This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa
File:                     6339493A516311ED90F04711C4F9AE02.roa (raw, json)
Hash identifier:          EnQQRsdbuh6a9LFGDXuyZNBkPFb6g4Js7d+vXOGm2IY=
Subject key identifier:   BF:96:11:AB:E9:43:B7:B4:4E:05:CC:08:88:FD:21:FA:4F:4D:34:DE
Certificate issuer:       /CN=A911A702/serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
Certificate serial:       06AE
Authority key identifier: 88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa
Signing time:             Thu 20 Nov 2025 21:42:57 +0000
ROA not before:           Thu 20 Nov 2025 21:42:57 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     53587
IP address blocks:        45.64.244.0/22 maxlen: 24
                          103.242.108.0/22 maxlen: 22
                          103.242.108.0/24 maxlen: 24
                          103.242.109.0/24 maxlen: 24
                          103.242.110.0/24 maxlen: 24
                          103.242.111.0/24 maxlen: 24
                          2401:9c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl
                          rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A702, serialNumber=88D1C994E8108FC0A533DF4BB8E2CE8D1C4B9F17
        Validity
            Not Before: Nov 20 21:42:57 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=691f8b61-5ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:d6:41:71:c8:ae:de:61:43:d2:d9:89:16:
                    ca:3b:8b:54:5d:b6:12:d2:36:3e:48:55:6b:c5:b4:
                    a8:9d:b8:b2:c3:c0:1d:ac:9b:a3:cb:bb:dc:b2:72:
                    24:78:dc:94:9d:e9:71:bd:5b:1d:39:ac:eb:9d:bc:
                    53:95:f3:18:24:d8:f5:07:e7:e1:51:ae:03:74:75:
                    8f:70:99:82:d8:37:7b:4c:41:ba:7e:6f:03:dd:4a:
                    f7:ca:8e:10:67:67:a2:21:02:30:9e:6a:58:23:63:
                    53:be:26:d6:6b:32:9e:ce:21:fe:2a:d6:d0:76:4b:
                    2f:37:dd:79:8f:9e:19:1b:43:63:d4:0e:11:a1:83:
                    c0:84:11:9c:23:d1:72:2c:79:05:57:ac:73:20:43:
                    80:5c:92:74:44:bf:17:83:7a:e3:eb:3c:d1:ab:b6:
                    de:86:5f:8b:bf:ef:4f:bf:14:49:28:69:4d:57:3c:
                    3a:d3:7f:b2:13:47:c3:bf:73:f9:82:73:87:37:1a:
                    74:2c:00:4e:9e:a2:73:5b:ae:da:eb:23:6a:b3:c6:
                    24:fa:e3:5c:aa:cf:9f:4f:24:b4:d7:b4:fb:0d:b6:
                    fb:d4:a6:cf:e3:08:d0:0e:cd:3c:40:8e:08:68:cd:
                    b3:88:c3:4b:4e:91:b9:92:df:14:ea:6c:be:2f:77:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:96:11:AB:E9:43:B7:B4:4E:05:CC:08:88:FD:21:FA:4F:4D:34:DE
            X509v3 Authority Key Identifier:
                keyid:88:D1:C9:94:E8:10:8F:C0:A5:33:DF:4B:B8:E2:CE:8D:1C:4B:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/iNHJlOgQj8ClM99LuOLOjRxLnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iNHJlOgQj8ClM99LuOLOjRxLnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A702/939CAE2C8DD911EB8EFB4158C4F9AE02/6339493A516311ED90F04711C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.244.0/22
                  103.242.108.0/22
                IPv6:
                  2401:9c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:87:fc:46:e7:8c:2f:94:c2:85:85:13:b3:84:50:46:a2:
         da:fd:f6:4f:ef:2b:25:ac:08:f3:b3:9a:d3:50:50:cd:6c:96:
         75:6c:57:c9:4d:fc:71:5a:c0:aa:8b:e4:55:f9:33:32:e3:e1:
         f1:56:60:61:e2:87:83:fb:56:ec:0b:c4:e8:bb:9c:a7:2d:d3:
         d1:34:da:36:de:d4:8a:f5:79:5c:dd:52:ac:dc:ba:8e:d5:23:
         59:b8:27:ff:05:f8:8c:48:9b:b7:bc:bb:0c:22:b3:c4:3c:65:
         18:66:a6:e6:52:ce:7c:42:c8:52:7f:00:0c:25:1a:cb:cc:ac:
         5b:c7:06:ee:10:64:2b:93:7d:83:fb:36:86:c1:23:e6:f9:c5:
         6f:47:3a:48:0f:ee:44:b1:01:b5:d1:99:50:c3:db:d8:a5:4f:
         0b:24:4b:91:b7:68:5d:f0:3b:a2:15:97:ff:e1:77:84:0c:84:
         18:14:5d:17:41:af:91:a2:3c:85:25:de:85:9a:ae:21:f1:5f:
         68:24:26:ca:1d:0a:35:12:f9:65:6c:98:3a:2b:19:30:0c:2d:
         40:f9:66:3c:86:a0:7d:54:ed:f4:3f:b2:98:65:41:e4:e5:6e:
         cf:15:a2:c0:db:da:06:16:10:c4:91:aa:d6:02:5c:f0:24:ea:
         9b:12:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:41:39 2025 by rpki-client