This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa
File:                     EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (raw, json)
Hash identifier:          ukdO87WAf/HOAmSfdD0XwhgfXedlsv2aXlEz1cOk5UE=
Subject key identifier:   04:60:0B:8B:F8:81:FE:E4:9C:CC:A5:1A:21:81:5A:C0:93:F3:8B:2A
Certificate issuer:       /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial:       179D
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa
Signing time:             Tue 02 Dec 2025 05:22:45 +0000
ROA not before:           Tue 02 Dec 2025 05:22:45 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     137255
IP address blocks:        103.106.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
                          rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 16:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6045 (0x179d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
        Validity
            Not Before: Dec  2 05:22:45 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=692e77a4-0e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b9:47:59:cb:33:70:e8:d2:e4:00:dc:36:e9:
                    9c:4e:69:1d:41:f4:25:0c:3f:32:0d:f9:db:99:58:
                    63:f5:08:4f:6a:82:32:bf:87:62:4e:3f:5c:3e:2f:
                    c2:fd:ca:80:77:1d:c3:fa:97:27:af:65:14:fa:c7:
                    bf:c4:6e:44:fb:f9:aa:de:49:3c:59:a1:79:c3:e1:
                    e8:ee:78:02:f8:ad:c3:b4:ef:5f:94:89:85:c7:67:
                    22:84:b9:04:c3:2e:00:63:f7:2d:f0:a9:1d:9e:8d:
                    53:30:57:8e:ea:5a:28:e7:8f:e5:bd:78:1b:28:b5:
                    7b:74:e6:e9:f3:fc:24:1f:cb:cf:54:b9:dd:ee:3e:
                    b9:5a:7e:6b:f7:e7:c4:e3:73:23:6f:22:65:58:2d:
                    45:14:4b:77:c4:5c:ae:2e:8f:1e:fa:0e:f6:21:f8:
                    05:cf:15:17:cf:37:79:8d:fb:4b:6f:25:e1:21:87:
                    1e:fd:1e:2d:7f:f5:1f:4c:c0:86:a7:5b:5e:81:2b:
                    54:76:5a:e1:3d:fa:2b:ee:6d:12:79:ec:3e:38:83:
                    fb:50:29:f4:1c:fd:2a:69:21:8a:fb:33:a4:40:5f:
                    3c:a0:50:66:43:b3:6c:05:76:e8:c5:a1:08:04:d2:
                    94:0b:6d:15:0e:82:b2:2a:89:e1:04:63:41:b3:e9:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:60:0B:8B:F8:81:FE:E4:9C:CC:A5:1A:21:81:5A:C0:93:F3:8B:2A
            X509v3 Authority Key Identifier:
                keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:5f:23:cd:5b:ef:72:e8:ed:bc:6e:fd:83:dd:85:14:79:
         df:04:59:59:17:e5:1e:19:a7:4c:86:ab:ea:ee:be:04:60:e6:
         7a:30:20:b7:af:60:21:65:ee:16:20:d7:43:ee:f1:7c:92:59:
         68:5c:8b:a1:3f:1e:3c:e5:f4:6a:d7:af:81:dd:90:70:bd:05:
         f7:fd:4e:04:86:a2:99:bb:0b:36:0b:1c:aa:b4:18:19:a3:65:
         8a:d6:dd:a6:f0:91:56:53:f3:bd:60:d0:88:c7:c2:06:95:6e:
         04:f2:15:99:dc:f1:e6:02:7e:dc:2b:3f:30:a7:4a:8a:a3:88:
         85:9b:53:7a:b4:ff:72:4a:fb:a5:a1:fa:a5:49:29:9c:85:2a:
         88:2d:62:8b:a6:57:53:34:07:c6:a5:37:b5:7b:7d:da:ad:46:
         1b:9e:6e:d1:71:c6:a0:7b:c7:33:28:ad:ac:62:07:37:05:86:
         91:4f:c4:b9:c8:b9:0b:2a:53:45:95:2d:24:e0:a4:18:65:9b:
         f6:1e:82:11:b7:c1:32:55:a3:66:5c:25:96:76:7e:0d:11:45:
         7b:87:ca:7f:ee:b6:df:4e:bf:a0:29:d8:6c:3b:77:76:f8:39:
         06:33:85:89:cf:38:d0:68:45:19:a2:f4:bf:7f:c1:ed:3f:95:
         a3:94:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:37:14 2025 by rpki-client