49:5a:47:13:dd:da:5b:c5:82:
                    6d:62:23:e5:83:a2:62:17:bf:f4:50:f2:f7:79:84:
                    b7:11:ac:8d:ac:74:50:ac:0c:16:55:c3:28:20:90:
                    a3:74:5a:f8:8b:8f:80:28:84:b1:5b:fb:ee:af:ec:
                    bb:07:26:d5:76:75:40:f2:c9:fa:30:a6:6f:76:97:
                    5b:00:01:94:28:00:4d:4d:bd:dd:dc:02:45:83:75:
                    d0:62:bc:54:47:2a:c8:96:a4:41:48:61:36:da:ac:
                    11:79:0e:5f:27:09:ad:31:43:b1:64:5d:f4:c8:30:
                    cd:18:31:20:60:ac:d4:f4:ca:72:a6:9a:14:57:83:
                    2a:48:f8:ad:83:b3:40:21:f0:07:5c:b0:29:f4:59:
                    f0:6b:99:b4:66:67:d6:a0:be:a4:79:7c:5c:3e:9a:
                    91:9d:b1:e0:32:5f:11:74:02:b2:b9:54:1b:26:38:
                    37:45:24:e1:d1:9b:78:af:5c:af:9d:f5:8e:43:86:
                    73:76:68:af:2f:91:6b:be:3d:b9:c9:7b:ec:50:d1:
                    ff:5f:f4:8d:11:b2:76:21:3f:be:d3:f6:9c:4a:2b:
                    77:1c:89:51:08:60:71:05:06:d0:1d:24:0c:a4:3c:
                    2c:cc:20:12:05:d2:04:48:ca:60:28:63:93:06:c8:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:5D:DC:67:72:5F:94:4D:8E:A3:34:4B:22:B0:1B:BC:3C:5F:85
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS56246.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.223.0/24
                  103.152.234.0/23
                  114.198.240.0/21
                  116.68.166.0/24
                  116.68.170.0-116.68.172.255
                  116.68.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:f7:9d:63:a2:c4:b0:15:df:89:f4:0a:ae:65:86:a0:ca:b6:
         65:62:0c:a3:76:8f:5f:17:00:c3:11:a7:17:0f:30:d8:aa:bf:
         ff:f1:bb:ff:18:eb:e5:df:60:54:dc:8f:cc:05:86:f1:48:24:
         40:cb:b3:72:48:02:63:6a:14:0d:3a:f5:ed:75:52:67:0c:82:
         63:3c:40:94:e0:35:cb:5b:56:3c:1a:a6:88:8b:2c:f6:a8:6b:
         e3:45:8d:f5:0e:b5:3e:aa:2a:0b:c5:d0:a8:06:13:b3:19:f9:
         3f:9f:ac:80:7b:ef:6d:33:08:fe:ba:3f:50:88:68:d5:ac:fa:
         e2:ab:d3:d2:e6:c4:11:4d:78:42:84:a4:72:7d:8b:df:91:f5:
         49:68:e0:ad:0f:91:38:fc:dd:ae:11:1a:46:cf:fc:13:cf:a5:
         7d:17:74:f6:24:c6:f5:cd:6e:20:d9:61:ef:96:ba:bb:2d:be:
         ef:af:67:bd:2b:c1:b3:1b:63:56:6c:ac:68:92:d5:b6:af:29:
         4b:59:8a:d0:a8:a4:ce:5b:e4:56:0f:ee:a8:10:bb:fc:4f:85:
         e8:5c:52:fd:c9:89:29:63:52:c0:d0:30:39:78:64:d6:03:fe:
         77:a8:22:ff:d1:a9:fc:11:e9:8a:12:8c:46:47:12:8d:fa:89:
         a6:50:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:36:41 2026 by rpki-client