This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa
File:                     969AE080A14211EC8C49D660C4F9AE02.roa (raw, json)
Hash identifier:          b9iBKweDQpw3WvJOHZ5pnqPC35ef5TOK2GSHDPRSqes=
Subject key identifier:   C3:DB:BF:2F:80:F6:1C:E5:0A:EC:83:8A:76:A6:0C:CE:67:59:16:15
Certificate issuer:       /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial:       044F
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa
Signing time:             Sat 08 Nov 2025 10:01:37 +0000
ROA not before:           Sat 08 Nov 2025 10:01:37 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     149419
IP address blocks:        103.178.216.0/23 maxlen: 23
                          103.178.216.0/24 maxlen: 24
                          103.178.217.0/24 maxlen: 24
                          2001:df0:4440::/48 maxlen: 48
                          2402:3720::/33 maxlen: 33
                          2402:3720:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
                          rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 21:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
        Validity
            Not Before: Nov  8 10:01:37 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=690f1500-5546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:dd:82:f2:1b:85:fd:d1:64:2b:c0:80:91:
                    7b:84:e4:d2:42:f3:28:07:40:13:f3:02:c5:92:a4:
                    e9:e2:b2:fb:0a:cf:32:bf:3d:c5:33:04:0a:d8:b7:
                    ec:ae:aa:11:28:7a:7a:43:91:63:98:ef:2a:36:e5:
                    a3:61:85:b0:4a:e8:48:0c:a9:22:fa:08:33:f8:1e:
                    35:65:4f:e8:8c:b2:28:52:7f:97:9d:0b:61:18:d3:
                    4a:2c:7e:32:36:2e:76:a7:6a:db:00:61:3b:02:f8:
                    f1:a7:5c:13:e3:59:96:1c:3a:34:c8:75:cc:f8:90:
                    22:2b:4f:b9:37:f9:0d:3b:66:41:74:36:16:4f:24:
                    8f:c0:56:40:78:61:3d:31:77:c0:bf:e5:f0:4f:36:
                    76:5a:6e:c6:45:56:a9:fe:93:2b:90:ce:40:ad:65:
                    1c:da:9e:3e:20:46:bb:17:9d:81:cd:93:94:d1:c2:
                    38:73:8b:96:3a:c9:6c:46:64:69:af:6b:c0:75:82:
                    cb:df:9d:9f:13:71:ab:94:93:83:25:20:d9:0a:29:
                    b3:38:0c:97:cc:e6:f0:f8:1d:e0:f1:62:b4:81:43:
                    e7:ef:af:d0:6a:f7:34:27:5a:0d:be:69:6d:a5:85:
                    9c:a5:c8:80:ca:52:a8:77:c6:95:92:f9:ed:dc:30:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DB:BF:2F:80:F6:1C:E5:0A:EC:83:8A:76:A6:0C:CE:67:59:16:15
            X509v3 Authority Key Identifier:
                keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/969AE080A14211EC8C49D660C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.216.0/23
                IPv6:
                  2001:df0:4440::/48
                  2402:3720::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:03:ca:ac:95:63:38:ac:b2:2e:50:44:2e:74:5f:4e:37:04:
         1b:ef:96:30:e2:0e:a0:24:cc:45:7f:ce:fc:a7:70:c4:1e:50:
         7d:ce:7e:f4:b1:76:9c:d0:52:39:2b:e7:4f:cf:ca:32:5c:f2:
         fc:94:4f:e6:f3:98:36:17:94:63:11:23:d6:f2:51:5c:d6:0e:
         bd:ce:5e:93:34:42:0f:c8:ab:82:39:3d:15:8c:49:45:5e:5b:
         95:96:39:29:75:f0:ff:f9:f6:4a:8b:73:6f:fd:48:db:9a:17:
         7d:69:1a:38:f7:c2:41:54:7e:3a:e2:f1:98:d1:aa:45:7f:38:
         21:b1:c5:30:bc:41:29:81:cb:2a:db:9e:a0:fa:bc:b7:45:13:
         b3:e5:13:b8:b0:d9:df:77:c3:94:b4:6c:c6:96:57:e3:a5:44:
         04:f8:a4:ad:ce:b4:c6:c5:c3:b8:1e:bc:34:31:18:1d:28:a2:
         61:a9:43:71:28:c9:b4:f8:5b:56:00:af:f3:35:09:0f:78:75:
         c7:23:83:95:e2:82:98:f6:ae:b4:ea:2e:3b:0d:41:c2:1d:ec:
         7a:9a:cb:4b:9a:f0:86:b0:09:ad:cb:9d:25:ff:3a:d0:d3:a6:
         f4:7e:a2:48:e1:fa:08:a9:1d:f8:71:40:35:1c:b7:ea:34:37:
         a2:ba:d9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:23 2025 by rpki-client