This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6F3FE776CF9511F09003FA4DC4F9AE02.roa
File:                     6F3FE776CF9511F09003FA4DC4F9AE02.roa (raw, json)
Hash identifier:          dccnAsVRG5F4BLVx9qqI8mfwjXOuUJp1z+4BKIb0lIY=
Subject key identifier:   32:05:32:B8:55:FB:21:89:01:6A:40:10:FE:35:9D:E2:AF:72:1E:6C
Certificate issuer:       /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial:       07DC
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6F3FE776CF9511F09003FA4DC4F9AE02.roa
Signing time:             Tue 02 Dec 2025 15:41:57 +0000
ROA not before:           Tue 02 Dec 2025 15:41:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     198949
IP address blocks:        103.29.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
                          rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 20:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
        Validity
            Not Before: Dec  2 15:41:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=692f08c5-769c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:8b:d9:ff:64:7b:28:ef:0e:3e:6c:6e:a7:
                    65:0e:6c:48:7a:3c:36:6e:17:e3:4d:c6:3a:97:af:
                    15:7c:d0:51:a6:da:a3:22:6b:92:1a:c7:23:df:84:
                    43:b5:57:a8:7d:0d:e9:ea:cd:c4:d8:3c:7f:83:02:
                    9d:58:2e:81:c8:d5:8e:f6:dc:e5:4f:ae:2d:2e:b4:
                    83:13:af:12:94:0e:0e:f1:9d:2c:46:3e:f4:5d:fd:
                    6e:3c:2d:47:ea:13:25:4c:04:4d:cc:5b:ea:04:e3:
                    fd:11:ed:25:6f:e3:16:85:d3:c8:e3:48:0f:f3:84:
                    ec:b7:8c:d5:ce:6a:f7:b2:8d:1e:51:00:24:20:e1:
                    18:12:5a:1b:35:73:56:26:de:23:6b:32:ee:9a:71:
                    2d:f7:3c:a5:7d:ea:c4:0d:4f:95:af:2c:bc:a0:66:
                    bc:6a:97:da:17:c2:67:98:50:e8:b1:ac:40:49:8b:
                    68:0a:16:6a:9a:cf:aa:4f:bf:8e:3b:50:77:bb:97:
                    1b:6d:d6:a8:86:15:02:7a:a7:40:f8:7d:48:a0:66:
                    11:96:77:71:ef:18:8f:eb:99:41:fa:3d:4f:4e:25:
                    15:9c:4c:dd:59:08:40:c7:96:1b:b3:6d:19:d1:31:
                    64:94:06:1c:e2:f8:a8:b4:3f:73:7d:37:90:6b:5c:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:05:32:B8:55:FB:21:89:01:6A:40:10:FE:35:9D:E2:AF:72:1E:6C
            X509v3 Authority Key Identifier:
                keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/6F3FE776CF9511F09003FA4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:bf:5f:c8:df:88:7f:11:55:b7:f8:89:d3:11:b4:9c:9b:
         48:3e:1a:77:8b:ec:d4:b4:2a:2f:b0:0a:dc:55:72:19:f7:41:
         bc:52:72:02:2a:00:b2:8d:f5:aa:0a:8b:08:be:17:3d:b4:47:
         7a:28:a1:48:b1:5c:ff:8a:2d:20:c2:a1:51:e8:e7:23:53:62:
         7c:bf:89:95:d8:6f:71:f4:f8:a8:87:5b:74:19:ea:18:89:f0:
         a6:aa:f1:dc:0f:52:e4:5b:36:80:c4:fa:e6:1b:3f:88:5b:52:
         ed:00:a7:60:b2:2c:60:8c:38:fa:16:be:6d:6f:9a:b6:39:d3:
         3d:03:6c:8d:9b:26:ff:01:b3:e6:9a:72:0a:4e:c8:23:25:e4:
         cc:e2:1d:95:34:79:ab:1b:f4:e7:f0:99:62:02:a0:5b:62:b6:
         94:5b:94:e9:2d:7c:24:5b:1c:ae:0e:80:7d:51:88:1d:da:90:
         a7:9e:c7:6e:2c:28:45:a7:5b:eb:12:c6:a3:56:62:47:74:ca:
         6b:97:df:06:8f:56:75:56:64:ff:a0:92:b8:2d:2e:77:7b:1d:
         5f:4a:b6:ac:32:fe:7a:5a:c1:6f:5a:cf:55:8a:99:54:ca:74:
         80:ae:a4:4a:c0:9d:0e:45:a7:d7:0c:a4:0c:0a:6d:cc:a2:ad:
         cf:f0:81:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:26:16 2025 by rpki-client