This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139382.roa
File:                     AS139382.roa (raw, json)
Hash identifier:          ea1zz36JUr2Wzp5JMKruYa4qn0uBctu6cHtJBhBXdkE=
Subject key identifier:   98:49:B5:29:88:BB:7A:0D:01:8D:94:06:53:73:E0:2E:05:0F:AA:8F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3DD498761865CFCBC82BC320B2017C19396E31B3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139382.roa
Signing time:             Tue 04 Nov 2025 08:00:00 +0000
ROA not before:           Tue 04 Nov 2025 07:55:00 +0000
ROA not after:            Tue 03 Nov 2026 08:00:00 +0000
asID:                     139382
IP address blocks:        210.87.118.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Thu 18 Dec 2025 03:54:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:98:76:18:65:cf:cb:c8:2b:c3:20:b2:01:7c:19:39:6e:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  4 07:55:00 2025 GMT
            Not After : Nov  3 08:00:00 2026 GMT
        Subject: CN=9849B52988BB7A0D018D94065373E02E050FAA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:d5:d2:65:f5:36:8c:21:e5:a1:9f:fa:09:
                    df:82:e0:2d:e7:d8:e8:09:bc:56:c1:82:ca:66:41:
                    ac:da:9e:f5:3d:71:c2:c5:9a:6d:67:5c:4b:66:62:
                    41:02:30:b6:eb:be:bc:0a:a8:fb:e5:0e:e8:e2:9e:
                    7a:4b:62:53:c5:ae:04:13:0c:1a:dd:21:f3:39:98:
                    4d:f0:ed:ea:92:ee:5f:a9:5c:05:29:a6:66:26:f1:
                    2b:e6:3d:32:8c:95:fc:3c:dc:b8:4b:a4:4e:3a:fd:
                    9c:1a:6b:cd:58:25:ed:fa:aa:67:b1:bd:62:96:8e:
                    01:fe:de:d4:36:54:4f:a1:2b:c2:e8:45:39:44:e3:
                    ff:9e:8d:fa:4c:cc:47:1d:33:d6:66:06:0f:8c:2b:
                    dc:36:29:bb:a8:b7:a1:52:88:c1:1b:cb:50:87:f2:
                    81:95:31:e6:a8:95:b6:dd:20:ac:7f:55:0d:06:34:
                    c3:76:3f:87:ef:eb:b1:b3:5e:3e:e3:85:40:b7:0b:
                    6a:70:ec:a4:77:3d:f1:9b:c9:99:19:2b:1a:38:42:
                    cf:0f:36:ae:5e:ab:af:80:06:2a:7e:53:89:fd:ac:
                    c7:96:1c:2c:12:ab:e9:8b:85:10:37:df:5e:30:3f:
                    fa:56:7e:05:e6:c1:04:92:f7:7a:bd:f2:c9:4c:2a:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:49:B5:29:88:BB:7A:0D:01:8D:94:06:53:73:E0:2E:05:0F:AA:8F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139382.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.87.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9a:24:8e:39:e7:18:d4:58:a2:c1:ad:f3:64:b3:2f:1e:95:
         51:4f:25:9c:c6:43:39:43:73:ce:bf:50:99:2e:fe:84:87:dd:
         a0:2f:27:12:e4:61:ac:b8:a7:96:08:fa:0b:6d:a8:23:7c:15:
         db:4e:c1:41:b9:9c:c5:95:c2:ef:2f:7a:16:6a:4b:53:bd:8a:
         b9:21:1c:09:b2:13:33:17:24:c0:78:36:37:90:be:5d:c9:f1:
         10:20:d4:1d:a4:ff:66:6a:c5:24:39:05:d2:be:5e:c9:a2:9d:
         2f:46:88:00:d7:bc:2d:92:d9:5f:61:c7:5e:57:7e:b5:a4:7f:
         36:a1:ff:1e:26:b9:9d:02:d1:60:16:4f:79:e2:bb:69:08:e1:
         fe:ba:d1:74:6c:87:c2:9b:ef:8c:cc:20:b0:14:c3:d0:5e:af:
         60:c3:b0:31:47:17:7c:54:22:3b:a8:0d:f4:43:18:4d:2d:c7:
         c8:1a:04:90:a1:47:e2:c3:36:7c:2a:a2:18:9d:b6:15:6e:02:
         22:84:17:d6:e4:bd:15:57:a5:bd:43:69:5b:08:e9:85:da:fb:
         63:24:e8:61:0a:f0:25:c2:62:27:b1:64:1f:af:f3:c8:16:f9:
         6f:06:2b:23:32:bb:ff:b9:c5:c9:2c:9f:ce:ec:e5:6b:f2:da:
         b5:c2:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 06:56:33 2025 by rpki-client