This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa
File:                     AS147161.roa (raw, json)
Hash identifier:          LyDfHqwIcKVxalfL/29u02yIGem+uxONnKBEVdMSHrs=
Subject key identifier:   F2:9F:59:3D:8A:33:D1:51:D2:35:EB:46:47:8E:3F:67:FD:57:57:1C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3B047C6C2FDB53615B3674E3F0A9CA83AF4B5970
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa
Signing time:             Thu 11 Dec 2025 04:00:00 +0000
ROA not before:           Thu 11 Dec 2025 03:55:00 +0000
ROA not after:            Thu 10 Dec 2026 04:00:00 +0000
asID:                     147161
IP address blocks:        103.177.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:04:7c:6c:2f:db:53:61:5b:36:74:e3:f0:a9:ca:83:af:4b:59:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 11 03:55:00 2025 GMT
            Not After : Dec 10 04:00:00 2026 GMT
        Subject: CN=F29F593D8A33D151D235EB46478E3F67FD57571C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:63:a0:38:8b:d3:16:b3:93:7f:9e:f4:41:
                    06:41:f3:0e:b7:c0:6c:02:aa:82:d0:d5:d0:1d:82:
                    ac:6e:0b:41:cb:9c:fb:d8:ee:3f:7e:68:5d:e4:8f:
                    2f:0c:a7:83:5d:2d:05:c9:26:53:2a:38:6f:87:d9:
                    38:66:0b:df:a7:7e:b8:1f:3e:a5:92:90:61:ac:35:
                    f2:3a:22:c2:43:96:09:b3:40:67:76:a7:ee:17:bb:
                    b3:b1:7b:13:54:bf:64:a0:a0:0c:a0:04:46:62:98:
                    02:02:0c:f5:71:52:32:c5:b6:67:48:11:be:c0:2f:
                    f1:c8:f1:37:7e:d9:24:b4:5f:2e:1b:9d:9b:b5:ae:
                    fa:1d:52:c9:39:2c:8c:68:23:4c:f2:66:5b:e7:ff:
                    fe:d8:22:8a:d2:5a:52:5b:21:9b:04:ae:a7:2b:bd:
                    db:c7:76:d7:47:b1:2d:95:81:d9:a8:45:57:73:9f:
                    7e:42:a4:f3:da:12:0d:a3:df:ad:e0:5c:fc:45:64:
                    59:ce:d1:94:79:30:3f:62:ec:12:53:2c:f5:f8:c9:
                    84:99:09:cf:10:82:6d:f6:7b:c0:94:d3:3e:76:6d:
                    e9:83:d7:c2:b0:56:43:fa:0e:e3:f7:a5:99:80:d2:
                    b4:2f:b7:95:2f:06:71:71:b0:a8:ec:ad:36:8f:f6:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9F:59:3D:8A:33:D1:51:D2:35:EB:46:47:8E:3F:67:FD:57:57:1C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147161.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:06:60:ab:75:21:07:ac:59:2e:c9:a2:21:15:5f:7c:dc:
         68:95:b2:11:8d:65:35:db:cd:c9:5a:a9:8a:a8:e9:c4:1b:8d:
         47:5b:46:6d:bf:98:25:51:dd:2a:c4:4a:65:87:1a:75:03:55:
         d8:c7:c9:2d:a3:4a:23:2e:f1:24:ae:8e:84:47:58:e5:50:63:
         db:28:d7:96:c6:04:e9:24:86:5f:d9:9c:ac:45:36:39:d9:5f:
         a6:11:77:a2:52:4a:2b:80:b7:32:a1:2e:9e:cc:34:83:81:ee:
         dd:d0:61:bb:7d:bb:9b:41:84:4b:9e:05:73:97:71:58:25:73:
         5b:ce:a0:a7:6b:37:ed:02:65:b5:cc:e8:a4:57:13:13:13:68:
         1e:cf:29:75:94:68:ac:fc:27:09:35:e0:fc:be:94:e8:3d:ec:
         ec:21:2a:11:63:98:f0:f2:21:30:52:e1:62:b5:c9:e4:71:0e:
         5d:f6:f2:c0:87:a3:c5:45:96:2c:27:92:ed:05:e1:4f:ef:24:
         90:c2:e6:46:59:51:ca:33:2f:5f:42:e0:6f:4b:b8:a8:62:cd:
         bd:3a:84:4a:de:a4:26:65:74:f6:b4:01:ea:2c:f7:54:46:79:
         e0:9e:e4:e3:66:bb:72:9c:f2:ea:cf:0c:6b:6e:74:37:b1:fb:
         03:6c:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:21:05 2025 by rpki-client