This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
File:                     6538D178628E11EEBF375134C4F9AE02.roa (raw, json)
Hash identifier:          5hu6VPOMwmE3voYXkmp3eUb3lVDeCA+zJokawI+UD3A=
Subject key identifier:   78:14:7F:3A:93:C8:C4:D6:FF:4B:15:10:EA:71:11:6A:02:EE:B0:34
Certificate issuer:       /CN=A911393B/serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
Certificate serial:       0199
Authority key identifier: 21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
Signing time:             Mon 01 Dec 2025 02:29:42 +0000
ROA not before:           Mon 01 Dec 2025 02:29:42 +0000
ROA not after:            Mon 30 Mar 2026 00:00:00 +0000
asID:                     151838
IP address blocks:        103.240.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl
                          rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 01:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911393B, serialNumber=21CBAAA044DE1A5664469F418BCD0877B213973A
        Validity
            Not Before: Dec  1 02:29:42 2025 GMT
            Not After : Mar 30 00:00:00 2026 GMT
        Subject: CN=692cfd95-c015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:4f:69:62:3d:03:ee:42:04:cc:8c:2c:d9:
                    7e:f9:3e:c7:d4:9b:18:2f:3e:95:a0:6f:d8:dd:6e:
                    07:22:f3:4b:cf:c6:9a:96:2c:46:30:38:7f:33:04:
                    2c:4c:03:61:72:68:e1:2f:93:59:7f:87:b5:eb:93:
                    b0:7b:e5:33:7f:fe:5e:2b:a8:0a:41:eb:73:1b:7d:
                    03:a8:a5:64:e8:bf:d5:0b:a6:ea:3e:fb:96:fc:6c:
                    f7:19:99:80:be:e6:01:e6:48:ac:e9:88:66:0e:76:
                    90:4b:9f:17:95:b8:1b:e8:a7:6c:60:d6:82:33:c5:
                    f6:de:f9:d3:89:52:d0:c4:57:88:88:96:3a:55:76:
                    5d:67:2e:2c:41:31:16:86:4f:71:2e:b6:78:8c:4a:
                    fe:e2:06:86:f7:55:9b:ca:b4:3d:d5:5e:44:50:76:
                    06:6a:e1:98:e1:9c:f6:3c:5b:bf:eb:a9:a2:3f:a4:
                    cb:cd:08:60:50:0f:a8:42:61:d2:e6:ce:9a:27:93:
                    cc:52:e4:1d:a5:a4:b1:5d:0e:3d:50:d5:38:98:88:
                    05:2b:7f:7e:d8:20:38:53:58:15:cd:6c:ed:aa:81:
                    94:62:f1:07:0a:fb:99:3a:58:38:fe:12:38:85:f5:
                    c4:d0:89:35:e8:18:48:7e:63:4e:0e:3d:d9:de:80:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:14:7F:3A:93:C8:C4:D6:FF:4B:15:10:EA:71:11:6A:02:EE:B0:34
            X509v3 Authority Key Identifier:
                keyid:21:CB:AA:A0:44:DE:1A:56:64:46:9F:41:8B:CD:08:77:B2:13:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/IcuqoETeGlZkRp9Bi80Id7ITlzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcuqoETeGlZkRp9Bi80Id7ITlzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911393B/67D08BA8628C11EE9565B569C4F9AE02/6538D178628E11EEBF375134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:de:0f:1f:ed:35:29:b9:da:97:86:13:f3:44:98:b4:4f:fd:
         b2:a5:9e:d6:2d:db:3f:74:59:22:2f:69:e6:fe:52:91:8c:47:
         7a:b8:13:50:ee:da:1d:f4:22:af:14:d5:0b:83:5a:04:ef:64:
         37:06:6e:51:ea:14:9a:ff:53:6e:b2:bb:26:f7:60:d8:3c:33:
         4d:a5:a0:aa:1b:d6:de:92:f3:e0:75:61:4b:d8:79:d3:97:d1:
         24:80:d9:96:4c:99:c8:30:ec:72:11:c7:77:36:bc:72:46:1c:
         ee:c3:35:11:cc:de:13:53:2c:be:fe:dc:30:47:3f:47:05:6b:
         2b:bd:42:22:f7:34:92:57:43:65:38:02:51:22:73:2f:e5:af:
         f5:82:8e:07:30:36:20:05:fe:01:8c:c2:87:30:52:c4:fa:2e:
         9c:ef:70:0b:11:03:70:0a:ba:0b:38:1b:02:01:f8:ad:08:44:
         59:b5:ec:55:fc:d8:85:f6:34:ce:e0:6f:17:91:d2:6c:9f:35:
         19:56:02:32:1a:6c:5f:e9:aa:21:ae:12:b0:5a:bf:f5:b4:9c:
         0e:6d:2a:ce:f8:d8:8f:13:5a:e8:00:5b:e2:6c:63:39:5b:2b:
         9c:53:55:90:80:71:0b:53:be:1e:dd:5d:65:ca:4d:85:00:88:
         ac:b9:a6:a8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5M0IxMTAvBgNVBAUTKDIxQ0JBQUEwNDRERTFBNTY2NDQ2OUY0MThCQ0QwODc3
QjIxMzk3M0EwHhcNMjUxMjAxMDIyOTQyWhcNMjYwMzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTJjZmQ5NS1jMDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwApPaWI9A+5CBMyMLNl++T7H1JsYLz6VoG/Y3W4HIvNLz8aalixGMDh/MwQs
TANhcmjhL5NZf4e165Owe+Uzf/5eK6gKQetzG30DqKVk6L/VC6bqPvuW/Gz3GZmA
vuYB5kis6YhmDnaQS58Xlbgb6KdsYNaCM8X23vnTiVLQxFeIiJY6VXZdZy4sQTEW
hk9xLrZ4jEr+4gaG91WbyrQ91V5EUHYGauGY4Zz2PFu/66miP6TLzQhgUA+oQmHS
5s6aJ5PMUuQdpaSxXQ49UNU4mIgFK39+2CA4U1gVzWztqoGUYvEHCvuZOlg4/hI4
hfXE0Ik16BhIfmNODj3Z3oC0AQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHgUfzqT
yMTW/0sVEOpxEWoC7rA0MB8GA1UdIwQYMBaAFCHLqqBE3hpWZEafQYvNCHeyE5c6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzkzQi82N0QwOEJBODYy
OEMxMUVFOTU2NUI1NjlDNEY5QUUwMi9JY3Vxb0VUZUdsWmtScDlCaTgwSWQ3SVRs
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ljdXFvRVRlR2xaa1JwOUJpODBJZDdJVGx6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTM5M0IvNjdEMDhCQTg2MjhDMTFFRTk1NjVCNTY5QzRGOUFFMDIvNjUzOEQxNzg2
MjhFMTFFRUJGMzc1MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn8AEwDQYJKoZIhvcNAQELBQADggEBAIPeDx/tNSm52peG
E/NEmLRP/bKlntYt2z90WSIvaeb+UpGMR3q4E1Du2h30Iq8U1QuDWgTvZDcGblHq
FJr/U26yuyb3YNg8M02loKob1t6S8+B1YUvYedOX0SSA2ZZMmcgw7HIRx3c2vHJG
HO7DNRHM3hNTLL7+3DBHP0cFayu9QiL3NJJXQ2U4AlEicy/lr/WCjgcwNiAF/gGM
wocwUsT6LpzvcAsRA3AKugs4GwIB+K0IRFm17FX82IX2NM7gbxeR0myfNRlWAjIa
bF/pqiGuErBav/W0nA5tKs742I8TWugAW+JsYzlbK5xTVZCAcQtTvh7dXWXKTYUA
iKy5pqg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:36 2025 by rpki-client