This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
File:                     03D8DC4A40F011EDAD789E3AC4F9AE02.roa (raw, json)
Hash identifier:          21GXaY8jinl0FFe6J0Dy+QT51osw17hMflWFhu3HoLI=
Subject key identifier:   11:00:14:BB:A2:B8:43:8B:2D:59:0E:E5:B7:8B:CE:3E:7C:29:0B:46
Certificate issuer:       /CN=A9113F63/serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
Certificate serial:       0253
Authority key identifier: C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
Signing time:             Thu 27 Nov 2025 00:17:39 +0000
ROA not before:           Thu 27 Nov 2025 00:17:39 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150331
IP address blocks:        103.13.194.0/23 maxlen: 23
                          103.13.194.0/24 maxlen: 24
                          103.13.195.0/24 maxlen: 24
                          2400:af20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl
                          rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 00:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113F63, serialNumber=C94481CAD00EFB1DEA7A939CBE29A8F45F25E20B
        Validity
            Not Before: Nov 27 00:17:39 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=692798a3-0635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:fd:9b:8e:b0:10:70:3c:58:3f:b1:84:9c:
                    ee:f6:45:3b:81:4d:1f:80:7c:aa:9d:9e:7d:89:99:
                    29:e4:c9:21:14:6e:97:bf:40:06:48:bd:89:ed:06:
                    60:f5:60:b1:47:80:54:a2:46:1c:7b:40:6d:76:5e:
                    ce:87:4b:32:70:99:ec:37:26:b6:ee:26:65:5c:ee:
                    d0:3c:62:9c:7d:eb:a2:16:7a:fd:3d:ba:91:83:6f:
                    01:82:c8:ec:03:1b:0c:a2:13:db:56:01:f8:fc:c1:
                    92:8a:53:20:ab:57:fc:f6:a2:f2:f8:50:ff:4d:ef:
                    4f:00:94:cd:aa:18:9b:c3:17:2b:21:2e:e3:f4:eb:
                    e5:85:06:8c:67:ba:c7:c8:35:a9:77:b8:87:13:cf:
                    21:e2:d2:b4:e0:fc:16:c3:30:44:40:e6:2e:67:d1:
                    56:ec:71:58:ae:56:2b:83:b8:c7:73:76:79:6b:dc:
                    cb:1a:54:d4:82:5e:85:eb:e3:a7:9c:09:41:07:26:
                    42:4a:8a:7b:3d:fa:c4:5f:94:7e:2c:46:39:79:1d:
                    bc:82:34:dd:e2:3b:21:58:e4:14:b9:f9:9d:18:0e:
                    59:fe:90:5b:31:70:a8:b8:86:6d:26:b4:c2:ab:e3:
                    d9:8a:8d:3f:d9:df:fc:b6:19:5a:52:73:44:f8:7e:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:14:BB:A2:B8:43:8B:2D:59:0E:E5:B7:8B:CE:3E:7C:29:0B:46
            X509v3 Authority Key Identifier:
                keyid:C9:44:81:CA:D0:0E:FB:1D:EA:7A:93:9C:BE:29:A8:F4:5F:25:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/yUSBytAO-x3qepOcvimo9F8l4gs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUSBytAO-x3qepOcvimo9F8l4gs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113F63/519B64A640EC11EDA88EB533C4F9AE02/03D8DC4A40F011EDAD789E3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.194.0/23
                IPv6:
                  2400:af20::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:43:6f:f6:a7:0c:ba:7b:34:48:e6:83:ec:dd:87:5d:02:
         13:68:ff:e0:f2:0b:e1:10:fe:94:34:4b:b0:d9:40:15:60:c0:
         64:c5:6b:95:8d:78:1e:40:9c:08:4b:cb:40:a0:76:5a:ee:02:
         2a:c5:ba:e2:48:14:b3:75:30:22:33:e8:1c:b3:b3:4e:cf:0d:
         17:75:41:e3:83:94:73:0e:05:c3:32:6a:88:96:20:37:95:e1:
         45:b6:59:37:e6:cc:8d:a8:d4:bd:b5:ad:6c:d2:a4:d0:0f:8a:
         16:14:b2:32:cd:94:30:ea:63:5c:be:57:ef:5f:2d:e1:d4:45:
         b1:0d:b2:59:bb:94:93:59:2f:96:70:c5:89:a8:a6:b0:1d:40:
         70:01:29:4b:99:65:37:48:a0:e9:84:df:39:92:e8:6b:01:e1:
         d2:ff:34:0e:e1:6b:75:33:ce:ff:c9:01:89:15:7f:37:80:43:
         66:90:5e:aa:6d:4f:cc:d9:ef:5f:65:fb:bf:14:7f:ed:e2:57:
         4b:89:74:ce:d1:b3:ae:83:b3:28:f3:2e:0c:a8:bd:3d:49:47:
         4f:98:b9:a4:92:a5:1a:69:83:10:04:e9:9f:27:b8:08:11:9d:
         25:86:23:de:56:78:a3:d5:2a:44:89:9a:af:e6:94:01:da:6f:
         53:43:92:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNGNjMxMTAvBgNVBAUTKEM5NDQ4MUNBRDAwRUZCMURFQTdBOTM5Q0JFMjlBOEY0
NUYyNUUyMEIwHhcNMjUxMTI3MDAxNzM5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTI3OThhMy0wNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqk79m46wEHA8WD+xhJzu9kU7gU0fgHyqnZ59iZkp5MkhFG6Xv0AGSL2J7QZg
9WCxR4BUokYce0Btdl7Oh0sycJnsNya27iZlXO7QPGKcfeuiFnr9PbqRg28Bgsjs
AxsMohPbVgH4/MGSilMgq1f89qLy+FD/Te9PAJTNqhibwxcrIS7j9OvlhQaMZ7rH
yDWpd7iHE88h4tK04PwWwzBEQOYuZ9FW7HFYrlYrg7jHc3Z5a9zLGlTUgl6F6+On
nAlBByZCSop7PfrEX5R+LEY5eR28gjTd4jshWOQUufmdGA5Z/pBbMXCouIZtJrTC
q+PZio0/2d/8thlaUnNE+H5FnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBEAFLui
uEOLLVkO5beLzj58KQtGMB8GA1UdIwQYMBaAFMlEgcrQDvsd6nqTnL4pqPRfJeIL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0Y2My81MTlCNjRBNjQw
RUMxMUVEQTg4RUI1MzNDNEY5QUUwMi95VVNCeXRBTy14M3FlcE9jdmltbzlGOGw0
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lVU0J5dEFPLXgzcWVwT2N2aW1vOUY4bDRncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNGNjMvNTE5QjY0QTY0MEVDMTFFREE4OEVCNTMzQzRGOUFFMDIvMDNEOERDNEE0
MEYwMTFFREFENzg5RTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnDcIwDQQCAAIwBwMFACQAryAwDQYJKoZIhvcNAQELBQAD
ggEBAJvGQ2/2pwy6ezRI5oPs3YddAhNo/+DyC+EQ/pQ0S7DZQBVgwGTFa5WNeB5A
nAhLy0CgdlruAirFuuJIFLN1MCIz6Byzs07PDRd1QeODlHMOBcMyaoiWIDeV4UW2
WTfmzI2o1L21rWzSpNAPihYUsjLNlDDqY1y+V+9fLeHURbENslm7lJNZL5ZwxYmo
prAdQHABKUuZZTdIoOmE3zmS6GsB4dL/NA7ha3Uzzv/JAYkVfzeAQ2aQXqptT8zZ
719l+78Uf+3iV0uJdM7Rs66DsyjzLgyovT1JR0+YuaSSpRppgxAE6Z8nuAgRnSWG
I95WeKPVKkSJmq/mlAHab1NDkjk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:55 2025 by rpki-client